Add tlsFirst support to NACK

Signed-off-by: Tomasz Pietrek <tomasz@nats.io>
nats-io · Jul 2, 2024 · cfe9b1c · cfe9b1c
1 parent d41c5a4
commit cfe9b1c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/helm/charts/nack/templates/deployment-jetstream-controller.yml b/helm/charts/nack/templates/deployment-jetstream-controller.yml
@@ -113,6 +113,9 @@ spec:
           {{- if and .Values.jetstream.tls.enabled .Values.jetstream.tls.settings.client_ca }}
           - --tlsca={{ .Values.jetstream.tls.settings.client_ca }}
           {{- end }}
+          {{- if .Values.jetstream.tls.tlsFirst }}
+          - --tlsfirst={{ .Values.jetstream.tls.tlsFirst }}
+          {{- end }}
           {{- with .Values.jetstream.additionalArgs }}
           {{- toYaml . | nindent 10 }}
           {{- end }}

diff --git a/helm/charts/nack/values.yaml b/helm/charts/nack/values.yaml
@@ -35,6 +35,7 @@ jetstream:
   # Enabled must be true, and a secret name specified for this to work
   tls:
     enabled: false
+    tlsFirst: false
     # the secret containing the client ca.crt, tls.crt, and tls.key for NATS
     secretName:
     # Reference