mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-21 13:50:34 +00:00
Create secrets along with SAs
Starting with Kubernetes 1.24, secrets are no longer automatically created for SAs. This adds secrets to the relevant templates; creating secrets in this way is supported in all Kubernetes versions. This also enables testing with 1.24 in CI, to make sure that the fix actually works. Signed-off-by: Stephen Kitt <skitt@redhat.com>
This commit is contained in:
committed by
Thomas Pantelis
parent
d3a4507650
commit
c605528741
+2
-2
@@ -27,8 +27,8 @@ function setup_broker() {
|
||||
fi
|
||||
|
||||
submariner_broker_url=$(kubectl -n default get endpoints kubernetes -o jsonpath="{.subsets[0].addresses[0].ip}:{.subsets[0].ports[?(@.name=='https')].port}")
|
||||
submariner_broker_ca=$(kubectl -n "${SUBMARINER_BROKER_NS}" get secrets -o jsonpath="{.items[?(@.metadata.annotations['kubernetes\.io/service-account\.name']=='${SUBMARINER_BROKER_NS}-client')].data['ca\.crt']}")
|
||||
submariner_broker_token=$(kubectl -n "${SUBMARINER_BROKER_NS}" get secrets -o jsonpath="{.items[?(@.metadata.annotations['kubernetes\.io/service-account\.name']=='${SUBMARINER_BROKER_NS}-client')].data.token}"|base64 --decode)
|
||||
submariner_broker_ca=$(kubectl -n "${SUBMARINER_BROKER_NS}" get secrets "${SUBMARINER_BROKER_NS}-client-token" -o jsonpath="{.data['ca\.crt']}")
|
||||
submariner_broker_token=$(kubectl -n "${SUBMARINER_BROKER_NS}" get secrets "${SUBMARINER_BROKER_NS}-client-token" -o jsonpath="{.data.token}"|base64 --decode)
|
||||
}
|
||||
|
||||
function helm_install_subm() {
|
||||
|
||||
Reference in New Issue
Block a user