fix(ql3): project cnpg runtime trust into private files

2026-09-20 16:07:11 +08:00 · 2026-08-26 04:58:09 +08:00
parent eb34662d01
commit f8934b401d
3 changed files with 60 additions and 10 deletions
@@ -51,12 +51,21 @@ spec:
              value: ql3-postgres-rw.qinglong3-system.svc
              valueFrom: null
      volumes:
-        - name: postgres-runtime-ca
-          secret:
-            secretName: ql3-postgres-ca
-            items:
-              - key: ca.crt
-                path: ca.crt
+        - name: postgres-runtime-projected
+          secret: null
+          projected:
+            defaultMode: 292
+            sources:
+              - secret:
+                  name: ql3-postgres-ca
+                  items:
+                    - key: ca.crt
+                      path: ca.crt
+              - secret:
+                  name: ql3-cluster-control-runtime
+                  items:
+                    - key: api-credential-pepper-keyring.json
+                      path: api-credential-pepper-keyring.json
        - name: postgres-worker-ingress-ca
          secret:
            secretName: ql3-postgres-ca