Skip to content

Commit 77e8d9e

Browse files
ddelnanoddelnano
authored
[cloud] Replace service-tls-certs usage with cert-manager compatible secret (#2392)
Summary: [cloud] Replace service-tls-certs usage with cert-manager compatible secret This is dependent on #2391. This updates all of cloud manifests to use the newer, cert-manager compatible style secret. Relevant Issues: N/A Type of change: /kind cleanup Test Plan: Used these changes in https://github.com/k8sstormcenter/pixie to deploy a Pixie Cloud that uses cert-manager service tls certs Changelog Message: Update Pixie cloud's service tls certs to use cert-manager compatible secrets Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
1 parent 7622689 commit 77e8d9e

20 files changed

Lines changed: 344 additions & 40 deletions

‎k8s/cloud/base/api_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -158,8 +158,24 @@ spec:
158158
type: RuntimeDefault
159159
volumes:
160160
- name: certs
161-
secret:
162-
secretName: service-tls-certs
161+
projected:
162+
sources:
163+
- secret:
164+
name: service-tls-server-certs
165+
items:
166+
- key: tls.crt
167+
path: server.crt
168+
- key: tls.key
169+
path: server.key
170+
- key: ca.crt
171+
path: ca.crt
172+
- secret:
173+
name: service-tls-client-certs
174+
items:
175+
- key: tls.crt
176+
path: client.crt
177+
- key: tls.key
178+
path: client.key
163179
- name: vizier-image-secret
164180
secret:
165181
secretName: vizier-image-secret

‎k8s/cloud/base/artifact_tracker_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -86,8 +86,24 @@ spec:
8686
type: RuntimeDefault
8787
volumes:
8888
- name: certs
89-
secret:
90-
secretName: service-tls-certs
89+
projected:
90+
sources:
91+
- secret:
92+
name: service-tls-server-certs
93+
items:
94+
- key: tls.crt
95+
path: server.crt
96+
- key: tls.key
97+
path: server.key
98+
- key: ca.crt
99+
path: ca.crt
100+
- secret:
101+
name: service-tls-client-certs
102+
items:
103+
- key: tls.crt
104+
path: client.crt
105+
- key: tls.key
106+
path: client.key
91107
- name: artifact-access-sa
92108
secret:
93109
secretName: artifact-access-sa

‎k8s/cloud/base/auth_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -118,5 +118,21 @@ spec:
118118
type: RuntimeDefault
119119
volumes:
120120
- name: certs
121-
secret:
122-
secretName: service-tls-certs
121+
projected:
122+
sources:
123+
- secret:
124+
name: service-tls-server-certs
125+
items:
126+
- key: tls.crt
127+
path: server.crt
128+
- key: tls.key
129+
path: server.key
130+
- key: ca.crt
131+
path: ca.crt
132+
- secret:
133+
name: service-tls-client-certs
134+
items:
135+
- key: tls.crt
136+
path: client.crt
137+
- key: tls.key
138+
path: client.key

‎k8s/cloud/base/config_manager_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -93,5 +93,21 @@ spec:
9393
type: RuntimeDefault
9494
volumes:
9595
- name: certs
96-
secret:
97-
secretName: service-tls-certs
96+
projected:
97+
sources:
98+
- secret:
99+
name: service-tls-server-certs
100+
items:
101+
- key: tls.crt
102+
path: server.crt
103+
- key: tls.key
104+
path: server.key
105+
- key: ca.crt
106+
path: ca.crt
107+
- secret:
108+
name: service-tls-client-certs
109+
items:
110+
- key: tls.crt
111+
path: client.crt
112+
- key: tls.key
113+
path: client.key

‎k8s/cloud/base/cron_script_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -85,5 +85,21 @@ spec:
8585
type: RuntimeDefault
8686
volumes:
8787
- name: certs
88-
secret:
89-
secretName: service-tls-certs
88+
projected:
89+
sources:
90+
- secret:
91+
name: service-tls-server-certs
92+
items:
93+
- key: tls.crt
94+
path: server.crt
95+
- key: tls.key
96+
path: server.key
97+
- key: ca.crt
98+
path: ca.crt
99+
- secret:
100+
name: service-tls-client-certs
101+
items:
102+
- key: tls.crt
103+
path: client.crt
104+
- key: tls.key
105+
path: client.key

‎k8s/cloud/base/indexer_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -89,8 +89,24 @@ spec:
8989
type: RuntimeDefault
9090
volumes:
9191
- name: certs
92-
secret:
93-
secretName: service-tls-certs
92+
projected:
93+
sources:
94+
- secret:
95+
name: service-tls-server-certs
96+
items:
97+
- key: tls.crt
98+
path: server.crt
99+
- key: tls.key
100+
path: server.key
101+
- key: ca.crt
102+
path: ca.crt
103+
- secret:
104+
name: service-tls-client-certs
105+
items:
106+
- key: tls.crt
107+
path: client.crt
108+
- key: tls.key
109+
path: client.key
94110
- name: es-certs
95111
secret:
96112
secretName: pl-elastic-es-http-certs-internal

‎k8s/cloud/base/metrics_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -71,8 +71,24 @@ spec:
7171
type: RuntimeDefault
7272
volumes:
7373
- name: certs
74-
secret:
75-
secretName: service-tls-certs
74+
projected:
75+
sources:
76+
- secret:
77+
name: service-tls-server-certs
78+
items:
79+
- key: tls.crt
80+
path: server.crt
81+
- key: tls.key
82+
path: server.key
83+
- key: ca.crt
84+
path: ca.crt
85+
- secret:
86+
name: service-tls-client-certs
87+
items:
88+
- key: tls.crt
89+
path: client.crt
90+
- key: tls.key
91+
path: client.key
7692
- name: bq-access-sa
7793
secret:
7894
secretName: bq-access-sa

‎k8s/cloud/base/ory_auth/hydra/hydra_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -209,5 +209,21 @@ spec:
209209
- key: hydra.yml
210210
path: hydra.yml
211211
- name: certs
212-
secret:
213-
secretName: service-tls-certs
212+
projected:
213+
sources:
214+
- secret:
215+
name: service-tls-server-certs
216+
items:
217+
- key: tls.crt
218+
path: server.crt
219+
- key: tls.key
220+
path: server.key
221+
- key: ca.crt
222+
path: ca.crt
223+
- secret:
224+
name: service-tls-client-certs
225+
items:
226+
- key: tls.crt
227+
path: client.crt
228+
- key: tls.key
229+
path: client.key

‎k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -212,5 +212,21 @@ spec:
212212
- key: identity.schema.json
213213
path: identity.schema.json
214214
- name: certs
215-
secret:
216-
secretName: service-tls-certs
215+
projected:
216+
sources:
217+
- secret:
218+
name: service-tls-server-certs
219+
items:
220+
- key: tls.crt
221+
path: server.crt
222+
- key: tls.key
223+
path: server.key
224+
- key: ca.crt
225+
path: ca.crt
226+
- secret:
227+
name: service-tls-client-certs
228+
items:
229+
- key: tls.crt
230+
path: client.crt
231+
- key: tls.key
232+
path: client.key

‎k8s/cloud/base/plugin_deployment.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -90,5 +90,21 @@ spec:
9090
type: RuntimeDefault
9191
volumes:
9292
- name: certs
93-
secret:
94-
secretName: service-tls-certs
93+
projected:
94+
sources:
95+
- secret:
96+
name: service-tls-server-certs
97+
items:
98+
- key: tls.crt
99+
path: server.crt
100+
- key: tls.key
101+
path: server.key
102+
- key: ca.crt
103+
path: ca.crt
104+
- secret:
105+
name: service-tls-client-certs
106+
items:
107+
- key: tls.crt
108+
path: client.crt
109+
- key: tls.key
110+
path: client.key

0 commit comments

Comments
 (0)