commit 76a12567c9ea1a634973afe43a6b4f844c9608ad
author Mohammed Naser <mnaser@vexxhost.com> Mon Jul 10 16:08:22 2023 -0400
committer Mohammed Naser <mnaser@vexxhost.com> Mon Jul 10 22:01:23 2023 -0400
tree 2aadd27f83540d1fe077aaf193a27cf74fbc41c5
parent 974100767c488c97be1422c66741c6d65447a7de

chore: save libvirt certs to pod-tmp

charts/libvirt/templates/bin/_cert-init.sh.tpl

diff --git a/charts/libvirt/templates/bin/_cert-init.sh.tpl b/charts/libvirt/templates/bin/_cert-init.sh.tpl
index 1e4bec3..6a8886e 100644
--- a/charts/libvirt/templates/bin/_cert-init.sh.tpl
+++ b/charts/libvirt/templates/bin/_cert-init.sh.tpl
@@ -42,3 +42,7 @@
 
 kubectl -n ${POD_NAMESPACE} wait --for=condition=Ready --timeout=300s \
   certificate/${POD_NAME}-${TYPE}
+
+kubectl -n ${POD_NAMESPACE} get secret ${POD_NAME}-${TYPE} -o jsonpath='{.data.tls\.crt}' | base64 -d > /tmp/${POD_NAME}-${TYPE}.crt
+kubectl -n ${POD_NAMESPACE} get secret ${POD_NAME}-${TYPE} -o jsonpath='{.data.tls\.key}' | base64 -d > /tmp/${POD_NAME}-${TYPE}.key
+kubectl -n ${POD_NAMESPACE} get secret ${POD_NAME}-${TYPE} -o jsonpath='{.data.ca\.crt}' | base64 -d > /tmp/${POD_NAME}-${TYPE}.ca.crt

charts/libvirt/templates/daemonset-libvirt.yaml

diff --git a/charts/libvirt/templates/daemonset-libvirt.yaml b/charts/libvirt/templates/daemonset-libvirt.yaml
index 81940f4..0eca106 100644
--- a/charts/libvirt/templates/daemonset-libvirt.yaml
+++ b/charts/libvirt/templates/daemonset-libvirt.yaml
@@ -98,6 +98,8 @@
                 fieldRef:
                   fieldPath: status.podIP
           volumeMounts:
+            - name: pod-tmp
+              mountPath: /tmp
             - name: libvirt-bin
               mountPath: /tmp/cert-init.sh
               subPath: cert-init.sh
@@ -129,6 +131,8 @@
                 fieldRef:
                   fieldPath: status.podIP
           volumeMounts:
+            - name: pod-tmp
+              mountPath: /tmp
             - name: libvirt-bin
               mountPath: /tmp/cert-init.sh
               subPath: cert-init.sh