mirror of https://git.rancher.io/charts
34 lines
1.3 KiB
YAML
34 lines
1.3 KiB
YAML
{{- if .Values.controller.enabled -}}
|
|
{{- if or (eq "true" (toString .Values.autoGenerateCert)) (and .Values.controller.certificate.key .Values.controller.certificate.certificate) }}
|
|
{{- $cert := (dict) }}
|
|
{{- if and .Values.controller.certificate.key .Values.controller.certificate.certificate }}
|
|
{{- $cert = (dict "Key" .Values.controller.certificate.key "Cert" .Values.controller.certificate.certificate ) }}
|
|
{{- else }}
|
|
{{- $cn := "neuvector" }}
|
|
{{- $cert = genSelfSignedCert $cn nil (list $cn) (.Values.defaultValidityPeriod | int) -}}
|
|
{{- end }}
|
|
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: neuvector-controller-secret
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
chart: {{ template "neuvector.chart" . }}
|
|
release: {{ .Release.Name }}
|
|
type: Opaque
|
|
data:
|
|
ssl-cert.key: {{ include "neuvector.secrets.lookup" (dict "namespace" .Release.Namespace "secret" "neuvector-controller-secret" "key" "ssl-cert.key" "defaultValue" $cert.Key) }}
|
|
ssl-cert.pem: {{ include "neuvector.secrets.lookup" (dict "namespace" .Release.Namespace "secret" "neuvector-controller-secret" "key" "ssl-cert.pem" "defaultValue" $cert.Cert) }}
|
|
{{- end}}
|
|
---
|
|
{{- if .Values.internal.certmanager.enabled }}
|
|
{{- else if .Values.internal.autoGenerateCert }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: neuvector-internal-certs
|
|
type: Opaque
|
|
{{- end}}
|
|
{{- end}}
|