Skip to content

Commit 4dc1ec1

Browse files
committed
Optionally mount "ovn-rbac-pki-ca" in the edpm_ovn service POD
This new secret is created by the ovn-operator with patch [1] and contains OVN SB DB certificate which next is used to sign certificates used by the ovn-controller on each of the edpm nodes. This is required to use OVN RBAC for the connection between ovn-controllers and ovn southband DB. [1] openstack-k8s-operators/ovn-operator#541 Related: #OSPRH-1921 Signed-off-by: Slawek Kaplonski <skaplons@redhat.com>
1 parent b8d882a commit 4dc1ec1

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

config/services/dataplane_v1beta1_openstackdataplaneservice_ovn.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,9 @@ spec:
77
dataSources:
88
- configMapRef:
99
name: ovncontroller-config
10+
- secretRef:
11+
name: ovn-rbac-pki-ca
12+
optional: true
1013
tlsCerts:
1114
default:
1215
contents:

0 commit comments

Comments
 (0)