fix: add existing secret env var in deployment (#140)

* fix: add existing secret env var in deployment * fix: bump the version
snyk · Oct 2, 2024 · 388913f · 388913f
1 parent b827386
commit 388913f
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 1 deletion.
diff --git a/charts/snyk-broker/Chart.yaml b/charts/snyk-broker/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
 name: snyk-broker
-version: 2.8.3
+version: 2.8.4
 description: A Helm chart for Kubernetes
 type: application
diff --git a/charts/snyk-broker/templates/broker_deployment.yaml b/charts/snyk-broker/templates/broker_deployment.yaml
@@ -144,6 +144,14 @@ spec:
               value: /home/node/cacert/cacert
          {{- end }}
 
+         {{- if .Values.caCertFileSecret.name }}
+          # HTTPS Inspection
+            - name: CA_CERT
+              value: /home/node/cacert/{{ .Values.caCertFileSecret.key }}
+            - name: NODE_EXTRA_CA_CERTS
+              value: /home/node/cacert/{{ .Values.caCertFileSecret.key }}
+         {{- end }}
+
          {{- if .Values.httpsCert }}
          # HTTPS Config
             - name: HTTPS_CERT

diff --git a/charts/snyk-broker/tests/broker_deployment_ca_test.yaml b/charts/snyk-broker/tests/broker_deployment_ca_test.yaml
@@ -296,6 +296,18 @@ tests:
             mountPath: /home/node/cacert
             readOnly: true
         template: broker_deployment.yaml
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: NODE_EXTRA_CA_CERTS
+            value: "/home/node/cacert/caCert"
+        template: broker_deployment.yaml
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: CA_CERT
+            value: "/home/node/cacert/caCert"
+        template: broker_deployment.yaml
 
 
   - it: correctly mounts an external CA secret with default key