feat: ability to specify custom ca secret key (#939)

kubeshop · Sep 19, 2024 · ab15f24 · ab15f24
1 parent 0e84fa3
commit ab15f24
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 3 deletions.
diff --git a/charts/testkube-api/templates/deployment.yaml b/charts/testkube-api/templates/deployment.yaml
@@ -261,7 +261,7 @@ spec:
             - mountPath: /etc/testkube/certs/testkube-custom-ca.pem
               name: {{ .Values.cloud.tls.customCaSecretRef }}
               readOnly: true
-              subPath: ca.crt
+              subPath: {{ .Values.cloud.tls.customCaSecretKey }}
             {{- end }}
             {{- with .Values.additionalVolumeMounts }}
             {{- toYaml . | nindent 12 -}}

diff --git a/charts/testkube-api/values.yaml b/charts/testkube-api/values.yaml
@@ -145,8 +145,10 @@ cloud:
     enabled: true
     ## Toggle should the client skip verifying the Agent API server cert in Cloud/Enterprise
     skipVerify: false
-    ## If specified, injects a custom CA into the list of trusted CAs. Specify a secret with the PEM encoded CA under the ca.crt key.
+    ## If specified, injects a custom CA into the list of trusted CAs. Specify a secret with the PEM encoded CA under the key specified by customCaSecretKey.
     customCaSecretRef: ""
+    ## Specify the key for the PEM encoded CA in the secret specified by customCaSecretRef.
+    customCaSecretKey: "ca.crt"
     # -- Specifies the path to the directory (skip the trailing slash) where CA certificates should be mounted. The mounted file should container a PEM encoded CA certificate.
     customCaDirPath: ""
     certificate:

diff --git a/charts/testkube/values.yaml b/charts/testkube/values.yaml
@@ -506,8 +506,10 @@ testkube-api:
       enabled: true
       # -- Toggle should the client skip verifying the Agent API server cert in Cloud/Enterprise
       skipVerify: false
-      ## If specified, injects a custom CA into the list of trusted CAs. Specify a secret with the PEM encoded CA under the ca.crt key.
+      ## If specified, injects a custom CA into the list of trusted CAs. Specify a secret with the PEM encoded CA under the key specified by customCaSecretKey.
       customCaSecretRef: ""
+      ## Specify the key for the PEM encoded CA in the secret specified by customCaSecretRef.
+      customCaSecretKey: "ca.crt"
       # -- Specifies the path to the directory (skip the trailing slash) where CA certificates should be mounted. The mounted file should container a PEM encoded CA certificate.
       customCaDirPath: ""
       certificate: