ozg-3938 remove subpath

src/main/helm/templates/certificate.yaml

@@ -33,8 +33,8 @@ spec:
   issuerRef:
     name: user-manager-issuer
     kind: Issuer
-  duration: 8760h0m0s
-  renewBefore: 720h0m0s
+  duration: 8760h0m0s # 1 Jahr
+  renewBefore: 5840h0m0s # 8 Monate
   commonName: {{ .Release.Name }}
   dnsNames:
     - "*.{{ .Release.Name }}.{{ include "app.namespace" . }}.svc.cluster.local"

src/main/helm/templates/deployment.yaml

@@ -194,12 +194,7 @@ spec:
         volumeMounts:
           {{- if not .Values.disableGrpcServerTls }}
           - name: user-manager-tls-certificate
-            mountPath: "/user-manager-tls-certificate/tls.crt"
-            subPath: tls.crt
-            readOnly: true
-          - name: user-manager-tls-certificate
-            mountPath: "/user-manager-tls-certificate/tls.key"
-            subPath: tls.key
+            mountPath: "/user-manager-tls-certificate"
             readOnly: true
           {{- end }}
           {{- if not .Values.disableNamespaceTruststore }}

src/main/helm/templates/truststore/init_truststore_rbac.yaml

@@ -57,7 +57,7 @@ rules:
     resources:
       - jobs
     resourceNames:
-      - init-user-manager-truststore-job
+      - create-user-manager-truststore
     verbs:
       - patch
       - get

src/test/helm/certificate_test.yaml

@@ -65,7 +65,7 @@ tests:
     asserts:
       - equal:
           path: spec.renewBefore
-          value: 720h0m0s
+          value: 5840h0m0s
   - it: should have commonName
     asserts:
       - equal:

src/test/helm/deplyoment_cert_bindings_test.yaml

@@ -44,15 +44,7 @@ tests:
            path: spec.template.spec.containers[0].volumeMounts
            content:
              name: user-manager-tls-certificate
-             mountPath: "/user-manager-tls-certificate/tls.crt"
-             subPath: tls.crt
-             readOnly: true
-       - contains:
-           path: spec.template.spec.containers[0].volumeMounts
-           content:
-             name: user-manager-tls-certificate
-             mountPath: "/user-manager-tls-certificate/tls.key"
-             subPath: tls.key
+             mountPath: "/user-manager-tls-certificate"
              readOnly: true
              
   - it: should have volumes for user-manager root certificate

src/test/helm/truststore/init_truststore_rbac_test.yaml

@@ -109,7 +109,7 @@ tests:
             resources:
               - jobs
             resourceNames:
-              - init-user-manager-truststore-job
+              - create-user-manager-truststore
             verbs:
               - patch
               - get