Add certificates volumeMount to geo-logcursor init containers

What does this MR do?

This adds the certificates volumeMount to the geo-logcursor init containers. Adding this allows the geo-logcursor init containers to trust CA certificates provided in the global.certificates.customCAs Helm Chart value.

For my specific use-case, I was attempting to add these Amazon RDS certificate bundles to global.certificates.customCAs in order for GitLab services to trust the server certificate used by Amazon RDS. This seems to work for other services in the GitLab Helm Chart, but geo-logcursor fails with this error in the logs.

Error checking geo: connection to server at "10.24.5.166", port 5431 failed: SSL error: certificate verify failed

Related issues

GitLab internal issue: https://gitlab.com/gitlab-com/gl-infra/gitlab-dedicated/team/-/issues/7653

Author checklist

For general guidance, please follow our Contributing guide.

Required

For anything in this list which will not be completed, please provide a reason in the MR discussion.

  • Merge Request Title and Description are up to date, accurate, and descriptive.
  • MR targeting the appropriate branch.
  • MR has a green pipeline.
  • Documentation created/updated.
    • I didn't make any documentation updates since the fix doesn't change expected behavior
  • Tests added/updated, and test plan for scenarios not covered by automated tests.
  • Equivalent MR/issue for omnibus-gitlab opened.
    • This does not require any change for omnibus-gitlab

Reviewers checklist

Edited by Clemens Beck

Merge request reports

Loading
Loading