Browse Source
fix: do not mount hubble-ui tls volume when cilium_hubble_tls_generate is false (#12143)
pull/12044/merge
Kim Hyunyoung, Abel
4 months ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
4 additions and
0 deletions
-
roles/network_plugin/cilium/templates/hubble/deploy.yml.j2
|
|
|
@ -168,10 +168,12 @@ spec: |
|
|
|
value: "hubble-relay:80" |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
{% if cilium_hubble_tls_generate -%} |
|
|
|
volumeMounts: |
|
|
|
- name: tls |
|
|
|
mountPath: /var/lib/hubble-ui/certs |
|
|
|
readOnly: true |
|
|
|
{%- endif %} |
|
|
|
ports: |
|
|
|
- containerPort: 8090 |
|
|
|
name: grpc |
|
|
|
@ -182,6 +184,7 @@ spec: |
|
|
|
defaultMode: 420 |
|
|
|
name: hubble-ui-nginx |
|
|
|
name: hubble-ui-nginx-conf |
|
|
|
{% if cilium_hubble_tls_generate -%} |
|
|
|
- projected: |
|
|
|
sources: |
|
|
|
- secret: |
|
|
|
@ -194,6 +197,7 @@ spec: |
|
|
|
- key: tls.key |
|
|
|
path: client.key |
|
|
|
name: tls |
|
|
|
{%- endif %} |
|
|
|
- emptyDir: {} |
|
|
|
name: tmp-dir |
|
|
|
{% endif %} |
