Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ability to mount custom certs #54

Merged
merged 4 commits into from
Sep 10, 2021
Merged

Conversation

spilchen
Copy link
Collaborator

@spilchen spilchen commented Sep 9, 2021

This provides the ability to mount any number of custom certs in the Vertica container. Each cert will be mounted in a well defined location within the container (/certs/<certName>/<key>). This will be available with a new parameter called spec.certSecrets. A list of Secret names can be specified. All of the Secrets will be mounted under /certs.

Here is an example of a CR that takes advantage of that:

apiVersion: vertica.com/v1beta1
kind: VerticaDB
metadata:
  name: verticadb-sample
spec:
  communal: {…}
  certSecrets:
    - name: mtls
    - name: aws-cert

It specifies two secrets: mtls and aws-cert. The keys within these Secrets will be mounted at /certs/mtls and /certs/aws-cret respectively. If the keys of the secret change, the mount points will be automatically updated to reflect the new value without having to restart the pod.

Closes #31

@spilchen spilchen merged commit 456c703 into vertica:main Sep 10, 2021
@spilchen spilchen deleted the mount-certs branch September 10, 2021 12:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Extra volumes for the vertica containers or operator security functionality
1 participant