cilium
cilium copied to clipboard
Helm: Add Clustermesh certificate creation variable
This commit adds the .Values.clustermesh.apiserver.tls.enableSecrets variable and new conditional statements to the tls-provided Helm templates. The purpose of this is to provide control over secret creation for out-of-band TLS certificate management. The new value defaults to true which will maintain the current clustermesh secret creation functionality. If the value is set to false Helm will not create TLS secrets for Clustermesh.
Please ensure your pull request adheres to the following guidelines:
- [x] For first time contributors, read Submitting a pull request
- [x] All code is covered by unit and/or runtime tests where feasible.
- [x] All commits contain a well written commit description including a title,
description and a
Fixes: #XXXline if the commit addresses a particular GitHub issue. - [x] If your commit description contains a
Fixes: <commit-id>tag, then please add the commit author[s] as reviewer[s] to this issue. - [x] All commits are signed off. See the section Developer’s Certificate of Origin
- [x] Provide a title or release-note blurb suitable for the release notes.
- [x] Are you a user of Cilium? Please add yourself to the Users doc
- [x] Thanks for contributing!
Helm: Add new value `.Values.clustermesh.apiserver.tls.enableSecrets. Setting this value to false will disable the creation of TLS certificate secrets for clustermesh, enabling out-of-band TLS certificate secret management.