Skip to content
Snippets Groups Projects
Commit 9a6db20d authored by OZGCloud's avatar OZGCloud
Browse files

ozg-3938 enable grpc tls

parent b864d2dc
Branches
Tags
No related merge requests found
...@@ -4,4 +4,4 @@ set -e ...@@ -4,4 +4,4 @@ set -e
helm template ./src/main/helm/ -f src/test/helm-linter-values.yaml helm template ./src/main/helm/ -f src/test/helm-linter-values.yaml
helm lint -f src/test/helm-linter-values.yaml ./src/main/helm/ helm lint -f src/test/helm-linter-values.yaml ./src/main/helm/
cd src/main/helm && helm unittest -f '../../test/helm/**/*test.yaml' . cd src/main/helm && helm unittest -f '../../test/helm/**/*.yaml' .
\ No newline at end of file \ No newline at end of file
...@@ -59,6 +59,8 @@ spec: ...@@ -59,6 +59,8 @@ spec:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: {{ .Release.Name }}
containers: containers:
- env: - env:
- name: SERVICE_BINDING_ROOT
value: "/bindings"
{{- range (.Values.env).grpc }} {{- range (.Values.env).grpc }}
- name: {{ .name }} - name: {{ .name }}
value: {{ .value }} value: {{ .value }}
...@@ -79,7 +81,7 @@ spec: ...@@ -79,7 +81,7 @@ spec:
- name: grpc_client_vorgang-manager-{{ (.Values.routing).targetVorgangManagerName}}_address - name: grpc_client_vorgang-manager-{{ (.Values.routing).targetVorgangManagerName}}_address
value: 'vorgang-manager.{{ coalesce (.Values.routing).targetNamespace .Release.Namespace }}:9090' value: 'vorgang-manager.{{ coalesce (.Values.routing).targetNamespace .Release.Namespace }}:9090'
- name: grpc_client_vorgang-manager-{{ (.Values.routing).targetVorgangManagerName}}_negotiationType - name: grpc_client_vorgang-manager-{{ (.Values.routing).targetVorgangManagerName}}_negotiationType
value: {{ (.Values.routing).negotiationType | default "PLAINTEXT" }} value: {{ (.Values.routing).negotiationType | default "TLS" }}
{{- end }} {{- end }}
{{- with (.Values.env).customList }} {{- with (.Values.env).customList }}
{{ toYaml . | indent 8 }} {{ toYaml . | indent 8 }}
...@@ -150,9 +152,23 @@ spec: ...@@ -150,9 +152,23 @@ spec:
volumeMounts: volumeMounts:
- name: temp-dir - name: temp-dir
mountPath: "/tmp" mountPath: "/tmp"
- name: namespace-ca-cert
mountPath: "/bindings/namespace-certificate"
readOnly: true
volumes: volumes:
- name: temp-dir - name: temp-dir
emptyDir: {} emptyDir: {}
- name: namespace-ca-cert
projected:
sources:
- secret:
name: {{ include "app.namespace" . }}-ca-cert
optional: true
items:
- key: ca.crt
path: ca.crt
- configMap:
name: bindings-type
dnsConfig: {} dnsConfig: {}
dnsPolicy: ClusterFirst dnsPolicy: ClusterFirst
imagePullSecrets: imagePullSecrets:
......
...@@ -49,13 +49,13 @@ tests: ...@@ -49,13 +49,13 @@ tests:
path: spec.template.spec.containers[0].env path: spec.template.spec.containers[0].env
content: content:
name: grpc_client_vorgang-manager-vorgang-manager_negotiationType name: grpc_client_vorgang-manager-vorgang-manager_negotiationType
value: PLAINTEXT value: TLS
- it: validate routing infos - it: validate routing infos
set: set:
routing: routing:
routingStrategy: MULTI routingStrategy: MULTI
fallbackStrategy: FUNDSTELLE fallbackStrategy: FUNDSTELLE
negotiationType: TLS negotiationType: PLAINTEXT
asserts: asserts:
- contains: - contains:
path: spec.template.spec.containers[0].env path: spec.template.spec.containers[0].env
...@@ -71,4 +71,4 @@ tests: ...@@ -71,4 +71,4 @@ tests:
path: spec.template.spec.containers[0].env path: spec.template.spec.containers[0].env
content: content:
name: grpc_client_vorgang-manager-vorgang-manager_negotiationType name: grpc_client_vorgang-manager-vorgang-manager_negotiationType
value: TLS value: PLAINTEXT
\ No newline at end of file \ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment