Fix AutoTLSEnricher for Service Serving Certificate Secrets

Ported PR fabric8io/fabric8-maven-plugin#1719
eclipse-jkube · Nov 29, 2019 · a09ff1c · a09ff1c
1 parent 105bba5
commit a09ff1c
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/...t/enricher/generic/src/main/java/io/jkube/enricher/generic/openshift/AutoTLSEnricher.java b/...t/enricher/generic/src/main/java/io/jkube/enricher/generic/openshift/AutoTLSEnricher.java
@@ -19,6 +19,7 @@
 import io.fabric8.kubernetes.api.model.KubernetesListBuilder;
 import io.fabric8.kubernetes.api.model.PodSpecBuilder;
 import io.fabric8.kubernetes.api.model.PodTemplateSpecBuilder;
+import io.fabric8.kubernetes.api.model.ServiceBuilder;
 import io.fabric8.kubernetes.api.model.Volume;
 import io.fabric8.kubernetes.api.model.VolumeMount;
 import io.fabric8.kubernetes.api.model.VolumeMountBuilder;
@@ -134,6 +135,21 @@ private boolean isVolumeMountAlreadyExists(List<VolumeMount> volumes, String vol
                 return false;
             }
         });
+
+        builder.accept(new TypedVisitor<ServiceBuilder>() {
+            @Override
+            public void visit(ServiceBuilder service) {
+                /*
+                 * Set the service.alpha.openshift.io/serving-cert-secret-name annotation on your
+                 * service with the value set to the name you want to use for your secret.
+                 *
+                 * https://docs.openshift.com/online/dev_guide/secrets.html#service-serving-certificate-secrets
+                 */
+                service.editOrNewMetadata()
+                        .addToAnnotations(AUTOTLS_ANNOTATION_KEY, secretName)
+                        .endMetadata();
+            }
+        });
     }
 
     @Override