[Feature] Add the possibility to add CA certificates as volumes/config about zitadel-charts HOT 7 CLOSED

We are deploying at an FSI customer on premise and we need to fumble the chart a bit (user can never be root, fs changes must be made via securityContext etc. Once I have that stuff running I try to PR it if you are not faster.

from zitadel-charts.

Nice, thanks for sharing, I think this becomes more relevant with each day 😁

from zitadel-charts.

@fforootd Is it enough to just mount the directory/file if we do not use the proxy? Can we also set the SSL_CERT_FILE environment variable to tell Zitadel to use it. Same here btw, if I make it work at the bank, a meaty PR awaits 😂

from zitadel-charts.

Self-reply 1 for the docs: Yes, it is enough to just mount them like:

extraVolumeMounts:
  - name: ca-certs
    mountPath: /etc/ssl/certs/ca-certs.crt
    readOnly: true
    
extraVolumes:
  - name: ca-certs
    secret:
      defaultMode: 420
      secretName: ca-certs

from zitadel-charts.