Skip to content

feat: support redis TLS #2777

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Ubisoft-potato wants to merge 5 commits into
base: main
Choose a base branch
from
Open

feat: support redis TLS #2777

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
c78800e
feat: support redis TLS
Ubisoft-potato Aug 17, 2026
a40b3a4
fix: wire Redis TLS into segmentUserPersister's redis client
Ubisoft-potato Aug 19, 2026
3f888c6
feat: support Redis TLS in redis-data-copy and delete-redis-retry-key…
Ubisoft-potato Aug 20, 2026
a0b4b5e
fix: pass TLS options to redis client in delete-redis-retry-keys
Ubisoft-potato Aug 28, 2026
83935e3
Merge remote-tracking branch 'origin/main' into feat-redis-tls
Ubisoft-potato Aug 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions manifests/bucketeer/charts/api/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,11 @@ spec:
secret:
secretName: {{ .Values.global.operationalDatabase.postgres.sslSecretName }}
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
secret:
secretName: {{ .Values.global.pubsub.redis.tlsSecretName }}
{{- end }}
{{- if .Values.serviceAccount.annotations }}
serviceAccountName: {{ template "api.fullname" . }}
{{- end }}
Expand Down Expand Up @@ -114,6 +119,16 @@ spec:
value: "{{ .Values.env.redis.poolMaxActive }}"
- name: BUCKETEER_API_REDIS_MODE
value: "{{ .Values.env.redis.mode }}"
- name: BUCKETEER_API_REDIS_TLS_ENABLED
value: "{{ .Values.env.redis.tlsEnabled }}"
- name: BUCKETEER_API_REDIS_TLS_CA_CERT
value: "{{ .Values.env.redis.tlsCACert }}"
- name: BUCKETEER_API_REDIS_TLS_CERT
value: "{{ .Values.env.redis.tlsCert }}"
- name: BUCKETEER_API_REDIS_TLS_KEY
value: "{{ .Values.env.redis.tlsKey }}"
- name: BUCKETEER_API_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.redis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_API_PUBSUB_REDIS_PARTITION_COUNT
value: "{{ .Values.global.pubsub.redis.partitionCount }}"
- name: BUCKETEER_API_OLDEST_EVENT_TIMESTAMP
Expand Down Expand Up @@ -168,6 +183,16 @@ spec:
value: "{{ .Values.global.pubsub.redis.minIdle }}"
- name: BUCKETEER_API_PUBSUB_REDIS_MODE
value: "{{ .Values.env.pubSubRedisMode }}"
- name: BUCKETEER_API_PUBSUB_REDIS_TLS_ENABLED
value: "{{ .Values.global.pubsub.redis.tlsEnabled }}"
- name: BUCKETEER_API_PUBSUB_REDIS_TLS_CA_CERT
value: "{{ .Values.global.pubsub.redis.tlsCACert }}"
- name: BUCKETEER_API_PUBSUB_REDIS_TLS_CERT
value: "{{ .Values.global.pubsub.redis.tlsCert }}"
- name: BUCKETEER_API_PUBSUB_REDIS_TLS_KEY
value: "{{ .Values.global.pubsub.redis.tlsKey }}"
- name: BUCKETEER_API_PUBSUB_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.global.pubsub.redis.tlsInsecureSkipVerify }}"
{{- if .Values.env.featuresMemoryCacheTTL }}
- name: BUCKETEER_API_FEATURES_MEMORY_CACHE_TTL
value: "{{ .Values.env.featuresMemoryCacheTTL }}"
Expand Down Expand Up @@ -218,6 +243,11 @@ spec:
mountPath: /usr/local/certs/postgres
readOnly: true
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
mountPath: /usr/local/certs/redis
readOnly: true
{{- end }}
ports:
- name: service
containerPort: {{ .Values.env.port }}
Expand Down
5 changes: 5 additions & 0 deletions manifests/bucketeer/charts/api/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,11 @@ env:
poolMaxActive: 25
addr:
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
oldestEventTimestamp:
furthestEventTimestamp:
# Grace window applied to the diff filters for:
Expand Down
30 changes: 30 additions & 0 deletions manifests/bucketeer/charts/batch/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,11 @@ spec:
secret:
secretName: {{ .Values.global.operationalDatabase.postgres.sslSecretName }}
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
secret:
secretName: {{ .Values.global.pubsub.redis.tlsSecretName }}
{{- end }}
- name: oauth-key-secret
secret:
secretName: {{ template "oauth-key-secret" . }}
Expand Down Expand Up @@ -188,6 +193,16 @@ spec:
value: "{{ .Values.env.persistentRedis.poolMaxActive }}"
- name: BUCKETEER_BATCH_PERSISTENT_REDIS_MODE
value: "{{ .Values.env.persistentRedis.mode }}"
- name: BUCKETEER_BATCH_PERSISTENT_REDIS_TLS_ENABLED
value: "{{ .Values.env.persistentRedis.tlsEnabled }}"
- name: BUCKETEER_BATCH_PERSISTENT_REDIS_TLS_CA_CERT
value: "{{ .Values.env.persistentRedis.tlsCACert }}"
- name: BUCKETEER_BATCH_PERSISTENT_REDIS_TLS_CERT
