You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/modules/secret-operator/pages/secretclass.adoc
+13-5
Original file line number
Diff line number
Diff line change
@@ -114,8 +114,11 @@ spec:
114
114
rsa:
115
115
length: 4096
116
116
additionalTrustRoots:
117
+
- configMap:
118
+
name: trust-roots-configmap
119
+
namespace: default
117
120
- secret:
118
-
name: trust-roots
121
+
name: trust-roots-secret
119
122
namespace: default
120
123
maxCertificateLifetime: 15d # optional
121
124
----
@@ -129,12 +132,17 @@ spec:
129
132
`autoTls.ca.keyGeneration`:: Configures how keys should be generated.
130
133
`autoTls.ca.keyGeneration.rsa`:: Declares that keys should be generated using the RSA algorithm.
131
134
`autoTls.ca.keyGeneration.rsa.length`:: The amount of bits used for generating the RSA key pair. Currently, `2048`, `3072` and `4096` are supported. Defaults to `2048` bits.
132
-
`additionalTrustRoots`:: Configures additional trust roots which are added to the CA files or truststores in the provisioned volume mounts.
133
-
`additionalTrustRoots.secret`::
134
-
Reference (`name` and `namespace`) to a K8s `Secret` object where the trusted certificates are stored.
135
+
`autoTls.additionalTrustRoots`:: Configures additional trust roots which are added to the CA files or truststores in the provisioned volume mounts.
136
+
`autoTls.additionalTrustRoots.configMap`::
137
+
Reference (`name` and `namespace`) to a K8s `ConfigMap` object where trusted certificates are stored.
138
+
The extension of a key defines its content:
139
+
* `.crt` denotes a stack of PEM (base64-encoded DER) certificates.
140
+
* `.der` denotes a binary DER certificate.
141
+
`autoTls.additionalTrustRoots.secret`::
142
+
Reference (`name` and `namespace`) to a K8s `Secret` object where trusted certificates are stored.
135
143
The extension of a key defines its content:
136
144
* `.crt` denotes a stack of PEM (base64-encoded DER) certificates.
137
-
* `.der` denotes a a binary DER certificates.
145
+
* `.der` denotes a binary DER certificate.
138
146
`autoTls.maxCertificateLifetime`:: Maximum lifetime the created certificates are allowed to have. In case consumers request a longer lifetime than allowed by this setting, the lifetime will be the minimum of both.
0 commit comments