From 534f3b2d47b2fa27c4d405b2f6e6f56d148441e5 Mon Sep 17 00:00:00 2001
From: lebaudantoine <lebaud.antoine131@gmail.com>
Date: Thu, 18 Sep 2025 16:32:51 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B(helm)=20fix=20MinIO=20webhook=20ce?=
 =?UTF-8?q?rtificate=20after=20Tilt=20stack=20changes?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Restore certificate mounting for MinIO webhook communication to
backend after migrating away from unmaintained Bitnami chart.
Mount certificate in proper volume to enable secure bucket-to-backend
webhook delivery.
---
 src/helm/extra/templates/minio.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/helm/extra/templates/minio.yaml b/src/helm/extra/templates/minio.yaml
index 8729567b..108d753c 100644
--- a/src/helm/extra/templates/minio.yaml
+++ b/src/helm/extra/templates/minio.yaml
@@ -82,9 +82,15 @@ spec:
         volumeMounts:
         - mountPath: /data
           name: data
+        - mountPath: /etc/ssl/certs/mkcert-ca.pem
+          name: mkcert
+          subPath: rootCA.pem
       volumes:
       - name: data
         emptyDir:
+      - name: mkcert
+        secret:
+          secretName: mkcert
 ---
 apiVersion: batch/v1
 kind: Job