value: "{{ .Values.env.persistentRedis.tlsCert }}"
- name: BUCKETEER_BATCH_PERSISTENT_REDIS_TLS_KEY
value: "{{ .Values.env.persistentRedis.tlsKey }}"
- name: BUCKETEER_BATCH_PERSISTENT_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.persistentRedis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_SERVER_NAME
value: "{{ .Values.env.nonPersistentRedis.serverName }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_ADDR
Expand All @@ -198,6 +213,16 @@ spec:
value: "{{ .Values.env.nonPersistentRedis.poolMaxActive }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_MODE
value: "{{ .Values.env.nonPersistentRedis.mode }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_TLS_ENABLED
value: "{{ .Values.env.nonPersistentRedis.tlsEnabled }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_TLS_CA_CERT
value: "{{ .Values.env.nonPersistentRedis.tlsCACert }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_TLS_CERT
value: "{{ .Values.env.nonPersistentRedis.tlsCert }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_TLS_KEY
value: "{{ .Values.env.nonPersistentRedis.tlsKey }}"
- name: BUCKETEER_BATCH_NON_PERSISTENT_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.nonPersistentRedis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_BATCH_EXPERIMENT_LOCK_TTL
value: "{{ .Values.env.experimentLockTTL }}"
- name: BUCKETEER_BATCH_STAN_MODEL_ID
Expand All @@ -223,6 +248,11 @@ spec:
mountPath: /usr/local/certs/postgres
readOnly: true
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
mountPath: /usr/local/certs/redis
readOnly: true
{{- end }}
- name: oauth-key-secret
mountPath: /usr/local/oauth-key
readOnly: true
Expand Down
10 changes: 10 additions & 0 deletions manifests/bucketeer/charts/batch/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,12 +60,22 @@ env:
poolMaxIdle: 25
poolMaxActive: 25
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
nonPersistentRedis:
serverName:
addr:
poolMaxIdle: 25
poolMaxActive: 25
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
nonPersistentChildRedis:
addresses:
experimentLockTTL: 10m
Expand Down
30 changes: 30 additions & 0 deletions manifests/bucketeer/charts/subscriber/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,11 @@ spec:
secret:
secretName: {{ .Values.global.operationalDatabase.postgres.sslSecretName }}
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
secret:
secretName: {{ .Values.global.pubsub.redis.tlsSecretName }}
{{- end }}
- name: subscriber-config
configMap:
name: {{ template "subscriber.fullname" . }}-subscribers-config
Expand Down Expand Up @@ -179,6 +184,16 @@ spec:
value: "{{ .Values.env.persistentRedis.poolMaxActive }}"
- name: BUCKETEER_SUBSCRIBER_PERSISTENT_REDIS_MODE
value: "{{ .Values.env.persistentRedis.mode }}"
- name: BUCKETEER_SUBSCRIBER_PERSISTENT_REDIS_TLS_ENABLED
value: "{{ .Values.env.persistentRedis.tlsEnabled }}"
- name: BUCKETEER_SUBSCRIBER_PERSISTENT_REDIS_TLS_CA_CERT
value: "{{ .Values.env.persistentRedis.tlsCACert }}"
- name: BUCKETEER_SUBSCRIBER_PERSISTENT_REDIS_TLS_CERT
value: "{{ .Values.env.persistentRedis.tlsCert }}"
- name: BUCKETEER_SUBSCRIBER_PERSISTENT_REDIS_TLS_KEY
value: "{{ .Values.env.persistentRedis.tlsKey }}"
- name: BUCKETEER_SUBSCRIBER_PERSISTENT_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.persistentRedis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_SERVER_NAME
value: "{{ .Values.env.nonPersistentRedis.serverName }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_ADDR
Expand All @@ -189,6 +204,16 @@ spec:
value: "{{ .Values.env.nonPersistentRedis.poolMaxActive }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_MODE
value: "{{ .Values.env.nonPersistentRedis.mode }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_TLS_ENABLED
value: "{{ .Values.env.nonPersistentRedis.tlsEnabled }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_TLS_CA_CERT
value: "{{ .Values.env.nonPersistentRedis.tlsCACert }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_TLS_CERT
value: "{{ .Values.env.nonPersistentRedis.tlsCert }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_TLS_KEY
value: "{{ .Values.env.nonPersistentRedis.tlsKey }}"
- name: BUCKETEER_SUBSCRIBER_NON_PERSISTENT_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.nonPersistentRedis.tlsInsecureSkipVerify }}"

