From fb1639a5d4fbe3eb3fd4dd87cbab3a4f00704b1d Mon Sep 17 00:00:00 2001 From: Orce MARINKOVSKI Date: Tue, 27 Dec 2022 10:43:56 +0100 Subject: [PATCH] update Trusting a Custom Certificate Authority I had hard times to identify how to declare to include statement for a custom certifcate bundle within the Kustomize file. The tricky part for me was to spot the option "disableNameSuffixHash: true" in order to avoid renaming the secret name with an has suffix --- README.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index c398aba0..7f1269ed 100644 --- a/README.md +++ b/README.md @@ -813,7 +813,22 @@ spec: bundle_cacert_secret: -custom-certs ``` -To create the secrets, you can use the commands below: +Create the secret with `kustomization.yaml` file: + +```yaml +.... + +secretGenerator: + - name: -custom-certs + files: + - bundle-ca.crt= + options: + disableNameSuffixHash: true + +... +``` + +Create the secret with CLI: * Certificate Authority secret