Skip to content

Commit 8553b62

Browse files
authored
Merge pull request opendatahub-io#736 from hbelmiro/RHOAIENG-13871
Use DSPA custom ca cert on MLMD and Persistence Agent clients
2 parents 0e775db + 40ca5ed commit 8553b62

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

config/internal/persistence-agent/deployment.yaml.tmpl

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,9 @@ spec:
5555
- "--namespace={{.Namespace}}"
5656
- "--mlPipelineServiceHttpPort=8888"
5757
- "--mlPipelineServiceGRPCPort=8887"
58+
{{ if and .CustomCABundle .PodToPodTLS }}
59+
- "--caCertPath={{ .PiplinesCABundleMountPath }}"
60+
{{ end }}
5861
livenessProbe:
5962
exec:
6063
command:
@@ -96,6 +99,10 @@ spec:
9699
- mountPath: /var/run/secrets/kubeflow/tokens/persistenceagent-sa-token
97100
name: persistenceagent-sa-token
98101
subPath: ds-pipeline-persistenceagent-{{.Name}}-token
102+
{{ if and .CustomCABundle .PodToPodTLS }}
103+
- mountPath: {{ .CustomCABundleRootMountPath }}
104+
name: ca-bundle
105+
{{ end }}
99106
serviceAccountName: ds-pipeline-persistenceagent-{{.Name}}
100107
volumes:
101108
- name: persistenceagent-sa-token
@@ -105,3 +112,8 @@ spec:
105112
audience: pipelines.kubeflow.org
106113
expirationSeconds: 3600
107114
path: ds-pipeline-persistenceagent-{{.Name}}-token
115+
{{ if and .CustomCABundle .PodToPodTLS }}
116+
- name: ca-bundle
117+
configMap:
118+
name: {{ .CustomCABundle.ConfigMapName }}
119+
{{ end }}

0 commit comments

Comments
 (0)