f307cc32af
Updates CA name generation to be configurable allowing the swapping in of a CA. ### Motivation We recently swapped out cert issuers and found that with the current helm chart we were unable to do a hot swap without downtime (via helm) because the CA cert name is not configurable. Being able to change the name of the CA allows us to create a new CA first -> Validate -> then swap over in follow up apply/release. ### Modifications Adds the ability to specify the suffix used to generate the CA name (not the whole name in order to preserve back compatibility regardless of the release name.)
70 lines
1.7 KiB
Smarty
70 lines
1.7 KiB
Smarty
{{/*
|
|
Define the pulsar toolset service
|
|
*/}}
|
|
{{- define "pulsar.toolset.service" -}}
|
|
{{ template "pulsar.fullname" . }}-{{ .Values.toolset.component }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Define the toolset hostname
|
|
*/}}
|
|
{{- define "pulsar.toolset.hostname" -}}
|
|
${HOSTNAME}.{{ template "pulsar.toolset.service" . }}.{{ template "pulsar.namespace" . }}.svc.{{ .Values.clusterDomain }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Define toolset zookeeper client tls settings
|
|
*/}}
|
|
{{- define "pulsar.toolset.zookeeper.tls.settings" -}}
|
|
{{- if and .Values.tls.enabled .Values.tls.zookeeper.enabled -}}
|
|
/pulsar/keytool/keytool.sh toolset {{ template "pulsar.toolset.hostname" . }} true;
|
|
{{- end -}}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Define toolset tls certs mounts
|
|
*/}}
|
|
{{- define "pulsar.toolset.certs.volumeMounts" -}}
|
|
{{- if and .Values.tls.enabled .Values.tls.zookeeper.enabled }}
|
|
- name: toolset-certs
|
|
mountPath: "/pulsar/certs/toolset"
|
|
readOnly: true
|
|
- name: ca
|
|
mountPath: "/pulsar/certs/ca"
|
|
readOnly: true
|
|
{{- if .Values.tls.zookeeper.enabled }}
|
|
- name: keytool
|
|
mountPath: "/pulsar/keytool/keytool.sh"
|
|
subPath: keytool.sh
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Define toolset tls certs volumes
|
|
*/}}
|
|
{{- define "pulsar.toolset.certs.volumes" -}}
|
|
{{- if and .Values.tls.enabled .Values.tls.zookeeper.enabled }}
|
|
- name: toolset-certs
|
|
secret:
|
|
secretName: "{{ .Release.Name }}-{{ .Values.tls.toolset.cert_name }}"
|
|
items:
|
|
- key: tls.crt
|
|
path: tls.crt
|
|
- key: tls.key
|
|
path: tls.key
|
|
- name: ca
|
|
secret:
|
|
secretName: "{{ .Release.Name }}-{{ .Values.tls.ca_suffix }}"
|
|
items:
|
|
- key: ca.crt
|
|
path: ca.crt
|
|
{{- if .Values.tls.zookeeper.enabled }}
|
|
- name: keytool
|
|
configMap:
|
|
name: "{{ template "pulsar.fullname" . }}-keytool-configmap"
|
|
defaultMode: 0755
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|