Skip to content

Commit

Permalink
Update CSI-PowerMax to mount reverse proxy TLS secret within driver c…
Browse files Browse the repository at this point in the history
…ontainer (#588)

* Mount tls secret into driver container

* Update node.yaml

* Add IP to SAN
  • Loading branch information
AkshaySainiDell authored Jan 8, 2025
1 parent cf4f8f9 commit 43510a1
Showing 3 changed files with 13 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -59,6 +59,8 @@ spec:
- powermax-reverseproxy
- powermax-reverseproxy.powermax.svc.cluster.local
- reverseproxy
ipAddresses:
- 0.0.0.0
issuerRef:
{{- if ne .Values.certManager.selfSignedCert true }}
name: csirevproxy-issuer
4 changes: 4 additions & 0 deletions charts/csi-powermax/templates/controller.yaml
Original file line number Diff line number Diff line change
@@ -497,6 +497,8 @@ spec:
{{- end }}
- name: X_CSI_PODMON_API_PORT
value: "{{ .Values.podmon.podmonAPIPort }}"
- name: X_CSI_REVPROXY_TLS_CERT_DIR
value: /app/tls
volumeMounts:
- name: socket-dir
mountPath: /var/run/csi
@@ -507,6 +509,8 @@ spec:
mountPath: /powermax-config-params
- name: powermax-array-config
mountPath: /powermax-array-config
- name: tls-secret
mountPath: /app/tls
{{- if eq .Values.csireverseproxy.deployAsSidecar true }}
- name: reverseproxy
image: {{ required "Must provided an image for reverseproxy container." .Values.images.csireverseproxy.image }}
7 changes: 7 additions & 0 deletions charts/csi-powermax/templates/node.yaml
Original file line number Diff line number Diff line change
@@ -255,6 +255,8 @@ spec:
{{- end }}
- name: X_CSI_PODMON_API_PORT
value: "{{ .Values.podmon.podmonAPIPort }}"
- name: X_CSI_REVPROXY_TLS_CERT_DIR
value: /app/tls
volumeMounts:
- name: driver-path
mountPath: {{ .Values.kubeletConfigDir }}/plugins/powermax.emc.dell.com
@@ -285,6 +287,8 @@ spec:
mountPath: /node-topology-config
{{- end }}
{{- end }}
- name: tls-secret
mountPath: /app/tls
- name: registrar
image: {{ required "Must provide the CSI node registrar container image." .Values.images.registrar.image }}
args:
@@ -508,3 +512,6 @@ spec:
hostPath:
path: /var/run
type: Directory
- name: tls-secret
secret:
secretName: {{ .Values.csireverseproxy.tlsSecret }}

0 comments on commit 43510a1

Please sign in to comment.