http-add-on: allow fetching certs from secrets (#40)

Signed-off-by: Jan Wozniak <wozniak.jan@gmail.com>
kedify · Dec 25, 2024 · 0a23c82 · 0a23c82
1 parent 7d1d39a
commit 0a23c82
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/http-add-on/templates/interceptor/rbac.yml b/http-add-on/templates/interceptor/rbac.yml
@@ -9,6 +9,9 @@ rules:
   - ""
   resources:
   - endpoints
+  {{- if .Values.interceptor.tls.allowCertsFromSecrets}}
+  - secrets
+  {{- end}}
   verbs:
   - get
   - list

diff --git a/http-add-on/values.yaml b/http-add-on/values.yaml
@@ -196,6 +196,8 @@ interceptor:
     cert_secret: keda-tls-certs
     # -- Port that the interceptor proxy TLS server should be started on
     port: 8443
+    # -- Allowing RBAC for Secrets for dynamic TLS certificates
+    allowCertsFromSecrets: true
 
   # configuration of pdb for the interceptor
   pdb: