fix: add existing secret env var in deployment

snyk · Oct 1, 2024 · eea0c58 · eea0c58
1 parent b827386
commit eea0c58
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/charts/snyk-broker/templates/broker_deployment.yaml b/charts/snyk-broker/templates/broker_deployment.yaml
@@ -144,6 +144,14 @@ spec:
               value: /home/node/cacert/cacert
          {{- end }}
 
+         {{- if .Values.caCertFileSecret.name }}
+          # HTTPS Inspection
+            - name: CA_CERT
+              value: /home/node/cacert/{{ .Values.caCertFileSecret.key }}
+            - name: NODE_EXTRA_CA_CERTS
+              value: /home/node/cacert/{{ .Values.caCertFileSecret.key }}
+         {{- end }}
+
          {{- if .Values.httpsCert }}
          # HTTPS Config
             - name: HTTPS_CERT

diff --git a/charts/snyk-broker/tests/broker_deployment_ca_test.yaml b/charts/snyk-broker/tests/broker_deployment_ca_test.yaml
@@ -296,6 +296,18 @@ tests:
             mountPath: /home/node/cacert
             readOnly: true
         template: broker_deployment.yaml
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: NODE_EXTRA_CA_CERTS
+            value: "/home/node/cacert/caCert"
+        template: broker_deployment.yaml
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: CA_CERT
+            value: "/home/node/cacert/caCert"
+        template: broker_deployment.yaml
 
 
   - it: correctly mounts an external CA secret with default key