search

puppetlabs / puppetserver-helm-chart

The Helm Chart for Puppet Server
Apache License 2.0
51 stars 56 forks source link

Restic: Fix breaking typo, add ability for custom CA certs #197

Closed ldaneliukas closed 10 months ago

ldaneliukas commented 10 months ago

Bugfix

Due to a typo in the volumes within the restic backup template, enabling said backups will break the chart rendering it undeployable:

Error: UPGRADE FAILED: template: umbrella-chart/charts/puppetserver/templates/puppetserver-ca-backup-cronjob.yaml:75:37: executing "umbrella-chart/charts/puppetserver/templates/puppetserver-ca-backup-cronjob.yaml" at <{{template "puppetserver.persitence.ca.claimName" .}}>: template "puppetserver.persitence.ca.claimName" not defined

Fixing the typo.

Feature

Add ability to mount a pre-existing configMap that contains ca-certificates.crt which will replace the existing file in the Restic container. This is needed for implementations that are under a self-signed certificate, e.g. an on premise S3 cluster based on Ceph or a S3 based on minio with custom certs.

Tested with an on-prem S3 implementation - errors out due to self-signed certs by default, works as expected when passing a custom CA via caConfigMap.