Add certificates volumeMount to geo-logcursor init containers
What does this MR do?
This adds the certificates volumeMount to the geo-logcursor init containers. Adding this allows the geo-logcursor init containers to trust CA certificates provided in the global.certificates.customCAs Helm Chart value.
For my specific use-case, I was attempting to add these Amazon RDS certificate bundles to global.certificates.customCAs in order for GitLab services to trust the server certificate used by Amazon RDS. This seems to work for other services in the GitLab Helm Chart, but geo-logcursor fails with this error in the logs.
Error checking geo: connection to server at "10.24.5.166", port 5431 failed: SSL error: certificate verify failed
Related issues
GitLab internal issue: https://gitlab.com/gitlab-com/gl-infra/gitlab-dedicated/team/-/issues/7653
Author checklist
For general guidance, please follow our Contributing guide.
Required
For anything in this list which will not be completed, please provide a reason in the MR discussion.
-
Merge Request Title and Description are up to date, accurate, and descriptive. -
MR targeting the appropriate branch. -
MR has a green pipeline. -
Documentation created/updated. - I didn't make any documentation updates since the fix doesn't change expected behavior
-
Tests added/updated, and test plan for scenarios not covered by automated tests. -
Equivalent MR/issue for omnibus-gitlab opened. - This does not require any change for omnibus-gitlab
Reviewers checklist
-
MR has a green pipeline on https://gitlab.com/gitlab-org/charts/gitlab. -
Consider downstream impact to the Operator, as per evaluating impact from changes to GitLab Chart.