Pyrra Helm chart – TLS client CA certificate not recognized

[Grumshko]

Hello,

I'm deploying Pyrra using the Helm chart. The deployment itself succeeds, but the Pyrra application does not seem to recognize the TLS client CA certificate.

My goal is:
To mount a CA certificate from a Kubernetes Secret into the Pyrra container.
To pass the path to the certificate using the --tls-client-ca-file flag.

Currently, i have:
Created a Secret with the CA in the cluster.
Configured extraVolumes and extraVolumeMounts in Helm values to mount the Secret.
Set tls-client-ca-file in the Helm values.
Despite this, Pyrra does not seem to load the CA, and TLS client authentication fails.

Could you please advise me:
The correct way to provide a TLS client CA certificate to Pyrra via the Helm chart.
Whether mounting the CA via extraVolumes and extraVolumeMounts is supported and how to reference it in values.yaml.
Any working example configuration for tls-client-ca-file with a mounted Secret.

Thank you for your guidance.

[sebastiangaiser]

Can you please provide a reproducer for your deployment. This would help debugging when using the Helm chart.

[Grumshko]

Here are the values file and the resulting Deployment manifest. I’ve attached both files for reference.
pyrra-values.yaml
pyrra-dep.yaml

[sebastiangaiser]

I don't see any extraVolumes or extraVolumeMounts in your values.yaml. Are you sure you shared the correct files?

In addition, please share the files directly here in the thread and update to the latest version of the Helm chart: https://github.com/pyrra-dev/helm-charts/releases