How to create the Vanity CRL/AIA mapping files inside sidecar reverse proxy container?

[haraldholub]

Hello,

I am trying to setup the httpd reverse proxy sidecar container with an external config for httpd.conf to make use of the rewritemap files "txt:/etc/httpd/rewriteMaps/crlmapping.txt" and "txt:/etc/httpd/rewriteMaps/aiamapping.txt" as described in the configmap example [https://artifacthub.io/packages/helm/ejbca/ejbca-ce?modal=template&template=httpd-configmap.yaml]. However, the files are missing and, therefore, the container won't start:

kubectl logs pods/ejbca-ejbca-ce-0 -c ejbca-ce-httpd --namespace ejbca-k8s shows a syntax error in httpd.conf

AH00526: Syntax error on line 84 of /usr/local/apache2/conf/httpd.conf:
RewriteMap: file for map vanityCrls not found:/etc/httpd/rewriteMaps/crlmapping.txt

I am wondering how to create these files inside the container or am I missing something?

BR

[tanmoyatkeyfactor]

You need to mount the crlmapping.txt in the container.

Unfortunately, we do not have support for custom file mounts for the proxy sidecars. But community contribution is always welcome.

You may add it by following the example how these TLS certificates are being mounted e.g.
- name: httpd-cert-provided mountPath: /etc/httpd/ssl/pem/
note that you need to adjust for volumeMount at each container and volume for the full StatefulSet. There is already ejbca.volumes and ejbca.volumeMounts in Helm chart. You may add similarly to httpd section.

[haraldholub]

@tanmoyatkeyfactor
Many thanks for your suggestion to make use of the ejbca.volumes and ejbca.volumeMounts setting. This should be feasible. Sorry for my late reply as I was fully occupied with other tasks. I will give this a try and let you know if it works.
BR
Harald