Merge pull request #2706 from tigera/casey-fix-linseed-voltron

Linseed must be able to verify Voltron's certificate
tigera · Jun 28, 2023 · a83fa42 · a83fa42
2 parents 41c5ea8 + d0c5bdb
commit a83fa42
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/controller/logstorage/logstorage_controller.go b/pkg/controller/logstorage/logstorage_controller.go
@@ -438,6 +438,10 @@ func (r *ReconcileLogStorage) generateSecrets(
 		// Get certificate for es-proxy, which Linseed and es-gateway need to trust.
 		render.ManagerTLSSecretName,
 
+		// Linseed needs the manager internal cert in order to verify the cert presented by Voltron when provisioning
+		// tokens into managed clusters.
+		render.ManagerInternalTLSSecretName,
+
 		// Get certificate for fluentd, which Linseed needs to trust in a standalone or management cluster.
 		render.FluentdPrometheusTLSSecretName,