Allow CA dirs to be specified beyond /custom/ca/ (#650)

Signed-off-by: Joel Smith <[email protected]>
kedacore · Jun 19, 2024 · 6aa6012 · 6aa6012
1 parent 43b0f51
commit 6aa6012
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/keda/README.md b/keda/README.md
@@ -121,6 +121,7 @@ their default values.
 
 | Parameter | Type | Default | Description |
 |-----------|------|---------|-------------|
+| `certificates.operator.caDirs` | list | `["/custom/ca"]` | Location(s) of CA files for authentication of external TLS connections such as TLS-enabled metrics sources |
 | `extraArgs.keda` | object | `{}` | Additional KEDA Operator container arguments |
 | `image.keda.registry` | string | `nil` | Image registry of KEDA operator |
 | `image.keda.repository` | string | `"ghcr.io/kedacore/keda"` | Image name of KEDA operator |

diff --git a/keda/templates/manager/deployment.yaml b/keda/templates/manager/deployment.yaml
@@ -103,6 +103,9 @@ spec:
           {{- if .Values.profiling.operator.enabled }}
           - "--profiling-bind-address=:{{ .Values.profiling.operator.port }}"
           {{- end }}
+          {{- range .Values.certificates.operator.caDirs }}
+          - "--ca-dir={{ . }}"
+          {{- end }}
           {{- range $key, $value := .Values.extraArgs.keda }}
           - "--{{ $key }}={{ $value }}"
           {{- end }}

diff --git a/keda/values.yaml b/keda/values.yaml
@@ -814,6 +814,10 @@ certificates:
       kind: ClusterIssuer
       # -- Custom Issuer group. Required when generate: false
       group: cert-manager.io
+  operator:
+    # -- Location(s) of CA files for authentication of external TLS connections such as TLS-enabled metrics sources
+    caDirs:
+    - /custom/ca
 
 permissions:
   metricServer: