blind-oracle / cortex-tenant / 26219653858

69%

main: 71%

Pull #100

github

Update customCA to use config.ca_bundle_file

The helm chart had a field called customCA which, when specified, would
cause a secret to be mounted in the containers /etc/ssl/certs directory,
implictly causing go to pick the CA bundle up and trust it for outbound
TLS connections.

With the added support to explictly define a CA to trust in the
application, this commit updates the helm field's logic to instead use
that. This has the advantage that _only_ this CA will be trusted, not it
in addition to all other standard CAs bundled with the container image.

Signed-off-by: Emily Shepherd <emily@redcoat.dev>

6 of 17 new or added lines in 2 files covered. (35.29%)

403 of 584 relevant lines covered (69.01%)

6.07 hits per line