make ca bundle a settable value

strangiato · Apr 1, 2024 · 4b3c7fa · 4b3c7fa
1 parent 9242bc6
commit 4b3c7fa
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/charts/mlflow-server/templates/deployment.yaml b/charts/mlflow-server/templates/deployment.yaml
@@ -84,8 +84,10 @@ spec:
                   name: {{ include "mlflow-server.fullname" . }}
                   key: S3_ENDPOINT_URL
             {{ end }}
+            {{ if .Values.objectStorage.caBundle }}
             - name: AWS_CA_BUNDLE
-              value: /run/secrets/kubernetes.io/serviceaccount/service-ca.crt
+              value: .Values.objectStorage.caBundle
+            {{ end }}
             {{ if .Values.crunchyPostgres.enabled }}
             - name: PGBOUNCE_HOST
               valueFrom:

diff --git a/charts/mlflow-server/values.yaml b/charts/mlflow-server/values.yaml
@@ -75,6 +75,8 @@ objectStorage:
   s3AccessKeyId: ""
   # -- S3 Secret Access Key if the objectBucketClaim is disabled
   s3SecretAccessKey: ""
+  # -- The CA bundle for the internal cluster certs.  Set this value to "" for AWS S3.
+  caBundle: /run/secrets/kubernetes.io/serviceaccount/service-ca.crt
 
 crunchyPostgres:
   # -- Enable creation of a postgres instance using crunchyPostgres operator