C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: hubble relay tls error (#9457)

Browse source
This commit is contained in:
charlychiu 2022-11-02 15:14:46 +08:00 committed by GitHub
parent c78862052c
commit 6bff338bad
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/network_plugin/cilium/templates/cilium/config.yml.j2
View file

@ -175,7 +175,7 @@ data:
{% endif %} {% endif %}
hubble-listen-address: ":4244" hubble-listen-address: ":4244"
{% if cilium_enable_hubble and cilium_hubble_install %} {% if cilium_enable_hubble and cilium_hubble_install %}
hubble-disable-tls: "false" hubble-disable-tls: "{% if cilium_hubble_tls_generate %}false{% else %}true{% endif %}"
hubble-tls-cert-file: /var/lib/cilium/tls/hubble/server.crt hubble-tls-cert-file: /var/lib/cilium/tls/hubble/server.crt
hubble-tls-key-file: /var/lib/cilium/tls/hubble/server.key hubble-tls-key-file: /var/lib/cilium/tls/hubble/server.key
hubble-tls-client-ca-files: /var/lib/cilium/tls/hubble/client-ca.crt hubble-tls-client-ca-files: /var/lib/cilium/tls/hubble/client-ca.crt

3
roles/network_plugin/cilium/templates/hubble/config.yml.j2
View file

@ -16,7 +16,8 @@ data:
tls-client-cert-file: /var/lib/hubble-relay/tls/client.crt tls-client-cert-file: /var/lib/hubble-relay/tls/client.crt
tls-client-key-file: /var/lib/hubble-relay/tls/client.key tls-client-key-file: /var/lib/hubble-relay/tls/client.key
tls-hubble-server-ca-files: /var/lib/hubble-relay/tls/hubble-server-ca.crt tls-hubble-server-ca-files: /var/lib/hubble-relay/tls/hubble-server-ca.crt
disable-server-tls: true disable-server-tls: {% if cilium_hubble_tls_generate %}false{% else %}true{% endif %}
disable-client-tls: {% if cilium_hubble_tls_generate %}false{% else %}true{% endif %}
--- ---
# Source: cilium/templates/hubble-ui-configmap.yaml # Source: cilium/templates/hubble-ui-configmap.yaml
apiVersion: v1 apiVersion: v1