Sienna Meridian Satterwhite
33f0e44545
cert-manager self-signed CA issues server and client certs for BuildKit mTLS. Buildkitd serves TLS on its ClusterIP (hostNetwork removed) and is publicly reachable at build.DOMAIN_SUFFIX:443 through Pingora's new SNI-based TLS passthrough router. Clients authenticate with the client certificate from the buildkitd-client-tls secret.
9 lines
176 B
YAML
9 lines
176 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- buildkitd-mtls.yaml
|
|
- buildkitd-deployment.yaml
|
|
- buildkitd-service.yaml
|