Add cm issuer for refdb certs

Pythoner6 · Feb 17, 2024 · e2a625a · e2a625a
1 parent c09af3a
commit e2a625a
Showing 1 changed file with 5 additions and 6 deletions.
diff --git a/k8s/gerrit/gerrit.cue b/k8s/gerrit/gerrit.cue
@@ -7,7 +7,7 @@ import (
   scyllaclusters "scylla.scylladb.com/scyllacluster/v1"
   scyllaoperator "pythoner6.dev/netserv/k8s/scylla-operator:netserv"
   //externalsecrets "external-secrets.io/externalsecret/v1beta1"
-  //issuers "cert-manager.io/issuer/v1"
+  issuers "cert-manager.io/issuer/v1"
   corev1 "k8s.io/api/core/v1"
   //rbacv1 "k8s.io/api/rbac/v1"
 )
@@ -52,7 +52,7 @@ kustomizations: $default: manifest: {
       query: DNS=([^,\\s]+)
     """
   }
-  "global-refdb": scyllaclusters.#ScyllaCluster & {
+  refdb="global-refdb": scyllaclusters.#ScyllaCluster & {
     spec: {
       version: "5.4.3"
       alternator: {
@@ -84,6 +84,9 @@ kustomizations: $default: manifest: {
       }
     }
   }
+  "global-refdb-ca": issuers.#Issuer & {
+    spec: ca: secretName: "\(refdb.metadata.name)-local-client-ca"
+  }
   "events-broker-node-pool": kafkanodepools.#KafkaNodePool & {
     metadata: labels: "strimzi.io/cluster": broker.metadata.name
     spec: {
@@ -157,8 +160,4 @@ kustomizations: $default: manifest: {
     metadata: name: "gerrit"
     spec: authentication: type: "tls"
   }
-
-  //"cluster-ca": issuers.#Issuer & {
-  //  spec: ca: secretName: caSecret.metadata.name
-  //}
 }