Warm tip: This article is reproduced from serverfault.com, please click

kubernetes-使用头盔在openshift上配置TLS

(kubernetes - Configuring TLS on openshift using helm)

发布于 2020-11-28 11:02:17

我想在openshift上使用边缘终止来配置TLS,在values.yaml中传递TLS证书和私钥,并在route.yaml文件中引用它,当我执行Helm图表时,由于缩进不当而导致路由创建失败,并且将证书从values.yaml复制到route.yaml文件时引入的换行符。

以下是values.yaml文件,从该文件中引用route.yaml文件中的证书。什么是更好的方法呢?如何使用适当的缩进从values.yaml中传递tls证书和私钥。

Values.yaml

route:
  Enabled: true
  annotations:
    haproxy.router.openshift.io/cookie_name: SESSION_XLD
    haproxy.router.openshift.io/disable_cookies: "false"
    haproxy.router.openshift.io/rewrite-target: /
  path: /
  hosts:
    - www.example.com
  tls:
    key:
      -----BEGIN CERTIFICATE-----
      [...]
      -----END CERTIFICATE-----
    certificate:
      -----BEGIN CERTIFICATE-----
      [...]
      -----END CERTIFICATE-----
    caCertificate:
      -----BEGIN CERTIFICATE-----
      [...]
      -----END CERTIFICATE-----
    insecureEdgeTerminationPolicy: Redirect

route.yaml

{{- if $.Values.route.tls }}
  tls:
    termination: edge
  {{- with $.Values.route.tls }}
    key: |
      {{ .key }}
    certificate: |
      {{ .certificate }}
    caCertificate: |
      {{ .caCertificate }}
    insecureEdgeTerminationPolicy: {{ .insecureEdgeTerminationPolicy }}
  {{- end }}
{{- end }}
Questioner
chandrashekar
Viewed
22
Daein Park 2020-11-29 00:16:08

如何尝试将每个证书传递到route.yaml|在保留缩进Values.yaml要么如下?

  tls:
    key: | <--- add
      -----BEGIN CERTIFICATE-----
      [...]
      -----END CERTIFICATE-----
    certificate: | <--- add
      -----BEGIN CERTIFICATE-----
      [...]
      -----END CERTIFICATE-----
    caCertificate: | <--- add
      -----BEGIN CERTIFICATE-----
      [...]
      -----END CERTIFICATE-----