dex-k8s-authenticator: avoid using subPath for the secret

mesosphere · Jul 22, 2019 · 222f3a2 · 222f3a2
1 parent d2e3053
commit 222f3a2
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 13 deletions.
diff --git a/staging/dex-k8s-authenticator/Chart.yaml b/staging/dex-k8s-authenticator/Chart.yaml
@@ -2,7 +2,8 @@ apiVersion: v1
 appVersion: "v1.1.0"
 description: "Authenticator for using Dex with Kubernetes"
 name: dex-k8s-authenticator
-version: 1.1.3
+version: 1.1.4
+home: https://github.com/mesosphere/charts
 sources:
 - https://github.com/mintel/dex-k8s-authenticator
 maintainers:

diff --git a/staging/dex-k8s-authenticator/templates/deployment.yaml b/staging/dex-k8s-authenticator/templates/deployment.yaml
@@ -63,8 +63,7 @@ spec:
 {{- if .Values.caCerts.enabled }}
 {{- range .Values.caCerts.secrets }}
         - name: {{ template "dex-k8s-authenticator.fullname" $ }}-{{ .name }}
-          subPath: {{ .name }}
-          mountPath: /certs/{{ .filename }}
+          mountPath: /certs/
 {{- end }}
 {{- end }}
         resources:
@@ -93,5 +92,8 @@ spec:
       - name: {{ template "dex-k8s-authenticator.fullname" $ }}-{{ .name }}
         secret:
           secretName: {{ template "dex-k8s-authenticator.fullname" $ }}-{{ .name }}
+          items:
+          - key: {{ .name }}
+            path: {{ .filename }}
 {{- end }}
 {{- end }}
diff --git a/staging/dex-k8s-authenticator/values.yaml b/staging/dex-k8s-authenticator/values.yaml
@@ -21,9 +21,9 @@ dexK8sAuthenticator:
     periodSeconds: 10
     initialDelaySeconds: 10
   web_path_prefix: /
-  #logoUrl: http://<path-to-your-logo.png>
-  #tlsCert: /path/to/dex-client.crt
-  #tlsKey: /path/to/dex-client.key
+  # logoUrl: http://<path-to-your-logo.png>
+  # tlsCert: /path/to/dex-client.crt
+  # tlsKey: /path/to/dex-client.key
   clusters:
   - name: my-cluster
     short_description: "My Cluster"
@@ -84,13 +84,13 @@ caCerts:
   #
   #     value: The base64 encoded value of the CA
   #
-  #secrets:
-  #- name: ca-cert1
-  #  filename: ca1.crt
-  #  value: LS0tLS1......X2F
-  #- name: ca-cert2
-  #  filename: ca2.crt
-  #  value: DS1tFA1......X2F
+  # secrets:
+  # - name: ca-cert1
+  #   filename: ca1.crt
+  #   value: LS0tLS1......X2F
+  # - name: ca-cert2
+  #   filename: ca2.crt
+  #   value: DS1tFA1......X2F
 
 
 nodeSelector: {}