Function sslClient

tests/utils/objectstore/objectstore.go:505–553

sslClient returns the Deployment definition for an S3 client using SSL

(namespace string)

// sslClient returns the Deployment definition for an S3 client using SSL
func sslClient(namespace string) appsv1.Deployment {
	const (
		caSecretName       = "object-store-ca-secret"
		tlsVolumeName      = "secret-volume"
		tlsVolumeMountPath = "/etc/secrets/ca"
	)
	var secretMode int32 = 0o600

	clientDeployment := defaultClient(namespace)
	podSpec := &clientDeployment.Spec.Template.Spec
	podSpec.Volumes = append(podSpec.Volumes,
		corev1.Volume{
			Name: tlsVolumeName,
			VolumeSource: corev1.VolumeSource{
				Secret: &corev1.SecretVolumeSource{
					SecretName:  caSecretName,
					DefaultMode: &secretMode,
				},
			},
		},
	)
	podSpec.Containers[0].VolumeMounts = append(
		podSpec.Containers[0].VolumeMounts,
		corev1.VolumeMount{
			Name:      tlsVolumeName,
			MountPath: tlsVolumeMountPath,
		},
	)
	endpointUpdated := false
	for i := range podSpec.Containers[0].Env {
		if podSpec.Containers[0].Env[i].Name == "AWS_ENDPOINT_URL" {
			podSpec.Containers[0].Env[i].Value = "https://object-store.object-store:9000"
			endpointUpdated = true
			break
		}
	}
	if !endpointUpdated {
		panic("sslClient: AWS_ENDPOINT_URL not found in defaultClient env")
	}
	podSpec.Containers[0].Env = append(
		podSpec.Containers[0].Env,
		corev1.EnvVar{
			Name:  "AWS_CA_BUNDLE",
			Value: tlsVolumeMountPath + "/ca.crt",
		},
	)

	return clientDeployment
}

// Deploy will create a full object storage deployment defined in the storeEnv variable
func Deploy(storeEnv *Env, env *environment.TestingEnvironment) (*appsv1.Deployment, error) {