From c54f84d1666459e7e702e35c8c9f1f432f108924 Mon Sep 17 00:00:00 2001
From: inikulin <inikulin@co-work.ru>
Date: Thu, 24 Jul 2025 08:03:15 +0000
Subject: [PATCH] Edit deployment.yaml

---
 .../templates/deployment.yaml                 | 39 +++++++++++++++++--
 1 file changed, 35 insertions(+), 4 deletions(-)

diff --git a/charts/backend/charts/search-event-handler-app-k8s/templates/deployment.yaml b/charts/backend/charts/search-event-handler-app-k8s/templates/deployment.yaml
index eff5639..f1a3130 100755
--- a/charts/backend/charts/search-event-handler-app-k8s/templates/deployment.yaml
+++ b/charts/backend/charts/search-event-handler-app-k8s/templates/deployment.yaml
@@ -15,11 +15,39 @@ spec:
         app: {{ include "search-event-handler-app.name" . }}
     spec:
       volumes:
-
+        - name: ca-cert
+          configMap:
+            name: auth-app-ca-cert
+            items:
+              - key: RootCA_{{ .Values.global.cert_alias }}.crt
+                path: RootCA_{{ .Values.global.cert_alias }}.crt
         - name: cacerts-volume
           emptyDir: {}
-
-
+      initContainers:
+        - name: import-ca
+          image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
+          env:
+            - name: CERT_ALIAS
+              value: {{ .Values.global.cert_alias | quote }}
+          volumeMounts:
+            - name: ca-cert
+              mountPath: /app/resources
+            - name: cacerts-volume
+              mountPath: /tmp/cacerts
+          command:
+            - sh
+            - -c
+            - |
+              cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
+              if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
+                echo "Certificate with alias gemcert already exists, skipping import"
+              else
+                echo "Importing certificate with alias gemcert"
+                keytool -import -trustcacerts -storepass changeit -noprompt \
+                  -alias gemcert \
+                  -file /app/resources/RootCA_${CERT_ALIAS}.crt \
+                  -keystore /tmp/cacerts/cacerts
+              fi
       containers:
         - name: search-event-handler-app
           image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
@@ -36,5 +64,8 @@ spec:
             {{- include "global.env.general" . | nindent 12 }}
             - name: POSTGRES_URL
               value: {{ .Values.env.postgres.url | quote }}
-
+          volumeMounts:
+            - name: cacerts-volume
+              mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
+              subPath: cacerts
       restartPolicy: Always