dev

.github/workflows/test-chart.yml

@@ -34,4 +34,10 @@ jobs:
         run: |
             kubectl create namespace helm-test
             helm install example-infinispan . -n helm-test --set deploy.replicas=2
+            kubectl wait --for=condition=Ready pods -lapp=infinispan-pod -n helm-test --timeout=300s
+
+      - name: Testing TLS
+        run: |
+            kubectl create namespace helm-test
+            helm install example-infinispan . -n helm-test f values-tls.yaml --set deploy.replicas=2
             kubectl wait --for=condition=Ready pods -lapp=infinispan-pod -n helm-test --timeout=300s

values.yaml

@@ -49,8 +49,7 @@ deploy:
   security:
     secretName: ""
     batch: ""
-  ssl:
-   secretName: "tls-secret"
+
   expose:
     # [USER] Specify `type: ""` to disable network access to clusters.
     type: Route
@@ -87,6 +86,9 @@ deploy:
 
   nodeSelector: {}
 
+  securityContext:
+    fsGroup: 185
+
   infinispan:
     cacheContainer:
       # [USER] Add cache, template, and counter configuration.
@@ -98,7 +100,6 @@ deploy:
         cluster: ${infinispan.cluster.name:cluster}
         node-name: ${infinispan.node.name:}
         stack: kubernetes
-        urn:infinispan:server:14.0:securityRealm: default
     server:
       endpoints:
       # [USER] Hot Rod and REST endpoints.
@@ -134,12 +135,6 @@ deploy:
         securityRealms:
         # [USER] Security realm for the Hot Rod and REST endpoints.
         - name: default
-          serverIdentities:
-            ssl:
-              keystore:
-                alias: "server"
-                path: "/etc/encrypt/keystore.p12"
-                password: "password"
           # [USER] Comment or remove this properties realm to disable authentication.
           propertiesRealm:
             groupProperties: