Skip to content
This repository has been archived by the owner on May 15, 2023. It is now read-only.

Remove forseti-server ConfigMap #61

Open
kevensen opened this issue Nov 21, 2019 · 0 comments
Open

Remove forseti-server ConfigMap #61

kevensen opened this issue Nov 21, 2019 · 0 comments

Comments

@kevensen
Copy link
Contributor

Story

The forseti-security charts inject the contents of forseti_conf_server.yaml into a ConfigMap via the value of server.config.contents. This ConfigMap is then mounted inside the forseti-server container. This is done because previously, the forseti-server could only read forseti_conf_server.yaml locally. With the merge of forseti-security/forseti-security#3460, the forseti-server container can read the config file directly from GCS.

Proposal

If the server.config.contents is empty, read the forseti_conf_server.yaml file from GCS.

Validation

GIVEN server.config.contents has a value
WHEN Forseti on-GKE is deployed
THEN A ConfigMap is created and mounted in the forseti-server container

GIVEN server.config.contents has no value
WHEN Forseti on-GKE is deployed
THEN A ConfigMap is neither created nor mounted in the forseti-server container, and the forseti-server process reads the content from GCS.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant