Add private key config to certificate template and values

2025-10-08 13:19:57 +02:00
parent 0935010f89
commit c0832ff59b
2 changed files with 9 additions and 1 deletions
--- a/helm/api7ee-demo-k8s/templates/certificate.yaml
+++ b/helm/api7ee-demo-k8s/templates/certificate.yaml
@@ -15,6 +15,11 @@ spec:
    {{- range .Values.api7.hosts }}
    - {{ . | quote }}
    {{- end }}
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS1
+    size: 2048
+    rotationPolicy: {{ .Values.api7.tls.privateKey.rotationPolicy | default "Always" }}
  usages:
    - digital signature
    - key encipherment
@@ -22,4 +27,4 @@ spec:
    - client auth
  duration: 2160h  # 90 days
  renewBefore: 720h  # 30 days before expiry
-{{- end }}
+{{- end }}