@@ -15,7 +15,7 @@ use crate::{
1515 commons:: {
1616 self ,
1717 product_image_selection:: ResolvedProductImage ,
18- secret_class:: SecretClassVolume ,
18+ secret_class:: { SecretClassVolume , SecretClassVolumeProvisionParts } ,
1919 tls_verification:: { CaCert , TlsServerVerification , TlsVerification } ,
2020 } ,
2121 crd:: git_sync:: v1alpha2:: { Credentials , GitSync } ,
@@ -276,7 +276,8 @@ impl GitSyncResources {
276276 let secret_class_volume = SecretClassVolume :: new ( secret_class. clone ( ) , None ) ;
277277 let volume_name = format ! ( "{CA_CERT_VOLUME_NAME_PREFIX}-{i}" ) ;
278278 let ca_cert_secret_volume = secret_class_volume
279- . to_volume ( & volume_name)
279+ // We only need the public CA cert
280+ . to_volume ( & volume_name, SecretClassVolumeProvisionParts :: Public )
280281 . context ( SecretClassVolumeSnafu ) ?;
281282 resources. git_ca_cert_volumes . push ( ca_cert_secret_volume) ;
282283 }
@@ -1390,6 +1391,7 @@ name: content-from-git-0
13901391 metadata:
13911392 annotations:
13921393 secrets.stackable.tech/class: git-tls-ca
1394+ secrets.stackable.tech/provision-parts: public
13931395 spec:
13941396 accessModes:
13951397 - ReadWriteOnce
0 commit comments