seg_yinzy
/
che-server
mirror of https://github.com/eclipse-che/che-server.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove selfSignedCertSecretName property (#15878) 

* Remove selfSignedCertSecretName property

Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
7.20.x
Mykola Morhun 2020-02-26 11:26:31 +02:00 committed by GitHub
parent 3af3742d6f
commit 579cb67548
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
deploy/kubernetes/helm/che/templates/deployment.yaml
View File

@ -100,24 +100,24 @@ spec:
valueFrom:
secretKeyRef:
key: ca.crt
name: {{ .Values.global.tls.selfSignedCertSecretName }}
name: {{ .Values.global.tls.secretName }}
optional: false
{{- end }}
# If workspaces are created in a separate precreated namespace
# If workspaces are created in a separate namespace(s)
# then configure Che Server to propagate TLS secret to workspaces' namespaces
{{- if not (contains "<" .Values.global.cheWorkspacesNamespace) }}
{{- if ne .Release.Namespace .Values.global.cheWorkspacesNamespace }}
- name: "CHE_INFRA_KUBERNETES_TLS__CERT"
valueFrom:
secretKeyRef:
key: tls.crt
name: {{ .Values.global.tls.secretName }}
name: {{ .Values.global.tls.secretName }}
optional: false
- name: "CHE_INFRA_KUBERNETES_TLS__KEY"
valueFrom:
secretKeyRef:
key: tls.key
name: {{ .Values.global.tls.secretName }}
name: {{ .Values.global.tls.secretName }}
optional: false
{{- end }}
{{- end }}

5
deploy/kubernetes/helm/che/values.yaml
View File

@ -45,10 +45,9 @@ global:
## it MUST be pre-created in the configured Che namespace
secretName: che-tls
## If self-signed certificate is enabled
## then certificate from `tls.selfSignedCertSecretName` will be propagated to Che components' trust stores
## If self-signed certificate flag is enabled
## then CA certificate from `tls.secretName` will be propagated to Che components' trust stores
useSelfSignedCerts: false
selfSignedCertSecretName: self-signed-cert
## If using git self-signed certificate is enabled