Skip to content

Commit 9591acd

Browse files
docs: Document the SecretClass property additionalTrustRoots.configMap (#578)
* docs: Document the SecretClass property additionalTrustRoots.configMap * docs: Fix the references of the SecretClass parameters
1 parent 386d89a commit 9591acd

File tree

1 file changed

+13
-5
lines changed

1 file changed

+13
-5
lines changed

docs/modules/secret-operator/pages/secretclass.adoc

+13-5
Original file line numberDiff line numberDiff line change
@@ -114,8 +114,11 @@ spec:
114114
rsa:
115115
length: 4096
116116
additionalTrustRoots:
117+
- configMap:
118+
name: trust-roots-configmap
119+
namespace: default
117120
- secret:
118-
name: trust-roots
121+
name: trust-roots-secret
119122
namespace: default
120123
maxCertificateLifetime: 15d # optional
121124
----
@@ -129,12 +132,17 @@ spec:
129132
`autoTls.ca.keyGeneration`:: Configures how keys should be generated.
130133
`autoTls.ca.keyGeneration.rsa`:: Declares that keys should be generated using the RSA algorithm.
131134
`autoTls.ca.keyGeneration.rsa.length`:: The amount of bits used for generating the RSA key pair. Currently, `2048`, `3072` and `4096` are supported. Defaults to `2048` bits.
132-
`additionalTrustRoots`:: Configures additional trust roots which are added to the CA files or truststores in the provisioned volume mounts.
133-
`additionalTrustRoots.secret`::
134-
Reference (`name` and `namespace`) to a K8s `Secret` object where the trusted certificates are stored.
135+
`autoTls.additionalTrustRoots`:: Configures additional trust roots which are added to the CA files or truststores in the provisioned volume mounts.
136+
`autoTls.additionalTrustRoots.configMap`::
137+
Reference (`name` and `namespace`) to a K8s `ConfigMap` object where trusted certificates are stored.
138+
The extension of a key defines its content:
139+
* `.crt` denotes a stack of PEM (base64-encoded DER) certificates.
140+
* `.der` denotes a binary DER certificate.
141+
`autoTls.additionalTrustRoots.secret`::
142+
Reference (`name` and `namespace`) to a K8s `Secret` object where trusted certificates are stored.
135143
The extension of a key defines its content:
136144
* `.crt` denotes a stack of PEM (base64-encoded DER) certificates.
137-
* `.der` denotes a a binary DER certificates.
145+
* `.der` denotes a binary DER certificate.
138146
`autoTls.maxCertificateLifetime`:: Maximum lifetime the created certificates are allowed to have. In case consumers request a longer lifetime than allowed by this setting, the lifetime will be the minimum of both.
139147

140148
[#backend-certmanager]

0 commit comments

Comments
 (0)