feat: Add support for Custom CA to controller manager (#206)

charts/operator/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: operator
 description: A Helm chart for Weights & Biases operator
 type: application
-version: 1.2.4
+version: 1.3.0
 appVersion: "1.0.0"
 maintainers:
  - name: wandb

charts/operator/templates/configmap.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.customCACerts }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: {{ include "operator.fullname" . }}-ca-certs
+data:
+ {{- range $index, $pem := .Values.customCACerts }}
+ customCA{{$index}}.crt: |-
+ {{- range splitList "\n" $pem }}
+ {{ . }}
+ {{- end }}
+ {{- end }}
+{{- end }}

charts/operator/templates/deployment.yaml

@@ -47,6 +47,10 @@ spec:
  fieldPath: spec.serviceAccountName
  - name: AIRGAPPED
  value: {{ .Values.airgapped | quote }}
+ {{- if .Values.customCACerts }}
+ - name: SSL_CERT_DIR
+ value: /certs
+ {{- end }}
  livenessProbe:
  httpGet:
  path: /healthz
@@ -65,11 +69,25 @@ spec:
  - name: {{ include "name" . }}-charts
  mountPath: /charts
  {{- end }}
+ {{- if .Values.customCACerts }}
+ {{- range $index, $v := .Values.customCACerts }}
+ volumeMounts:
+ - name: wandb-ca-certs
+ mountPath: /certs/customCA{{$index}}.crt
+ subPath: customCA{{$index}}.crt
+ {{- end }}
+ {{- end }}
  {{- if .Values.airgapped }}
  volumes:
  - name: {{ include "name" . }}-charts
  configMap:
  name: {{ include "name" . }}-charts
  {{- end }}
+ {{- if .Values.customCACerts }}
+ volumes:
+ - name: wandb-ca-certs
+ configMap:
+ name: {{ include "operator.fullname" . }}-ca-certs
+ {{- end }}
  serviceAccountName: {{ include "manager.serviceAccount.name" . }}
  terminationGracePeriodSeconds: 10

charts/operator/values.yaml

@@ -202,3 +202,5 @@ airgapped: false
 namespaceIsolation:
  enabled: false
  additionalNamespaces: []
+
+customCACerts: []