From acadbc33e1ead6eec7a1c23d78ae6eb43aa23ffd Mon Sep 17 00:00:00 2001 From: Manuel Raynaud Date: Wed, 1 Jul 2026 17:36:03 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7(helm)=20mount=20custom=20cacert=20?= =?UTF-8?q?in=20yprovider=20deployment?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In the yprovider deployment we now need to mount the cacert containing the certificates generated by mkcert. Then, we have to declare the environment variable NODE_EXTRA_CA_CERTS with the path where this cacert is mounted. With this new config we don't have tls issue anymore. --- src/helm/env.d/dev/values.impress.yaml.gotmpl | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/src/helm/env.d/dev/values.impress.yaml.gotmpl b/src/helm/env.d/dev/values.impress.yaml.gotmpl index 6dfead8e4..ba68c6d87 100644 --- a/src/helm/env.d/dev/values.impress.yaml.gotmpl +++ b/src/helm/env.d/dev/values.impress.yaml.gotmpl @@ -174,6 +174,22 @@ yProvider: COLLABORATION_SERVER_ORIGIN: https://docs.127.0.0.1.nip.io COLLABORATION_SERVER_SECRET: my-secret Y_PROVIDER_API_KEY: my-secret + NODE_EXTRA_CA_CERTS: /cert/cacert.pem + + # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false + extraVolumeMounts: + - name: certs + mountPath: /cert/cacert.pem + subPath: cacert.pem + + # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false + extraVolumes: + - name: certs + configMap: + name: certifi + items: + - key: cacert.pem + path: cacert.pem docSpec: enabled: true