Azure / kubernetes-keyvault-flexvol

Azure keyvault integration with Kubernetes via a Flex Volume
MIT License
253 stars 83 forks source link

SSL with ISTIO #154

Closed veligithub closed 4 years ago

veligithub commented 4 years ago

Describe the bug During the modification of the istio-ingressgateway:

eployments.extensions "istio-ingressgateway" was not valid:

* : Invalid value: "The edited file failed validation": ValidationError(Deployment.spec.template.spec.volumes[3].flexVolume.secretRef): invalid type for io.k8s.api.core.v1.LocalObjectReference: got "string", expected "map"

Steps To Reproduce

Expected behavior

Key Vault FlexVolume version

Access mode: service principal or pod identity

Kubernetes version

Additional context

veligithub commented 4 years ago

It is coming during the insertion of :

and

  - name: keyvault-certs
    flexVolume:
      driver: "azure/kv"
      secretRef:
        kvcreds
      options:
        usepodidentity: "false"
        keyvaultname: "i have the name of my kv here"
        keyvaultobjectnames: "myprivatekey;mycertificate"
        keyvaultobjecttypes: "key;cert"
        tenantid: "000-0000-000xxx-00000000"
aramase commented 4 years ago

@veligithub this needs to be

      secretRef:
        name: kvcreds
veligithub commented 4 years ago

I am sorry but based on the article https://github.com/Azure/kubernetes-keyvault-flexvol i am using : secretRef: name: kvcreds

nevertheless i have this error