| Giorgi Lekveishvili | 8c99d62 | 2023-05-30 14:40:50 +0400 | [diff] [blame] | 1 | {{- if (include "postgresql.createTlsSecret" . ) }} |
| 2 | {{- $secretName := printf "%s-crt" (include "common.names.fullname" .) }} |
| 3 | {{- $ca := genCA "postgresql-ca" 365 }} |
| 4 | {{- $fullname := include "common.names.fullname" . }} |
| 5 | {{- $releaseNamespace := .Release.Namespace }} |
| 6 | {{- $clusterDomain := .Values.clusterDomain }} |
| 7 | {{- $primaryHeadlessServiceName := include "postgresql.primary.svc.headless" . }} |
| 8 | {{- $readHeadlessServiceName := include "postgresql.readReplica.svc.headless" . }} |
| 9 | {{- $altNames := list (printf "*.%s.%s.svc.%s" $fullname $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $fullname $releaseNamespace $clusterDomain) (printf "*.%s.%s.svc.%s" $primaryHeadlessServiceName $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $primaryHeadlessServiceName $releaseNamespace $clusterDomain) (printf "*.%s.%s.svc.%s" $readHeadlessServiceName $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $readHeadlessServiceName $releaseNamespace $clusterDomain) $fullname }} |
| 10 | {{- $cert := genSignedCert $fullname nil $altNames 365 $ca }} |
| 11 | apiVersion: v1 |
| 12 | kind: Secret |
| 13 | metadata: |
| 14 | name: {{ $secretName }} |
| 15 | namespace: {{ .Release.Namespace | quote }} |
| 16 | labels: {{- include "common.labels.standard" . | nindent 4 }} |
| 17 | {{- if .Values.commonLabels }} |
| 18 | {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }} |
| 19 | {{- end }} |
| 20 | {{- if .Values.commonAnnotations }} |
| 21 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} |
| 22 | {{- end }} |
| 23 | type: kubernetes.io/tls |
| 24 | data: |
| 25 | tls.crt: {{ include "common.secrets.lookup" (dict "secret" $secretName "key" "tls.crt" "defaultValue" $cert.Cert "context" $) }} |
| 26 | tls.key: {{ include "common.secrets.lookup" (dict "secret" $secretName "key" "tls.key" "defaultValue" $cert.Key "context" $) }} |
| 27 | ca.crt: {{ include "common.secrets.lookup" (dict "secret" $secretName "key" "ca.crt" "defaultValue" $ca.Cert "context" $) }} |
| 28 | {{- end }} |