Allow custom folder for the tls certificate

[vnghia]

Describe the feature you would like to see

I would like to change the certificate directory to be used with readOnlyRootFs.

Describe how you would like to see this feature implemented

an environment variable like DOZZLE_CERT_DIR

Describe any alternatives you've considered

No response

Thank you very much!

[amir20]

I have no idea what this means. What's the use case? More details are needed.

[vnghia]

I mean the certificate for custom tls agent as documented here

[amir20]

Sorry I still don't know what you are asking. Try providing clear instructions. I don't know what "certification directory" you are referring to. It's just two files.

Going to move this to discussion.

[vnghia]

Sorry for not being clearer 😅. Right now we have to mount the TLS certificates for agent to the root of the filesystem / (/dozzle_cert.pem and /dozzle_key.pem) as documented here:

    secrets:
      - source: cert
        target: /dozzle_cert.pem
      - source: key
        target: /dozzle_key.pem

For example if i want to use readOnlyRootFs I have to mount a volume to store these files and it can not be mounted at /. So I would like to have the ability to change the path of these two files to somewhere else, something like DOZZLE_CERT_PATH=/cert/dozzle.pem or DOZZLE_CERT_DIR=/cert.

Thank you very much!

[amir20]

Ah that makes more sense now. I thought --read-only still writes to /. But I guess not. I'll have to play with it and if not maybe introduce new env variables. I won't get to it for a while though.

[vnghia]

Nice thank you!