mount messaging cert if root not present

ManageIQ · Oct 31, 2023 · 18a1c21 · 18a1c21
1 parent eab273e
commit 18a1c21
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/lib/container_orchestrator/object_definition.rb b/lib/container_orchestrator/object_definition.rb
@@ -111,6 +111,25 @@ def deployment_definition(name)
             ],
           }
         }
+      else
+        deployment[:spec][:template][:spec][:containers][0][:volumeMounts] ||= []
+        deployment[:spec][:template][:spec][:containers][0][:volumeMounts] << {
+          :mountPath => "/etc/pki/ca-trust/source/anchors",
+          :name      => "messaging-certificate",
+          :readOnly  => true,
+        }
+
+        deployment[:spec][:template][:spec][:volumes] ||= []
+        deployment[:spec][:template][:spec][:volumes] << {
+          :name   => "messaging-certificate",
+          :secret => {
+            :secretName => "manageiq-cluster-ca-cert",
+            :items      => [
+              :key  => "ca.crt",
+              :path => "ca.crt",
+            ],
+          }
+        }
       end
 
       deployment