I am using linkerd-viz and linkerd-control-plane helm charts.
The former has tap.caBundle, tap.crtPEM, tap.keyPEM, tapInjector.caBundle, tapInjector.crtPEM, tapInjector.keyPEM values.
The latter has identityTrustAnchorsPEM, identity.issuer.tls.crtPEM, identity.issuer.tls.keyPEM values.
Can I set
tap.caBundle == tapInjector.caBundle == identityTrustAnchorsPEM
AND
tap.crtPEM == tapInjector.crtPEM == identity.issuer.tls.crtPEM
AND
tap.keyPEM == tapInjector.keyPEM == identity.issuer.tls.keyPEM
?
Is this practice possible and proper?
For example, if I write on helmfile's config, it'd be like the snippet below.
(helmfile runs helm internally. For example, set: in yaml is equal to --set-file in cli)
- name: linkerd-viz
set:
- name: tap.caBundle
file: values/prod/certs/linkerd.ca.crt
- name: tap.crtPEM
file: values/prod/certs/linkerd.tls.crt
- name: tap.keyPEM
file: values/prod/certs/linkerd.tls.key
- name: tapInjector.caBundle
file: values/prod/certs/linkerd.ca.crt
- name: tapInjector.crtPEM
file: values/prod/certs/linkerd.tls.crt
- name: tapInjector.keyPEM
file: values/prod/certs/linkerd.tls.key
- name: linkerd-control-plane
set:
- name: identityTrustAnchorsPEM
file: values/prod/certs/linkerd.ca.crt
- name: identity.issuer.tls.crtPEM
file: values/prod/certs/linkerd.tls.crt
- name: identity.issuer.tls.keyPEM
file: values/prod/certs/linkerd.tls.key