Skip to content

Commit 5c05f1f

Browse files
committed
design:Add component certificate identification for client components
Signed-off-by: tiansuo <zhaoyi_114@outlook.com>
1 parent 9b76c67 commit 5c05f1f

File tree

4 files changed

+188
-90
lines changed

4 files changed

+188
-90
lines changed

artifacts/deploy/karmada-controller-manager.yaml

+8-5
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,8 @@ spec:
1717
spec:
1818
automountServiceAccountToken: false
1919
tolerations:
20-
- key: node-role.kubernetes.io/master
21-
operator: Exists
20+
- key: node-role.kubernetes.io/master
21+
operator: Exists
2222
containers:
2323
- name: karmada-controller-manager
2424
securityContext:
@@ -50,12 +50,15 @@ spec:
5050
name: metrics
5151
protocol: TCP
5252
volumeMounts:
53-
- name: karmada-config
54-
mountPath: /etc/karmada/config
53+
- name: karmada-config
54+
mountPath: /etc/karmada/config
5555
volumes:
5656
- name: karmada-config
5757
secret:
58-
secretName: karmada-controller-manager-config
58+
secretName: karmada-controller-manager-secret
59+
items:
60+
- key: karmada.config
61+
path: karmada.config
5962
securityContext:
6063
seccompProfile:
6164
type: RuntimeDefault

artifacts/deploy/karmada-descheduler.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -57,10 +57,20 @@ spec:
5757
volumes:
5858
- name: karmada-config
5959
secret:
60-
secretName: karmada-descheduler-config
60+
secretName: karmada-descheduler-secret
61+
items:
62+
- key: karmada.config
63+
path: karmada.config
6164
- name: scheduler-estimator-client-cert
6265
secret:
63-
secretName: karmada-descheduler-scheduler-estimator-client-cert
66+
secretName: karmada-descheduler-secret
67+
items:
68+
- key: ca.crt
69+
path: ca.crt
70+
- key: grpc.crt
71+
path: tls.crt
72+
- key: grpc.key
73+
path: tls.key
6474
securityContext:
6575
seccompProfile:
6676
type: RuntimeDefault

artifacts/deploy/karmada-scheduler.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -59,10 +59,20 @@ spec:
5959
volumes:
6060
- name: karmada-config
6161
secret:
62-
secretName: karmada-scheduler-config
62+
secretName: karmada-scheduler-secret
63+
items:
64+
- key: karmada.config
65+
path: karmada.config
6366
- name: scheduler-estimator-client-cert
6467
secret:
65-
secretName: karmada-scheduler-scheduler-estimator-client-cert
68+
secretName: karmada-scheduler-secret
69+
items:
70+
- key: ca.crt
71+
path: ca.crt
72+
- key: grpc.crt
73+
path: tls.crt
74+
- key: grpc.key
75+
path: tls.key
6676
securityContext:
6777
seccompProfile:
6878
type: RuntimeDefault

0 commit comments

Comments
 (0)