diff --git a/charts/lfx-platform/templates/heimdall/heimdall-signer-cert.yaml b/charts/lfx-platform/templates/heimdall/heimdall-signer-cert.yaml index 692db64..1c7920d 100644 --- a/charts/lfx-platform/templates/heimdall/heimdall-signer-cert.yaml +++ b/charts/lfx-platform/templates/heimdall/heimdall-signer-cert.yaml @@ -3,10 +3,10 @@ --- {{ if and .Values.heimdall.enabled .Values.lfx.generateHeimdallSignerCert.enabled -}} {{/* -Generate a P-256 curve key & x509 cert for Heimdall on install of Chart +Generate a private key & x509 cert for Heimdall on install of Chart TODO: Create RBAC rule to limit secret access to heimdall Pods */}} -{{- $heimdallCA := genCAWithKey "heimdall" 365 (genPrivateKey "ecdsa")}} +{{- $heimdallCA := genCAWithKey "heimdall" 365 (genPrivateKey .Values.lfx.generateHeimdallSignerCert.algorithm) -}} apiVersion: v1 kind: Secret diff --git a/charts/lfx-platform/values.yaml b/charts/lfx-platform/values.yaml index 0261518..cff2cbe 100644 --- a/charts/lfx-platform/values.yaml +++ b/charts/lfx-platform/values.yaml @@ -21,6 +21,8 @@ lfx: generateHeimdallSignerCert: enabled: true name: heimdall-signer-cert + # algorithm will be passed as the parameter to Sprig's genPrivateKey. + algorithm: rsa whoami: enabled: true