tls: mounting config tls under extra_ca_certs (PROJQUAY-2575)

Secret quay-config-tls contains the cluster wildcart certs and must be mounted also under /conf/stack/extra_ca_certs.
quay · Sep 23, 2021 · fd5ea72 · fd5ea72
1 parent f81d919
commit fd5ea72
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/kustomize/components/mirror/mirror.deployment.yaml b/kustomize/components/mirror/mirror.deployment.yaml
@@ -28,8 +28,12 @@ spec:
               - secret:
                   name: quay-config-tls
         - name: extra-ca-certs
-          configMap:
-            name: cluster-service-ca
+          projected:
+            sources:
+              - configMap:
+                  name: cluster-service-ca
+              - secret:
+                  name: quay-config-tls
       initContainers:
         - name: quay-mirror-init
           image: quay.io/projectquay/quay@sha256:5660d7174218e1cb21bf6ef406602dbe8c01c878c630a9f310fe3e5560d4c2cd