Skip to content

Commit 96c8ab6

Browse files
fix: address reviews
1 parent dfb7608 commit 96c8ab6

File tree

12 files changed

+182
-187
lines changed

12 files changed

+182
-187
lines changed

distros/kubernetes/nvsentinel/charts/mongodb-store/templates/certmanager.yaml

Lines changed: 0 additions & 60 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,6 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
{{- if .Values.global.mongodbStore.enabled }}
1615
{{- if index .Values "mongodb-store" "usePerconaOperator" }}
1716
---
1817
apiVersion: cert-manager.io/v1
@@ -25,39 +24,6 @@ spec:
2524
duration: 8760h
2625
renewBefore: 360h
2726
commonName: mongo-user-client
28-
# Add unique URI to force reissuance on each install
29-
# Ensures client cert always regenerates with current CA
30-
uris:
31-
- "spiffe://cluster.local/ns/nvsentinel/mongo-user/{{ randAlphaNum 12 }}"
32-
subject:
33-
organizations:
34-
- Nvidia
35-
organizationalUnits:
36-
- DGXC
37-
localities:
38-
- SantaClara
39-
provinces:
40-
- California
41-
countries:
42-
- US
43-
issuerRef:
44-
name: mongodb-psmdb-issuer
45-
kind: Issuer
46-
group: cert-manager.io
47-
---
48-
# Client Certificate for DGXCOps Users
49-
apiVersion: cert-manager.io/v1
50-
kind: Certificate
51-
metadata:
52-
name: mongo-dgxcops-client-cert
53-
namespace: {{ $.Release.Namespace }}
54-
spec:
55-
secretName: mongo-dgxcops-client-cert-secret
56-
duration: 8760h
57-
renewBefore: 360h
58-
commonName: mongo-dgxcops-client
59-
uris:
60-
- "spiffe://cluster.local/ns/nvsentinel/mongo-dgxcops/{{ randAlphaNum 12 }}"
6127
subject:
6228
organizations:
6329
- Nvidia
@@ -122,31 +88,6 @@ spec:
12288
kind: Issuer
12389
---
12490
apiVersion: cert-manager.io/v1
125-
kind: Certificate
126-
metadata:
127-
name: mongo-dgxcops-client-cert
128-
namespace: {{ $.Release.Namespace }}
129-
spec:
130-
secretName: mongo-dgxcops-client-cert-secret
131-
duration: 8760h
132-
renewBefore: 360h
133-
commonName: mongo-dgxcops-client
134-
subject:
135-
organizations:
136-
- Nvidia
137-
organizationalUnits:
138-
- DGXC
139-
localities:
140-
- SantaClara
141-
provinces:
142-
- California
143-
countries:
144-
- US
145-
issuerRef:
146-
name: mongo-ca-issuer
147-
kind: Issuer
148-
---
149-
apiVersion: cert-manager.io/v1
15091
kind: Issuer
15192
metadata:
15293
name: mongo-ca-issuer
@@ -181,4 +122,3 @@ spec:
181122
name: selfsigned-ca-issuer
182123
kind: Issuer
183124
{{- end }}
184-
{{- end }}

distros/kubernetes/nvsentinel/charts/mongodb-store/templates/configmap.yaml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,6 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
{{- if .Values.global.mongodbStore.enabled }}
1615
apiVersion: v1
1716
kind: ConfigMap
1817
metadata:
@@ -35,4 +34,3 @@ data:
3534
MONGODB_CHANGE_STREAM_RETRY_INTERVAL_SECONDS: "5"
3635
UNPROCESSED_EVENTS_METRIC_UPDATE_INTERVAL_SECONDS: "25"
3736
MONGODB_COLLECTION_EXPIRY_SECONDS: "2592000"
38-
{{- end }}

distros/kubernetes/nvsentinel/charts/mongodb-store/templates/encryption-key-secret.yaml

Lines changed: 0 additions & 34 deletions
This file was deleted.

0 commit comments

Comments
 (0)