UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Verified Commit 28812006 authored by kevin.wilder's avatar kevin.wilder
Browse files

remove sm tls config

parent d9625130
No related branches found
No related tags found
1 merge request!2445Keycloak upgrade with monitoring fix
Pipeline #1306928 passed
......@@ -45,16 +45,17 @@ monitoring:
enabled: {{ .Values.monitoring.enabled }}
serviceMonitor:
enabled: {{ .Values.monitoring.enabled }}
# not able to get servicemonitor working with tlsConfig. Leaving it here for future work.
# conditional passes only for default istio: enabled, mTLS: SCRICT, istio injection: enabled
{{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.keycloak.values) "STRICT") }}
scheme: https
tlsConfig:
caFile: /etc/prom-certs/root-cert.pem
certFile: /etc/prom-certs/cert-chain.pem
keyFile: /etc/prom-certs/key.pem
# Prometheus does not support Istio security naming, thus skip verifying target pod certificate
insecureSkipVerify: true
{{- end }}
# {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.keycloak.values) "STRICT") }}
# scheme: https
# tlsConfig:
# caFile: /etc/prom-certs/root-cert.pem
# certFile: /etc/prom-certs/cert-chain.pem
# keyFile: /etc/prom-certs/key.pem
# # Prometheus does not support Istio security naming, thus skip verifying target pod certificate
# insecureSkipVerify: true
# {{- end }}
{{- if .Values.addons.keycloak.database.host }}
postgresql:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment