[bitnami/contour] Add support for changing lifetime for tls certificate generated by contour certgen (#9273)

This commit is contained in:
Rohil Surana
2022-03-03 08:37:55 +01:00
committed by GitHub
parent 0d061147a5
commit 6c25394b40
4 changed files with 10 additions and 3 deletions
+1 -1
View File
@@ -27,4 +27,4 @@ sources:
- https://github.com/envoyproxy/envoy
- https://github.com/bitnami/bitnami-docker-contour
- https://projectcontour.io
version: 7.3.11
version: 7.4.0
+1
View File
@@ -148,6 +148,7 @@ $ helm uninstall my-release
| `contour.startupProbe.successThreshold` | Minimum consecutive successes for the probe to be considered successful after having failed. | `1` |
| `contour.certgen.serviceAccount.create` | Create a serviceAccount for the Contour pod | `true` |
| `contour.certgen.serviceAccount.name` | Use the serviceAccount with the specified name, a name is generated using the fullname template | `""` |
| `contour.certgen.certificateLifetime` | Generated certificate lifetime (in days). | `365` |
| `contour.tlsExistingSecret` | Name of the existingSecret to be use in Contour deployment. If it is not nil `contour.certgen` will be disabled. | `""` |
| `contour.service.type` | Service type | `ClusterIP` |
| `contour.service.ports.xds` | Contour service xds port | `8001` |
@@ -49,6 +49,7 @@ spec:
- --overwrite
- --secrets-format=compact
- --namespace=$(CONTOUR_NAMESPACE)
- --certificate-lifetime={{ .Values.contour.certgen.certificateLifetime }}
env:
- name: CONTOUR_NAMESPACE
valueFrom:
+7 -2
View File
@@ -289,13 +289,18 @@ contour:
timeoutSeconds: 5
failureThreshold: 3
successThreshold: 1
## @param contour.certgen.serviceAccount.create Create a serviceAccount for the Contour pod
## @param contour.certgen.serviceAccount.name Use the serviceAccount with the specified name, a name is generated using the fullname template
## Contour certgen configs
##
certgen:
## @param contour.certgen.serviceAccount.create Create a serviceAccount for the Contour pod
## @param contour.certgen.serviceAccount.name Use the serviceAccount with the specified name, a name is generated using the fullname template
##
serviceAccount:
create: true
name: ""
## @param contour.certgen.certificateLifetime Generated certificate lifetime (in days).
##
certificateLifetime: 365
## @param contour.tlsExistingSecret Name of the existingSecret to be use in Contour deployment. If it is not nil `contour.certgen` will be disabled.
## It will override `tlsExistingSecret`
##