Add init script to download extra ca certs

This commit is contained in:
Sam Chow 2018-08-16 15:42:01 -04:00
parent 5b400f4c22
commit ff294d6c52
7 changed files with 112 additions and 17 deletions

View file

@ -44,6 +44,10 @@ class TransientDirectoryProvider(FileConfigProvider):
def save_configuration_to_kubernetes(self):
data = {}
# Kubernetes secrets don't have sub-directories, so for the extra_ca_certs dir
# we have to put the extra certs in with a prefix, and then one of our init scripts
# (02_get_kube_certs.sh) will expand the prefixed certs into the equivalent directory
# so that they'll be installed correctly on startup by the certs_install script
certs_dir = os.path.join(self.config_volume, EXTRA_CA_DIRECTORY)
if os.path.exists(certs_dir):
for extra_cert in os.listdir(certs_dir):