Files
Timofei Larkin 79b2f56058 feat(vm-disk): let an http source carry header Secrets and a CA ConfigMap
An image behind an authenticated endpoint could not be imported: the
http source took a bare URL, so the only way to hand CDI credentials
was a pre-signed URL that anyone holding it could use until it expired.

The source gains secretExtraHeaders, the names of Secrets in the release
namespace each holding one extra request header, and certConfigMap, a
ConfigMap with the CA bundle to trust, both passed to the DataVolume as
CDI defines them. The immutability guard treats a stored http source
with these keys as chart-shaped, so a later change to them is refused
like a URL change; a stored key the chart never renders still marks a
foreign source it leaves alone.

Assisted-by: LLM
Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
2026-09-16 12:04:44 +03:00
..