External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-27 07:56:14 -03:30
Code Issues Packages Projects Releases Wiki Activity

fix: do not mount hubble-ui tls volume when cilium_hubble_tls_generate is false (#12143)

Browse Source
This commit is contained in:
Kim Hyunyoung, Abel
2025-05-12 12:27:14 +09:00
committed by GitHub
parent 23d8c9a820
commit e1be469995
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/network_plugin/cilium/templates/hubble/deploy.yml.j2
View File

@@ -168,10 +168,12 @@ spec:
value: "hubble-relay:80" value: "hubble-relay:80"
{% endif %} {% endif %}
{% if cilium_hubble_tls_generate -%}
volumeMounts: volumeMounts:
- name: tls - name: tls
mountPath: /var/lib/hubble-ui/certs mountPath: /var/lib/hubble-ui/certs
readOnly: true readOnly: true
{%- endif %}
ports: ports:
- containerPort: 8090 - containerPort: 8090
name: grpc name: grpc
@@ -182,6 +184,7 @@ spec:
defaultMode: 420 defaultMode: 420
name: hubble-ui-nginx name: hubble-ui-nginx
name: hubble-ui-nginx-conf name: hubble-ui-nginx-conf
{% if cilium_hubble_tls_generate -%}
- projected: - projected:
sources: sources:
- secret: - secret:
@@ -194,6 +197,7 @@ spec:
- key: tls.key - key: tls.key
path: client.key path: client.key
name: tls name: tls
{%- endif %}
- emptyDir: {} - emptyDir: {}
name: tmp-dir name: tmp-dir
{% endif %} {% endif %}