search

vshn / appcat-service-postgresql

AppCat Service Provider for PostgreSQL
https://vshn.github.io/appcat-service-postgresql/
BSD 3-Clause "New" or "Revised" License
0 stars 0 forks source link

Allow existing secret to be used for webhook TLS secret #70

Closed zugao closed 2 years ago

zugao commented 2 years ago

Summary

As Project Syn User\ I want a new helm value webhook.existingSecret\ So that I can save validation webhook certificates in a k8s secret

Context

During testing of application v0.1.7 with it's syn component we realised that we are missing validation webhook certificates. The missing certificates made impossible for ArgoCD to deploy the Appcat Operator. After a brainstorm we realised that we will need an alternative secure way to providing these certificates, via a secret.

Out of Scope

Further links

Acceptance Criteria

Given the AppCat Helm Chart
When when validation webhooks certificates are referenced by `webhook.existingSecret`
Then application will use those secrets during deployment

The fields needed in the secret:

tls.crt:: foo
tls.key: bar

Currently it already creates a secret: https://github.com/vshn/appcat-service-postgresql/blob/master/charts/provider-postgresql/templates/secret.yaml

Implementation Ideas

No response