blind-oracle / cortex-tenant

69%

main: 71%

LAST BUILD ON BRANCH better-ca-support

branch: better-ca-support

CHANGE BRANCH

x

Reset

• better-ca-support
• 1.3.0
• 1.3.1
• 1.3.2
• 1.3.3
• add-config-tests
• arm64-docker
• feat-add-idle-timeout-param
• feat/helm-release-ci
• fix-duration-schema
• fix-post-install
• fix-version
• loki
• main
• patch-1
• patch-2
• release-chart-0.8.1
• tidy-mods

Build # 26219653858

Build Type

Pull #100

github

Committed by EmilyShepherd

Commit Message

Update customCA to use config.ca_bundle_file

The helm chart had a field called customCA which, when specified, would
cause a secret to be mounted in the containers /etc/ssl/certs directory,
implictly causing go to pick the CA bundle up and trust it for outbound
TLS connections.

With the added support to explictly define a CA to trust in the
application, this commit updates the helm field's logic to instead use
that. This has the advantage that _only_ this CA will be trusted, not it
in addition to all other standard CAs bundled with the container image.

Signed-off-by: Emily Shepherd <emily@redcoat.dev>

Pull Request Pull Request #100: Improve trusted CA support

Coverage Stats

6 of 17 new or added lines in 2 files covered. (35.29%)

403 of 584 relevant lines covered (69.01%)

6.07 hits per line