You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
At the moment the charts render the token secret volume directly derived from .Values.auth.superUsers.x for the broker, the proxy- and the toolset-stateful sets.
Because the superUsers configuration represents a token subscription that is issued by an IDP there is no control over the syntax of this value. e.g. "sub": "NR_CO_PROD_ADM_M2M-T"
For values not compliant to Kubernetes metadata.name syntax value will break the deployment.
Describe the solution you'd like
To add more robustness I propose to introduce a simple transformation to lowercase + kebabcase like:
The text was updated successfully, but these errors were encountered:
MarkusNeuron
changed the title
Kubernetes compliant token secret names as volume mounts
Kubernetes compliant token secret metadata.name as volume mounts
Oct 21, 2022
MarkusNeuron
changed the title
Kubernetes compliant token secret metadata.name as volume mounts
Kubernetes compliant token secret name as volume mounts
Oct 21, 2022
Is your feature request related to a problem? Please describe.
At the moment the charts render the token secret volume directly derived from .Values.auth.superUsers.x for the broker, the proxy- and the toolset-stateful sets.
Because the superUsers configuration represents a token subscription that is issued by an IDP there is no control over the syntax of this value. e.g. "sub": "NR_CO_PROD_ADM_M2M-T"
For values not compliant to Kubernetes metadata.name syntax value will break the deployment.
Describe the solution you'd like
To add more robustness I propose to introduce a simple transformation to lowercase + kebabcase like:
This will cover most of the edge cases.
Describe alternatives you've considered
A even more generic approach to make the configured string value metadata.name compliant. Not aware of any.
Additional context
Deployments fails by try to mount a volume secret named like
The text was updated successfully, but these errors were encountered: