Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow loading a CA bundle from trust-manager #12

Open
reknih opened this issue Apr 30, 2024 · 0 comments
Open

Allow loading a CA bundle from trust-manager #12

reknih opened this issue Apr 30, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@reknih
Copy link
Contributor

reknih commented Apr 30, 2024

Is your feature request related to a problem? Please describe.
As described in #10, I want to use the chart with an external database. When connecting to the database, the server emits the following warning:

13:09:21.358 [warning] Description: 'Server authenticity is not verified since certificate path validation is not enabled'
     Reason: 'The option {verify, verify_peer} and one of the options \'cacertfile\' or \'cacerts\' are required to enable this.'

I want to securely connect to the server and validate its certificate.

Describe the solution you'd like
trust-manager is one of the preferred solutions to manage certificates in a Kubernetes cluster. Ideally, I could just specify the name of my Bundle in the values file to automatically have the necessary environment variables and volumes configured.

Describe alternatives you've considered
Allow the user to mount a CA volume via a YAML volume spec from the values file and configure the environment variables of the container accordingly or allow the user to load arbitrary volumes and document what extra environment variables they need to set such that the CA certificates are discovered.

@alexnuttinck alexnuttinck added the enhancement New feature or request label Jun 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants