mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/contour] Add support for changing lifetime for tls certificate generated by contour certgen (#9273)
This commit is contained in:
@@ -27,4 +27,4 @@ sources:
|
||||
- https://github.com/envoyproxy/envoy
|
||||
- https://github.com/bitnami/bitnami-docker-contour
|
||||
- https://projectcontour.io
|
||||
version: 7.3.11
|
||||
version: 7.4.0
|
||||
|
||||
@@ -148,6 +148,7 @@ $ helm uninstall my-release
|
||||
| `contour.startupProbe.successThreshold` | Minimum consecutive successes for the probe to be considered successful after having failed. | `1` |
|
||||
| `contour.certgen.serviceAccount.create` | Create a serviceAccount for the Contour pod | `true` |
|
||||
| `contour.certgen.serviceAccount.name` | Use the serviceAccount with the specified name, a name is generated using the fullname template | `""` |
|
||||
| `contour.certgen.certificateLifetime` | Generated certificate lifetime (in days). | `365` |
|
||||
| `contour.tlsExistingSecret` | Name of the existingSecret to be use in Contour deployment. If it is not nil `contour.certgen` will be disabled. | `""` |
|
||||
| `contour.service.type` | Service type | `ClusterIP` |
|
||||
| `contour.service.ports.xds` | Contour service xds port | `8001` |
|
||||
|
||||
@@ -49,6 +49,7 @@ spec:
|
||||
- --overwrite
|
||||
- --secrets-format=compact
|
||||
- --namespace=$(CONTOUR_NAMESPACE)
|
||||
- --certificate-lifetime={{ .Values.contour.certgen.certificateLifetime }}
|
||||
env:
|
||||
- name: CONTOUR_NAMESPACE
|
||||
valueFrom:
|
||||
|
||||
@@ -289,13 +289,18 @@ contour:
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
successThreshold: 1
|
||||
## @param contour.certgen.serviceAccount.create Create a serviceAccount for the Contour pod
|
||||
## @param contour.certgen.serviceAccount.name Use the serviceAccount with the specified name, a name is generated using the fullname template
|
||||
## Contour certgen configs
|
||||
##
|
||||
certgen:
|
||||
## @param contour.certgen.serviceAccount.create Create a serviceAccount for the Contour pod
|
||||
## @param contour.certgen.serviceAccount.name Use the serviceAccount with the specified name, a name is generated using the fullname template
|
||||
##
|
||||
serviceAccount:
|
||||
create: true
|
||||
name: ""
|
||||
## @param contour.certgen.certificateLifetime Generated certificate lifetime (in days).
|
||||
##
|
||||
certificateLifetime: 365
|
||||
## @param contour.tlsExistingSecret Name of the existingSecret to be use in Contour deployment. If it is not nil `contour.certgen` will be disabled.
|
||||
## It will override `tlsExistingSecret`
|
||||
##
|
||||
|
||||
Reference in New Issue
Block a user