add the ability to specify OS_CACERT for self-signed APIs

nschad · nschad · commit 33beb75e4ca0 · 2024-09-17T09:49:31.000+02:00
Signed-off-by: Niclas Schad &lt;niclas.schad@stackit.cloud&gt;
diff --git a/helm/designate-certmanager-webhook/templates/secret.yaml b/helm/designate-certmanager-webhook/templates/secret.yaml
@@ -40,6 +40,9 @@ data:
   {{- if .Values.openstack.domain_name }}
   OS_DOMAIN_NAME: {{ .Values.openstack.domain_name | b64enc | quote }}
   {{- end }}
+  {{- if .Values.openstack.ca_cert }}
+  OS_CACERT: {{ .Values.openstack.ca_cert | b64enc | quote }}
+  {{- end }}
   {{- if .Values.openstack.auth_type }}
   OS_AUTH_TYPE: {{ .Values.openstack.auth_type | b64enc | quote }}
   {{- end }}
diff --git a/helm/designate-certmanager-webhook/values.yaml b/helm/designate-certmanager-webhook/values.yaml
@@ -37,6 +37,7 @@ openstack:
   region_name: ""
   auth_url: ""
   domain_name: ""
+  ca_cert: ""
 
 nameOverride: ""
 fullnameOverride: ""
