Keep client CAs as a K8s ConfigMap.

The CAs used to verify clients are not secrets and can be committed to the repository as K8s ConfigMaps. This updates the config to include them.
2019-11-06 13:10:08 -05:00
parent 630469744a
commit fd57036f74
5 changed files with 2724 additions and 30 deletions
--- a/deploy/azure/azure.yml
+++ b/deploy/azure/azure.yml
@@ -79,12 +79,9 @@ spec:
              path: atst-overrides.ini
              mode: 0644
        - name: nginx-client-ca-bundle
-          secret:
-            secretName: nginx-client-ca-bundle
-            items:
-            - key: client-ca-bundle.pem
-              path: client-ca-bundle.pem
-              mode: 0666
+          configMap:
+            name: nginx-client-ca-bundle
+            defaultMode: 0666
        - name: nginx-config
          configMap:
            name: atst-nginx
--- a/deploy/azure/nginx-client-ca-bundle.yml
+++ b/deploy/azure/nginx-client-ca-bundle.yml