mirror(deployment-template): add postgresql client certificate overla…

…y for authentication (PROJQUAY-2417) (#963) (#966) Missed that we need the certificate handling in the mirror pod when using Postgres SSL authentication Co-authored-by: Michaela Lang <[email protected]>
quay · Oct 1, 2024 · cc5a566 · cc5a566
1 parent c19c3e4
commit cc5a566
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/kustomize/components/mirror/mirror.deployment.yaml b/kustomize/components/mirror/mirror.deployment.yaml
@@ -49,6 +49,18 @@ spec:
                   name: extra-ca-certs      
               - secret:
                   name: quay-config-tls
+        - name: postgres-certs
+          projected:
+            sources:
+            - secret:
+                name: postgresql-ca
+                optional: true
+            - secret:
+                name: postgresql-client-certs
+                optional: true
+        - name: postgres-certs-store
+          emptyDir:
+            sizeLimit: 5Mi
       initContainers:
         - name: quay-mirror-init
           image: quay.io/projectquay/quay:latest
@@ -99,6 +111,10 @@ spec:
             - name: extra-ca-certs
               readOnly: true
               mountPath: /conf/stack/extra_ca_certs
+            - name: postgres-certs
+              mountPath: /run/secrets/postgresql
+            - name: postgres-certs-store
+              mountPath: /.postgresql
           resources:
             requests:
               cpu: 500m