diff --git a/cockroachdb/templates/certificate.client.yaml b/cockroachdb/templates/certificate.client.yaml index b32d0c76..9697ea55 100644 --- a/cockroachdb/templates/certificate.client.yaml +++ b/cockroachdb/templates/certificate.client.yaml @@ -26,9 +26,9 @@ spec: {{- if .Values.tls.certs.useCertManagerV1CRDs }} privateKey: algorithm: RSA - size: 2048 + size: {{ .Values.tls.certs.certDetails.keySize }} {{- else }} - keySize: 2048 + keySize: {{ .Values.tls.certs.certDetails.keySize }} keyAlgorithm: rsa {{- end }} commonName: root diff --git a/cockroachdb/templates/certificate.node.yaml b/cockroachdb/templates/certificate.node.yaml index 38ff1bff..3e3a81f0 100644 --- a/cockroachdb/templates/certificate.node.yaml +++ b/cockroachdb/templates/certificate.node.yaml @@ -27,9 +27,9 @@ spec: {{- if .Values.tls.certs.useCertManagerV1CRDs }} privateKey: algorithm: RSA - size: 2048 + size: {{ .Values.tls.certs.certDetails.keySize }} {{- else }} - keySize: 2048 + keySize: {{ .Values.tls.certs.certDetails.keySize }} keyAlgorithm: rsa {{- end }} commonName: node diff --git a/cockroachdb/values.yaml b/cockroachdb/values.yaml index 9d54946d..7dae9044 100644 --- a/cockroachdb/values.yaml +++ b/cockroachdb/values.yaml @@ -445,6 +445,10 @@ tls: # Enable if the secret is a dedicated TLS. # TLS secrets are created by cert-mananger, for example. tlsSecret: false + # Fine Grain Cert details + certDetails: + # Certificate Key Size + keySize: 2048 # Enable if the you want cockroach db to create its own certificates selfSigner: # If set, the cockroach db will generate its own certificates