Conditionally Create the SSO.Certificate_Authority value as a Kubernetes Secret
We already have a value for sso.certificate_authority
and most applications when trusting a certificate not signed by a CA in the existing trust store need to have a PEM Certificate Authority fed in via a mounted Kubernetes secret.
Utilize this PEM CA Certificate we already utilize to create a kubernetes secret with this CA in each namespace that has <package>.sso.enabled=true
.
Secret should look adhere to the following:
- name: <standard_we_decide_on> (tls-ca-sso/oidc-ca-cert/oidc-ca ?)
- PEM encoded CA certificate created inside single key like
ca.pem