Skip to content

Git sync: add first class support for CAs #820

@razvan

Description

@razvan

Issue checklist

Discussion: https://discord.com/channels/796665978481803304/1463911019272339607/1466094766784774155

Users cannot add CAs to git sync commands by means of managed fields.
The documentation is slightly confusing because the examples use a /tmp/ca-cert folder without mentioning where it is supposed to come from.
I thought it comes from customComponentsGitsync.[*].credentialsSecret but this is not the case.

The work-around is to :

  1. Add a new spec.clusterConfig.extraVolumes entry that points to a secret/configmap with the CA.
  2. Add pod overrides to mount that volume in the init container for git sync.
  3. Same as above for the main container.

This overly complicated, hard to maintain and exposes too much product internals.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status

Development: In Progress

Status

In Progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions