mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 14:29:09 +01:00
Ruben Hensen
9a984c724c
Nine more namespaces need patched-ca-bundle, the bundle from Alpine ca-certificates-bundle 20261020-r0 without the roots above the compromised eMudhra intermediates. Rather than another nine ~190KB copies, a small chart renders the ConfigMap from one ca-certificates.crt into every namespace in values.yaml. argocd, authentik and actual-budget keep their own copies for now.
22 lines
484 B
YAML
22 lines
484 B
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: ca-bundle
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: https://github.com/rubenhensen/k8scd.git
|
|
targetRevision: HEAD
|
|
path: ca-bundle
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
# Every ConfigMap sets its own namespace.
|
|
namespace: argocd
|
|
syncPolicy:
|
|
automated:
|
|
selfHeal: true
|
|
prune: true
|