helm-nifi
helm-nifi copied to clipboard
[cetic/nifi] ca.enabled causes restart issues
Describe the bug
ca.enabled causes issues when nifi pods need to restart
Version of Helm and Kubernetes: n/a
What happened: When enabling in the values.yml:
ca:
enabled: true
nifi pods that restart fail with config-data not found
What you expected to happen:
How to reproduce it (as minimally and precisely as possible):
Enable ca.enabled, kill one of the nifi pods. See the error in the stateful set that the mount config-data mount is not found.
Reason is that this volume is mounted only when .Values.properties.clusterSecure are enabled:
https://github.com/cetic/helm-nifi/blob/master/templates/statefulset.yaml#L394
Anything else we need to know:
We were looking for the cacerts file to enable https calls in the HTTPget and thought we needed the truststore (jks files that get created), we were wrong with assuming the ca.enabled would solve our issue (we found the file in the jdk folder) but ran into this issue while we only tried to enable the ca.enabled.