gatus: mount a CA bundle without the compromised eMudhra roots

Mount patched-ca-bundle (see ca-bundle/) over /etc/ssl/certs so it stops trusting the compromised eMudhra intermediates (https://emudhra.we-have-a-problem.com).
This commit is contained in:
Ruben Hensen committed 2026-10-22 09:13:01 +02:00
1 parent 177dbef15b
commit f52b6973e1
1 file changed
+8
+8
View File
@@ -48,6 +48,11 @@ spec:
readOnly: true
- name: data
mountPath: /data
# Trust store without the compromised eMudhra intermediates,
# see ca-bundle/. Drop once the image ships a fixed bundle.
- name: patched-ca-bundle
mountPath: /etc/ssl/certs
readOnly: true
volumes:
- name: config
configMap:
@@ -55,3 +60,6 @@ spec:
- name: data
persistentVolumeClaim:
claimName: gatus-data
- name: patched-ca-bundle
configMap:
name: patched-ca-bundle