volumeMounts:
- name: service-cert-secret
Expand All @@ -202,6 +227,11 @@ spec:
mountPath: /usr/local/certs/postgres
readOnly: true
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
mountPath: /usr/local/certs/redis
readOnly: true
{{- end }}
- name: email-config
mountPath: /usr/local/email-config
readOnly: true
Expand Down
15 changes: 15 additions & 0 deletions manifests/bucketeer/charts/subscriber/templates/subscribers-configmap.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,11 @@ data:
{{- $_ := set $config "redisMode" $.Values.global.pubsub.redis.mode }}
{{- $_ := set $config "project" $.Values.global.pubsub.project }}
{{- $_ := set $config "redisPartitionCount" $.Values.global.pubsub.redis.partitionCount }}
{{- $_ := set $config "redisTLSEnabled" $.Values.global.pubsub.redis.tlsEnabled }}
{{- $_ := set $config "redisTLSCACert" $.Values.global.pubsub.redis.tlsCACert }}
{{- $_ := set $config "redisTLSCert" $.Values.global.pubsub.redis.tlsCert }}
{{- $_ := set $config "redisTLSKey" $.Values.global.pubsub.redis.tlsKey }}
{{- $_ := set $config "redisTLSInsecureSkipVerify" $.Values.global.pubsub.redis.tlsInsecureSkipVerify }}
{{- end }}
{{ toJson $subscribers }}

Expand All @@ -40,6 +45,11 @@ data:
{{- $_ := set $config "redisMode" $.Values.global.pubsub.redis.mode }}
{{- $_ := set $config "project" $.Values.global.pubsub.project }}
{{- $_ := set $config "redisPartitionCount" $.Values.global.pubsub.redis.partitionCount }}
{{- $_ := set $config "redisTLSEnabled" $.Values.global.pubsub.redis.tlsEnabled }}
{{- $_ := set $config "redisTLSCACert" $.Values.global.pubsub.redis.tlsCACert }}
{{- $_ := set $config "redisTLSCert" $.Values.global.pubsub.redis.tlsCert }}
{{- $_ := set $config "redisTLSKey" $.Values.global.pubsub.redis.tlsKey }}
{{- $_ := set $config "redisTLSInsecureSkipVerify" $.Values.global.pubsub.redis.tlsInsecureSkipVerify }}
{{- end }}
{{ toJson .Values.onDemandSubscribers }}

Expand All @@ -59,6 +69,11 @@ data:
{{- $_ := set $config "redisMode" $.Values.global.pubsub.redis.mode }}
{{- $_ := set $config "project" $.Values.global.pubsub.project }}
{{- $_ := set $config "redisPartitionCount" $.Values.global.pubsub.redis.partitionCount }}
{{- $_ := set $config "redisTLSEnabled" $.Values.global.pubsub.redis.tlsEnabled }}
{{- $_ := set $config "redisTLSCACert" $.Values.global.pubsub.redis.tlsCACert }}
{{- $_ := set $config "redisTLSCert" $.Values.global.pubsub.redis.tlsCert }}
{{- $_ := set $config "redisTLSKey" $.Values.global.pubsub.redis.tlsKey }}
{{- $_ := set $config "redisTLSInsecureSkipVerify" $.Values.global.pubsub.redis.tlsInsecureSkipVerify }}
Comment thread
Ubisoft-potato marked this conversation as resolved.
{{- end }}
{{- end }}
{{ toJson $processors }}
Expand Down
10 changes: 10 additions & 0 deletions manifests/bucketeer/charts/subscriber/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,12 +55,22 @@ env:
poolMaxIdle: 25
poolMaxActive: 25
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
nonPersistentRedis:
serverName:
addr:
poolMaxIdle: 25
poolMaxActive: 25
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false

