From 14e903e5f2ca8c2b8caf784d7deaf8721d5c639b Mon Sep 17 00:00:00 2001 From: Andrei Kvapil Date: Thu, 5 Aug 2021 17:39:51 +0200 Subject: [PATCH] fix import CA instead of single client certificate --- helm/kube-linstor/templates/controller-deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/helm/kube-linstor/templates/controller-deployment.yaml b/helm/kube-linstor/templates/controller-deployment.yaml index 8aa9991..206dd78 100644 --- a/helm/kube-linstor/templates/controller-deployment.yaml +++ b/helm/kube-linstor/templates/controller-deployment.yaml @@ -64,7 +64,7 @@ spec: rm -f /config/ssl/keystore.jks /config/ssl/certificates.jks /config/ssl/trustore_client.jks keytool -importkeystore -srcstorepass linstor -deststorepass linstor -keypass linstor -srckeystore "$tmp" -destkeystore /config/ssl/keystore.jks {{- if .Values.controller.ssl.enabled }} - keytool -importcert -noprompt -deststorepass linstor -keypass linstor -file /tls/client/tls.crt -alias linstor-client -destkeystore /config/ssl/trustore_client.jks + keytool -importcert -noprompt -deststorepass linstor -keypass linstor -file /tls/client/ca.crt -alias linstor-ca -destkeystore /config/ssl/trustore_client.jks {{- end }} {{- if .Values.satellite.ssl.enabled }} keytool -importcert -noprompt -deststorepass linstor -keypass linstor -file /tls/satellite/tls.crt -alias linstor-satellite -destkeystore /config/ssl/certificates.jks