[Bug]: Chart does not allow custom user-defined volume mounts

[maxnoe]

Search before creating an issue

• I have searched existing issues and confirmed this is not a duplicate

Bug Description

For our integration tests and in production, we are required to mount additional volumes providing the CA certificates.

Steps to Reproduce

No response

Expected Behavior

No response

Actual Behavior

No response

Environment

No response

Relevant Log Output

Additional Context

No response

[chrisburr]

We have an XY problem here. Why do you need additional CA certificates?

[maxnoe]

Additional to what?

[chrisburr]

In addition to the "standard CAs" you would generally expect to work on any machine (Let's Encrpyt/GlobalSign/Sectigo/...).

[maxnoe]

Two main scenarios, internal development and production:

• I our integration tests, we use a self-signed certificate chain (starting from one common development CA). This is used also for the host cert of the open search DB, so this at least is needed in diracx.

• In production, we have a requirement from our AAI team to use the EGI trust store via volume mount, not the default system CAs.

[chrisburr]

For the second part: Would the EGI trust store being included in the diracx container already be good enough?

[maxnoe]

To be honest, I do not quite understand the resistance here. It is absolutely standard for helm charts to allow users to add custom mounts.

And no, the requirement we have says that we single-source the trust store in a volume to avoid to many update requests from independent services.

[aldbr]

@maxnoe I see you closed your PR without any reason. Is this issue still needed?
Thanks