-
Notifications
You must be signed in to change notification settings - Fork 9.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[bitnami/vault] fix injector #26611
[bitnami/vault] fix injector #26611
Conversation
Signed-off-by: Jiří Matěják <[email protected]>
Signed-off-by: Jiří Matěják <[email protected]>
Signed-off-by: Jiří Matěják <[email protected]>
Signed-off-by: Bitnami Containers <[email protected]>
Signed-off-by: Carlos Rodríguez Hernández <[email protected]>
Signed-off-by: Bitnami Containers <[email protected]>
Signed-off-by: Fran Mulero <[email protected]>
Signed-off-by: Bitnami Containers <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @SpeedGriffon Thanks a lot for your contribution and for taking care of this issue.
I left a little comment. Could you take it glance?
@@ -105,7 +105,7 @@ spec: | |||
- name: AGENT_INJECT_LISTEN | |||
value: :{{ .Values.injector.containerPorts.https }} | |||
- name: AGENT_INJECT_VAULT_ADDR | |||
value: http://{{ include "vault.server.fullname" . }}:{{ .Values.server.service.general.ports.http }} | |||
value: http://{{ include "vault.server.fullname" . }}.{{ include "common.names.namespace" . }}.svc:{{ .Values.server.service.general.ports.http }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why don't use the FQDN?
value: http://{{ include "vault.server.fullname" . }}.{{ include "common.names.namespace" . }}.svc:{{ .Values.server.service.general.ports.http }} | |
value: http://{{ include "vault.server.fullname" . }}.{{ include "common.names.namespace" . }}.svc.{{ .Values.clusterDomain }}:{{ .Values.server.service.general.ports.http }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I went with what they use in the official chart.
Also, this way it's consistent with AGENT_INJECT_TLS_AUTO_HOSTS
and it works with the default values.yaml
even if the cluster domain is not cluster.local
.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks a lot @SpeedGriffon. LGTM
Signed-off-by: Jiří Matěják <[email protected]>
Signed-off-by: Bitnami Containers <[email protected]>
@@ -105,7 +105,7 @@ spec: | |||
- name: AGENT_INJECT_LISTEN | |||
value: :{{ .Values.injector.containerPorts.https }} | |||
- name: AGENT_INJECT_VAULT_ADDR | |||
value: http://{{ include "vault.server.fullname" . }}:{{ .Values.server.service.general.ports.http }} | |||
value: http://{{ include "vault.server.fullname" . }}.{{ include "common.names.namespace" . }}.svc:{{ .Values.server.service.general.ports.http }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks a lot @SpeedGriffon. LGTM
* [bitnami/vault] fix injector networkpolicy ingress port Signed-off-by: Jiří Matěják <[email protected]> * [bitnami/vault] fix AGENT_INJECT_VAULT_ADDR Signed-off-by: Jiří Matěják <[email protected]> * [bitnami/vault] bump chart version Signed-off-by: Jiří Matěják <[email protected]> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <[email protected]> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <[email protected]> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <[email protected]> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <[email protected]> --------- Signed-off-by: Jiří Matěják <[email protected]> Signed-off-by: Bitnami Containers <[email protected]> Signed-off-by: Carlos Rodríguez Hernández <[email protected]> Signed-off-by: Fran Mulero <[email protected]> Co-authored-by: Bitnami Containers <[email protected]> Co-authored-by: Carlos Rodríguez Hernández <[email protected]> Co-authored-by: Fran Mulero <[email protected]> Signed-off-by: Long Bao <[email protected]>
Description of the change
Fixes the Vault Injector Deployment and NetworkPolicy.
Benefits
Possible drawbacks
Applicable issues
Additional information
Checklist
Chart.yaml
according to semver. This is not necessary when the changes only affect README.md files.README.md
using readme-generator-for-helm