allow to define rconfd CA path
By default rconfd
assumes that the vault certificate is signed by the kubernetes CA (because it uses the service account CA). This is very practical in terms of deployment (no secret to deploy), but impose to have access to the kubernetes ca.key
which is often not acceptable.
Allow to overide the CA path (-c
argument) with an env variable (RCONFD_CA
).
Edited by Éric BURGHARD