Skip to content

helm: clustermesh: deprecate passing tls cert/keys in values#42576

Merged
giorio94 merged 3 commits intocilium:mainfrom
MrFreezeex:clustermesh-existing-secret
Nov 14, 2025
Merged

helm: clustermesh: deprecate passing tls cert/keys in values#42576
giorio94 merged 3 commits intocilium:mainfrom
MrFreezeex:clustermesh-existing-secret

Conversation

@MrFreezeex
Copy link
Copy Markdown
Member

@MrFreezeex MrFreezeex commented Nov 4, 2025

This PR is mainly to match hubble deprecating cert passing in values.
Also slightly clarify that disabling the config could be used to generate the clustermesh secrets as some users are already doing (for instance this issue #42330 mentions a setup using External Secret Operator).

clustermesh: deprecate passing tls cert/keys in Helm values

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Nov 4, 2025
@MrFreezeex MrFreezeex added release-note/minor This PR changes functionality that users may find relevant to operating Cilium. area/clustermesh Relates to multi-cluster routing functionality in Cilium. area/helm Impacts helm charts and user deployment experience and removed dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. labels Nov 4, 2025
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch from 1286689 to a260438 Compare November 4, 2025 00:24
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

@MrFreezeex MrFreezeex marked this pull request as ready for review November 4, 2025 11:16
@MrFreezeex MrFreezeex requested review from a team as code owners November 4, 2025 11:16
@youngnick youngnick removed their request for review November 5, 2025 02:39
@giorio94 giorio94 added the dont-merge/waiting-for-review Requires further review before merging. label Nov 5, 2025
Copy link
Copy Markdown
Member

@giorio94 giorio94 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a lot for taking care of this 🚀 I've left a few comments inline, mostly suggestions while you are touching these bits.

@giorio94 giorio94 removed the dont-merge/waiting-for-review Requires further review before merging. label Nov 5, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Nov 5, 2025
@MrFreezeex MrFreezeex removed the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Nov 5, 2025
@MrFreezeex MrFreezeex marked this pull request as draft November 5, 2025 22:35
@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch 2 times, most recently from de609b9 to 3fa1865 Compare November 10, 2025 22:12
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

This cert is no longer used and was still present in Helm.

Signed-off-by: Arthur Outhenin-Chalandre <git@mrfreezeex.fr>
@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch from 3fa1865 to 41964ff Compare November 10, 2025 22:43
@MrFreezeex MrFreezeex changed the title helm: clustermesh: add existingSecret to tls-provided secrets helm: clustermesh: allow customizing tls secrets and deprecate passing tls cert/keys in values Nov 10, 2025
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

@MrFreezeex MrFreezeex marked this pull request as ready for review November 11, 2025 15:53
@MrFreezeex MrFreezeex requested a review from a team as a code owner November 11, 2025 15:53
Copy link
Copy Markdown
Member

@giorio94 giorio94 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! A few comments inline.

@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch 3 times, most recently from adafadd to c3495a0 Compare November 11, 2025 18:40
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

Copy link
Copy Markdown
Member

@qmonnet qmonnet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ack for doc change, thanks!

@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch from c3495a0 to e417231 Compare November 13, 2025 21:06
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

Copy link
Copy Markdown
Member

@giorio94 giorio94 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! Just a couple of final nits inline.

@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch from e417231 to 6c0f5fb Compare November 14, 2025 13:37
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

Signed-off-by: Arthur Outhenin-Chalandre <git@mrfreezeex.fr>
@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch from 6c0f5fb to 81a6489 Compare November 14, 2025 13:41
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

Signed-off-by: Arthur Outhenin-Chalandre <git@mrfreezeex.fr>
@MrFreezeex MrFreezeex force-pushed the clustermesh-existing-secret branch from 81a6489 to d01ae5a Compare November 14, 2025 13:53
@MrFreezeex
Copy link
Copy Markdown
Member Author

/test

@giorio94 giorio94 added this pull request to the merge queue Nov 14, 2025
Merged via the queue into cilium:main with commit 7a206aa Nov 14, 2025
72 of 73 checks passed
@cilium-release-bot cilium-release-bot bot moved this to Released in cilium v1.19.0 Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/clustermesh Relates to multi-cluster routing functionality in Cilium. area/helm Impacts helm charts and user deployment experience release-note/minor This PR changes functionality that users may find relevant to operating Cilium.

Projects

No open projects
Status: Released

Development

Successfully merging this pull request may close these issues.

4 participants