Closed
Description
What is the problem you are trying to solve?
When attempting to deploy the provisioner job in an environment that requires TLS between pod communication, the provisioner needs to mount certificate files to be able to validate the admin-api certificates. The extraVolumes is missing in the chart that provides the ability to mount the certificate files.
Which solution do you envision (roughly)?
Add extraVolumes to the provisioner job definition.
Have you considered any alternatives?
We are unable to use a different means of enforcing TLS between pods and without the ability to mount the extraVolume, there is no way to get the certificates into the running deployment.
Any additional context to share?
We've already made this change in deployment_tools and tested it in our environment to confirm it works before backporting that change here.
How long do you think this would take to be developed?
Small (<= 1 month dev)
What are the documentation dependencies?
No response
Proposer?
No response