gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-24 21:26:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: update mtls configuration for standalone and distributed mode (#2565)

Browse Source
This commit is contained in:
majinghe
2026-04-16 17:26:36 +08:00
committed by GitHub
parent 28edfd6190
commit af93d2daba
6 changed files with 118 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm/rustfs/templates/deployment.yaml
+43 -8
View File
@@ -100,21 +100,56 @@ spec:
name: {{ include "rustfs.secretName" . }}
resources:
{{- toYaml .Values.resources | nindent 12 }}
{{- if .Values.livenessProbe.enabled }}
livenessProbe:
{{- omit .Values.livenessProbe "enabled" | toYaml | nindent 12 }}
{{- end }}
{{- if .Values.readinessProbe.enabled }}
readinessProbe:
{{- omit .Values.readinessProbe "enabled" | toYaml | nindent 12 }}
{{- end }}
{{- include "rustfs.probes" . | nindent 10 }}
volumeMounts:
{{- if .Values.mtls.enabled }}
- name: server-cert
mountPath: /opt/tls/rustfs_cert.pem
subPath: rustfs_cert.pem
- name: server-cert
mountPath: /opt/tls/rustfs_key.pem
subPath: rustfs_key.pem
- name: server-cert
mountPath: /opt/tls/ca.crt
subPath: ca.crt
- name: client-cert
mountPath: /opt/tls/client_cert.pem
subPath: client_cert.pem
- name: client-cert
mountPath: /opt/tls/client_key.pem
subPath: client_key.pem
- name: client-cert
mountPath: /opt/tls/client_ca.crt
subPath: client_ca.crt
{{- end }}
- name: logs
mountPath: {{ $logDir }}
subPath: logs
- name: data
mountPath: /data
volumes:
{{- if .Values.mtls.enabled }}
- name: server-cert
secret:
secretName: rustfs-server-tls
items:
- key: tls.crt
path: rustfs_cert.pem
- key: tls.key
path: rustfs_key.pem
- key: ca.crt
path: ca.crt
- name: client-cert
secret:
secretName: rustfs-client-tls
items:
- key: tls.crt
path: client_cert.pem
- key: tls.key
path: client_key.pem
- key: ca.crt
path: client_ca.crt
{{- end }}
- name: logs
persistentVolumeClaim:
{{- if .Values.mode.standalone.existingClaim.logsClaim }}