mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-09-18 22:14:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Clarify documentation for the advertised CA bundle of the impersonation proxy

Browse Source
This commit is contained in:
Joshua Casey
2024-12-03 12:25:57 -06:00
committed by Joshua Casey
parent 46bbe5bc75
commit 1958bb8fb0
25 changed files with 150 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/concierge/config.concierge.pinniped.dev_credentialissuers.yaml
+5 -1
View File
@@ -115,12 +115,16 @@ spec:
certificateAuthorityData:
description: |-
X.509 Certificate Authority (base64-encoded PEM bundle).
Used to advertise the CA bundle for the impersonation proxy endpoint.
Used to advertise the CA bundle for TLS verification.
type: string
secretName:
description: |-
SecretName is the name of a Secret in the same namespace, of type `kubernetes.io/tls`, which contains
the TLS serving certificate for the Concierge impersonation proxy endpoint.
If CertificateAuthorityData is not provided, the Concierge impersonation proxy will check this secret for
a field called "ca.crt", which will be used as the CA bundle to advertise for TLS verification.
minLength: 1
type: string
type: object