Elgato_dark/bunkerweb
1
0
Fork 0
mirror of https://github.com/bunkerity/bunkerweb synced 2026-05-24 09:28:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

autoconf - add KUBERNETES_VERIFY_SSL env var

Browse source
This commit is contained in:
fl0ppy-d1sk 2024-10-28 11:53:30 +01:00
parent 8925e5c71c
commit 5f8bc4ec82
No known key found for this signature in database
GPG key ID: 93EE47CC3D061500
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
docs/integrations.md
View file

@ -746,6 +746,9 @@ Given the presence of multiple BunkerWeb instances, it is necessary to establish
Please ensure that the autoconf services have access to the Kubernetes API. It is recommended to utilize [RBAC authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/) for this purpose.
!!! warn "Custom CA for Kubernetes API"
At the moment, using a custom CA for the Kubernetes API is not supported by the autoconf. The only workaround available is to disable certificate verification by setting the `KUBERNETES_SSL_VERIFY` environment variable of the autoconf to `no` (default is `yes`).
Additionally, **it is crucial to set the `KUBERNETES_MODE` environment variable to `yes` when utilizing the Kubernetes integration**. This variable is mandatory for proper functionality.
To assist you, here is a YAML boilerplate that can serve as a foundation for your configuration:

1
src/autoconf/IngressController.py
View file

@ -17,6 +17,7 @@ class IngressController(Controller):
self.__internal_lock = Lock()
super().__init__("kubernetes")
config.load_incluster_config()
config.verify_ssl = getenv("KUBERNETES_VERIFY_SSL", "yes") == "yes"
self.__corev1 = client.CoreV1Api()
self.__networkingv1 = client.NetworkingV1Api()
self.__use_fqdn = getenv("USE_KUBERNETES_FQDN", "yes").lower() == "yes"