add volume mount in the endpoint deployment for iam-secret

Signed-off-by: shirady <[email protected]>

Author: shirady

deploy/internal/deployment-endpoint.yaml

@@ -37,6 +37,10 @@ spec:
           secret:
             secretName: noobaa-sts-serving-cert
             optional: true
+        - name: iam-secret
+          secret:
+            secretName: noobaa-iam-serving-cert
+            optional: true
         # This service account token can be used to provide identity outside the cluster.
         # For example, this token can be used with AssumeRoleWithWebIdentity to authenticate with AWS using IAM OIDC provider and STS.
         - name: bound-sa-token
@@ -166,6 +170,9 @@ spec:
             - name: noobaa-server
               mountPath: /etc/noobaa-server
               readOnly: true
+            - name: iam-secret
+              mountPath: /etc/iam-secret
+              readOnly: true
             - name: sts-secret
               mountPath: /etc/sts-secret
               readOnly: true

pkg/bundle/deploy.go

@@ -4044,7 +4044,7 @@ data:
     shared_preload_libraries = 'pg_stat_statements'
 `
 
-const Sha256_deploy_internal_deployment_endpoint_yaml = "fe660e3c058907d96617e52b14d2fa66589e5e55ac7220535c86ff56c5c945a5"
+const Sha256_deploy_internal_deployment_endpoint_yaml = "b9aab05ca0f659d2e55b0af019b60ab6499a717ba5b1da84711abc4118c99577"
 
 const File_deploy_internal_deployment_endpoint_yaml = `apiVersion: apps/v1
 kind: Deployment
@@ -4085,6 +4085,10 @@ spec:
           secret:
             secretName: noobaa-sts-serving-cert
             optional: true
+        - name: iam-secret
+          secret:
+            secretName: noobaa-iam-serving-cert
+            optional: true
         # This service account token can be used to provide identity outside the cluster.
         # For example, this token can be used with AssumeRoleWithWebIdentity to authenticate with AWS using IAM OIDC provider and STS.
         - name: bound-sa-token
@@ -4214,6 +4218,9 @@ spec:
             - name: noobaa-server
               mountPath: /etc/noobaa-server
               readOnly: true
+            - name: iam-secret
+              mountPath: /etc/iam-secret
+              readOnly: true
             - name: sts-secret
               mountPath: /etc/sts-secret
               readOnly: true
@@ -4899,7 +4906,7 @@ spec:
       storage: 30Gi
 `
 
-const Sha256_deploy_internal_route_iam_yaml = "adffe421b21f035fb033b0907f6fcfb4b665f0113dc89887e0b6cdc6bf09ca95"
+const Sha256_deploy_internal_route_iam_yaml = "c97f843db5676140b2307ef13bf9354158eb546dcc7325adf225b24ec323c73a"
 
 const File_deploy_internal_route_iam_yaml = `apiVersion: route.openshift.io/v1
 kind: Route
@@ -4911,7 +4918,6 @@ spec:
   port:
     targetPort: iam-https
   tls:
-    insecureEdgeTerminationPolicy: Allow
     termination: reencrypt
   to:
     kind: Service