affinity: {}

Expand Down
40 changes: 40 additions & 0 deletions manifests/bucketeer/charts/web/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,11 @@ spec:
secret:
secretName: {{ .Values.global.operationalDatabase.postgres.sslSecretName }}
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
secret:
secretName: {{ .Values.global.pubsub.redis.tlsSecretName }}
{{- end }}
- name: oauth-key-secret
secret:
secretName: {{ template "oauth-key-secret" . }}
Expand Down Expand Up @@ -123,6 +128,16 @@ spec:
value: "{{ .Values.env.persistentRedis.poolMaxActive }}"
- name: BUCKETEER_WEB_PERSISTENT_REDIS_MODE
value: "{{ .Values.env.persistentRedis.mode }}"
- name: BUCKETEER_WEB_PERSISTENT_REDIS_TLS_ENABLED
value: "{{ .Values.env.persistentRedis.tlsEnabled }}"
- name: BUCKETEER_WEB_PERSISTENT_REDIS_TLS_CA_CERT
value: "{{ .Values.env.persistentRedis.tlsCACert }}"
- name: BUCKETEER_WEB_PERSISTENT_REDIS_TLS_CERT
value: "{{ .Values.env.persistentRedis.tlsCert }}"
- name: BUCKETEER_WEB_PERSISTENT_REDIS_TLS_KEY
value: "{{ .Values.env.persistentRedis.tlsKey }}"
- name: BUCKETEER_WEB_PERSISTENT_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.persistentRedis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_SERVER_NAME
value: "{{ .Values.env.nonPersistentRedis.serverName }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_ADDR
Expand All @@ -133,6 +148,16 @@ spec:
value: "{{ .Values.env.nonPersistentRedis.poolMaxActive }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_MODE
value: "{{ .Values.env.nonPersistentRedis.mode }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_TLS_ENABLED
value: "{{ .Values.env.nonPersistentRedis.tlsEnabled }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_TLS_CA_CERT
value: "{{ .Values.env.nonPersistentRedis.tlsCACert }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_TLS_CERT
value: "{{ .Values.env.nonPersistentRedis.tlsCert }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_TLS_KEY
value: "{{ .Values.env.nonPersistentRedis.tlsKey }}"
- name: BUCKETEER_WEB_NON_PERSISTENT_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.env.nonPersistentRedis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_WEB_BIGQUERY_DATA_SET
value: "{{ .Values.env.bigQueryDataSet }}"
- name: BUCKETEER_WEB_BIGQUERY_DATA_LOCATION
Expand Down Expand Up @@ -217,6 +242,16 @@ spec:
value: "{{ .Values.global.pubsub.redis.minIdle }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_MODE
value: "{{ .Values.env.pubSubRedisMode }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_TLS_ENABLED
value: "{{ .Values.global.pubsub.redis.tlsEnabled }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_TLS_CA_CERT
value: "{{ .Values.global.pubsub.redis.tlsCACert }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_TLS_CERT
value: "{{ .Values.global.pubsub.redis.tlsCert }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_TLS_KEY
value: "{{ .Values.global.pubsub.redis.tlsKey }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_TLS_INSECURE_SKIP_VERIFY
value: "{{ .Values.global.pubsub.redis.tlsInsecureSkipVerify }}"
- name: BUCKETEER_WEB_PUBSUB_REDIS_PARTITION_COUNT
value: "{{ .Values.global.pubsub.redis.partitionCount }}"
- name: BUCKETEER_WEB_PROJECT
Expand Down Expand Up @@ -284,6 +319,11 @@ spec:
mountPath: /usr/local/certs/postgres
readOnly: true
{{- end }}
{{- if .Values.global.pubsub.redis.tlsSecretName }}
- name: redis-cert-secret
mountPath: /usr/local/certs/redis
readOnly: true
{{- end }}
- name: oauth-key-secret
mountPath: /usr/local/oauth-key
readOnly: true
Expand Down
10 changes: 10 additions & 0 deletions manifests/bucketeer/charts/web/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,12 +45,22 @@ env:
poolMaxIdle: 25
poolMaxActive: 25
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
nonPersistentRedis:
serverName:
addr:
poolMaxIdle: 25
poolMaxActive: 25
mode: auto
tlsEnabled: false
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
bigQueryDataSet:
bigQueryDataLocation:
domainTopic:
Expand Down
18 changes: 18 additions & 0 deletions manifests/bucketeer/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,6 +83,24 @@ global:
partitionCount: 16
# Idle time in seconds for pending message reclaim
idleTime: 600
# TLS configuration, for connecting to a TLS-enabled Redis/Valkey
# deployment (e.g. AWS ElastiCache/MemoryDB with in-transit encryption).
tlsEnabled: false
# Path inside the container to a PEM-encoded CA certificate. Leave
# empty to use the system CA pool (sufficient for AWS ElastiCache).
tlsCACert: ""
tlsCert: ""
tlsKey: ""
tlsInsecureSkipVerify: false
# Existing secret holding Redis/Valkey TLS client materials (CA cert,
# client cert/key for mutual TLS). Mounted read-only at
# /usr/local/certs/redis in every service, so tlsCACert/tlsCert/tlsKey
# above (and the equivalent persistent/non-persistent redis TLS paths
# in each chart's values.yaml) can reference files under that path.
# Shared across every redis block, not just pubsub redis. Only needed
# when those paths point inside this secret; AWS ElastiCache/MemoryDB
# with a publicly-trusted CA needs only tlsEnabled: true and no secret.
tlsSecretName: ""
# PubSub emulator host (for local development)
emulatorHost: ""
# Google Cloud project ID
Expand Down
Loading
Loading