Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[installer] Connect custom CA certs with wsman #9239

Merged
merged 1 commit into from
Apr 12, 2022
Merged

Conversation

csweichel
Copy link
Contributor

Description

This PR connects the recent introduction of custom CA certs to the installer with ws-manager.

Related Issue(s)

Fixes #9078

How to test

  • provide a custom CA secret, render using the installer, ensure ws-manager has the secret mounted and in its config map

Release Notes

[ws-manager] Add self-signed certs support

@csweichel csweichel requested a review from a team April 11, 2022 22:29
@github-actions github-actions bot added the team: workspace Issue belongs to the Workspace team label Apr 11, 2022
@sagor999
Copy link
Contributor

/hold for Nit otherwise lgtm

sagor999
sagor999 previously approved these changes Apr 11, 2022
Comment on lines 121 to 123
pod := podSpec.Containers[0]
pod.VolumeMounts = append(pod.VolumeMounts, *mnt)
podSpec.Containers[0] = pod
Copy link
Contributor

@sagor999 sagor999 Apr 11, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit:

Suggested change
pod := podSpec.Containers[0]
pod.VolumeMounts = append(pod.VolumeMounts, *mnt)
podSpec.Containers[0] = pod
container := podSpec.Containers[0]
container.VolumeMounts = append(container.VolumeMounts, *mnt)
podSpec.Containers[0] = container

@csweichel
Copy link
Contributor Author

Fixed the nit. @sagor999 please re-approve.

/hold cancel

Copy link
Contributor

@jenting jenting left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@roboquat roboquat merged commit fb6a606 into main Apr 12, 2022
@roboquat roboquat deleted the cw/custom-ca-wsman branch April 12, 2022 09:34
@roboquat roboquat added deployed: workspace Workspace team change is running in production deployed Change is completely running in production labels Apr 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
deployed: workspace Workspace team change is running in production deployed Change is completely running in production release-note size/M team: workspace Issue belongs to the Workspace team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Mount CA cert secret in ws-daemon, server and image-builder
4 participants