Skip to content

Commit 6a8878e

Browse files
committed
helm: venafi agent: use the simpler /etc/ssl/certs/cabundle
Because Go loads all certs under /etc/ssl/certs, not just /etc/ssl/certs/ca-certificates.crt.
1 parent bcd9ab1 commit 6a8878e

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

deploy/charts/venafi-kubernetes-agent/values.yaml

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -99,9 +99,6 @@ extraArgs: []
9999
# name: cabundle
100100
# optional: false
101101
# defaultMode: 0644
102-
# items:
103-
# - key: cabundle
104-
# path: ca-certificates.crt
105102
#
106103
# In order to create the ConfigMap, you can use the following command:
107104
#
@@ -110,12 +107,14 @@ extraArgs: []
110107
volumes: []
111108

112109
# -- Additional volume mounts to add to the Venafi Kubernetes Agent container.
113-
# This is useful for mounting a custom CA bundle. For example:
110+
# This is useful for mounting a custom CA bundle. Any PEM certificate mounted
111+
# under /etc/ssl/certs will be loaded by the Venafi Kubernetes Agent. For
112+
# example:
114113
#
115114
# volumeMounts:
116115
# - name: cabundle
117-
# mountPath: /etc/ssl/certs/ca-certificates.crt
118-
# subPath: ca-certificates.crt
116+
# mountPath: /etc/ssl/certs/cabundle
117+
# subPath: cabundle
119118
# readOnly: true
120119
volumeMounts: []
121120

0 commit comments

Comments
 (0)