Skip to content

Commit

Permalink
Change: helm: rename server-private-key to ingress-certificate
Browse files Browse the repository at this point in the history
To be more inline with internal naming-schemes server-private-key is
renamed to ingress-certificate.
  • Loading branch information
nichtsfrei committed Jan 15, 2024
1 parent d280f25 commit 61534d4
Show file tree
Hide file tree
Showing 3 changed files with 6 additions and 6 deletions.
4 changes: 2 additions & 2 deletions charts/openvasd/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,12 @@ This Helm chart is tested with k3s and Traefik. Note that other options may requ

## mTLS (Enabled by Default)

To use mTLS, store the server certificate and key as a secret named 'server-private-key', containing key.pem and certs.pem. For example, deploying `openvasd` into the 'openvasd' namespace with a generated certificate:
To use mTLS, store the server certificate and key as a secret named 'ingress-certificate', containing key.pem and certs.pem. For example, deploying `openvasd` into the 'openvasd' namespace with a generated certificate:

```bash
cd ../../rust/examples/tls/Self-Signed\ mTLS\ Method
sh server_certificates.sh
kubectl create secret generic server-private-key \
kubectl create secret generic ingress-certificate \
--from-file=key.pem=./server.rsa \
--from-file=certs.pem=./server.pem \
--namespace openvasd
Expand Down
6 changes: 3 additions & 3 deletions charts/openvasd/templates/deployment.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -43,9 +43,9 @@ spec:
- name: ospd-logs
emptyDir: {}
{{- if eq .Values.openvasd.tls.certificates.deploy_server true }}
- name: server-private-key
- name: ingress-certificate
secret:
secretName: server-private-key
secretName: ingress-certificate
{{ end }}
{{- if eq .Values.openvasd.tls.certificates.deploy_client true }}
- name: client-certs
Expand Down Expand Up @@ -160,7 +160,7 @@ spec:
mountPath: /run/ospd/
{{- if eq .Values.openvasd.tls.certificates.deploy_server true }}
- mountPath: "/etc/openvasd/tls/"
name: server-private-key
name: ingress-certificate
readOnly: true
{{ end }}
{{- if eq .Values.openvasd.tls.certificates.deploy_client true }}
Expand Down
2 changes: 1 addition & 1 deletion rust/examples/tls/Self-Signed mTLS Method/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ namespace:
kubectl create namespace openvasd | true

deploy: namespace server client
kubectl create secret generic server-private-key \
kubectl create secret generic ingress-certificate \
--from-file=key.pem=./server.rsa \
--from-file=certs.pem=./server.pem \
--namespace openvasd
Expand Down

0 comments on commit 61534d4

Please sign in to comment.