Skip to content

Adding ability for operator to trust a self-signed certificate #200

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Adding ability for operator to trust a self-signed certificate #200

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions charts/connect/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -157,6 +157,7 @@ helm install --set connect.applicationName=connect connect ./connect
| operator.watchNamespace | list | `[]` | A list of namespaces for the 1Password Operator to watch and manage. Use the empty list to watch all namespaces. |
| operator.resources | object | `{}` | The resources requests/limits for the 1Password Operator pod |
| operator.customEnvVars | array | `[]` | Custom environment variables for the 1Password Operator container that are not specified in this helm chart. |
| operator.tls.trust.secret | string | `op-connect-tls` | The name of the secret containing the TLS certificate (tls.crt) used by the 1Password Connect API. This is used if that cert is a self-signed cert that needs to be trusted by the Operator. |

#### Custom Environment Variables

Expand Down
15 changes: 15 additions & 0 deletions charts/connect/templates/operator-deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,12 @@ spec:
tolerations:
{{- toYaml .Values.operator.tolerations | nindent 8 }}
serviceAccountName: {{ .Values.operator.serviceAccount.name }}
volumes:
{{- if .Values.operator.tls.trust.secret }}
- name: tls-trust
secret:
secretName: {{ .Values.operator.tls.trust.secret }}
{{- end }}
containers:
- name: {{ .Values.connect.applicationName }}
image: {{ .Values.operator.imageRepository }}:{{ .Values.operator.version | default "latest" }}
Expand Down Expand Up @@ -83,8 +89,17 @@ spec:
- name: {{ .name }}
value: {{ .value }}
{{- end }}
{{- if .Values.operator.tls.trust.secret }}
- name: SSL_CERT_FILE
value: /tls/trust/tls.crt
{{- end }}
resources:
{{- toYaml .Values.operator.resources | nindent 12 }}
volumeMounts:
{{- if .Values.operator.tls.trust.secret }}
- mountPath: /tls/trust
name: tls-trust
{{- end}}
{{- with .Values.operator.imagePullSecrets }}
imagePullSecrets:
{{- range . }}
Expand Down
9 changes: 9 additions & 0 deletions charts/connect/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -378,6 +378,15 @@ operator:
# value: VARIABLE_VALUE
customEnvVars: []

# 1Password Operator TLS settings
tls:

# 1Password Operator TLS trust settings
trust: {}

# 1Password operator should trust the certificate in this secret
# secret:

# 1Password Acceptance Tests Functionality
acceptanceTests:
enabled: false
Expand Down