sse-secure-systems / connaisseur

An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster
https://sse-secure-systems.github.io/connaisseur/
Apache License 2.0
436 stars 61 forks source link

fix: correctly place connaisseur-env-secret in deployment yaml #1735

Closed edison-vflow closed 3 weeks ago

edison-vflow commented 3 weeks ago

From chart version 2.4, a refactor was made that places connaisseur-env-secret under env instead of under envFrom in the deployment.This breaks cosign validations that require custom secrets like ECR Relevant helm template commands were run to ensure chart compiles correctly with kubernetes.deployment.envs values populated and not populated

Related issue: https://github.com/sse-secure-systems/connaisseur/issues/1734

phbelitz commented 3 weeks ago

closing in favor of #1736