mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 14:29:09 +01:00
gatus: mount a CA bundle without the compromised eMudhra roots
Mount patched-ca-bundle (see ca-bundle/) over /etc/ssl/certs so it stops trusting the compromised eMudhra intermediates (https://emudhra.we-have-a-problem.com).
This commit is contained in:
1 parent
177dbef15b
commit
f52b6973e1
1 file changed
+8
@@ -48,6 +48,11 @@ spec:
|
||||
readOnly: true
|
||||
- name: data
|
||||
mountPath: /data
|
||||
# Trust store without the compromised eMudhra intermediates,
|
||||
# see ca-bundle/. Drop once the image ships a fixed bundle.
|
||||
- name: patched-ca-bundle
|
||||
mountPath: /etc/ssl/certs
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: config
|
||||
configMap:
|
||||
@@ -55,3 +60,6 @@ spec:
|
||||
- name: data
|
||||
persistentVolumeClaim:
|
||||
claimName: gatus-data
|
||||
- name: patched-ca-bundle
|
||||
configMap:
|
||||
name: patched-ca-bundle
|
||||
Reference in new issue
Block a user