support for ACME certificate without ca.crt

[im-Kitsch]

Hi, firstly thanks for your excellent work.
Is your feature request related to a problem? Please describe.
for initTLS there it requires tls.key, tls.crt, ca.crt but for ca file, most reliable institues like let's encrypt just generates tls.key tls.crt. Shall we also support certificate without ca.crt? I think many cases ca.crt is not needed except self-signed custom certificate.

[jp-gouin]

Hi @im-Kitsch , thanks 😊
That is a good idea to make ca.crt optional.
Would you like to submit a PR ?

[im-Kitsch]

Hi, @jp-gouin , I would try to do that.

But to be honest I am not so familiar with this helm chart. So just few quick questions:

• the initTLSSecret.tls_enabled and initTLSSecret.secret, it mainly related to here, https://github.com/jp-gouin/helm-openldap/blob/3dc8ba18748f1fad4fb1e9f8e76ce075340398d6/templates/statefulset-readonly.yaml#L95C1-L109C61 , yes? So it will apply existing certificate if initTLSecret.name exists, if not exists, use openssl generate one, yes?
• the customTLS value is deprecated, yes? I have seen it in the discussion but not any more.

best.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.