Remove linkerd auto-rotation certs.
This commit is contained in:
@@ -5,8 +5,6 @@ let
|
|||||||
|
|
||||||
pki = import ./pki.nix { inherit pkgs; ca = cfg.initca; };
|
pki = import ./pki.nix { inherit pkgs; ca = cfg.initca; };
|
||||||
|
|
||||||
linkerd-certs = import ./linkerd-certs.nix { inherit pkgs; };
|
|
||||||
|
|
||||||
masterAddress = cfg.k8s.master.address;
|
masterAddress = cfg.k8s.master.address;
|
||||||
|
|
||||||
apiserverAddress = "https://${masterAddress}:4443";
|
apiserverAddress = "https://${masterAddress}:4443";
|
||||||
@@ -56,8 +54,6 @@ let
|
|||||||
acme_email="${cfg.k8s.charts.acme_email}"
|
acme_email="${cfg.k8s.charts.acme_email}"
|
||||||
grafana_smtp_user="$(echo -n ${cfg.k8s.charts.grafana_smtp_user} | base64 -w0)"
|
grafana_smtp_user="$(echo -n ${cfg.k8s.charts.grafana_smtp_user} | base64 -w0)"
|
||||||
grafana_smtp_password="$(echo -n ${cfg.k8s.charts.grafana_smtp_password} | base64 -w0)"
|
grafana_smtp_password="$(echo -n ${cfg.k8s.charts.grafana_smtp_password} | base64 -w0)"
|
||||||
linkerd_identity_ca="${linkerd-certs.identity}"
|
|
||||||
linkerd_webhook_ca="${linkerd-certs.webhook}"
|
|
||||||
)
|
)
|
||||||
|
|
||||||
# -------------------- no modifications below --------------------
|
# -------------------- no modifications below --------------------
|
||||||
|
|||||||
@@ -1,18 +0,0 @@
|
|||||||
{ pkgs, ... }:
|
|
||||||
let
|
|
||||||
identity = import ./initca.nix {
|
|
||||||
inherit pkgs;
|
|
||||||
name = "linkerd-identity-ca";
|
|
||||||
algo = "ecdsa";
|
|
||||||
hosts = [ "identity.linkerd.cluster.local" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
webhook = import ./initca.nix {
|
|
||||||
inherit pkgs;
|
|
||||||
name = "linkerd-webhook-ca";
|
|
||||||
algo = "ecdsa";
|
|
||||||
hosts = [ "webhook.linkerd.cluster.local" ];
|
|
||||||
};
|
|
||||||
in {
|
|
||||||
inherit identity webhook;
|
|
||||||
}
|
|
||||||
Reference in New Issue
Block a user