forked from infrastructure/k8s-cluster

Reviewed-on: https://code.forgejo.org/infrastructure/k8s-cluster/pulls/389 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Michael Kriese <michael.kriese@visualon.de> Co-committed-by: Michael Kriese <michael.kriese@visualon.de>
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
{{- if .Values.ingress.enabled -}}
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: git-mirror-{{ .Release.Name }}
|
|
namespace: {{.Release.Namespace}}
|
|
annotations:
|
|
# https://cert-manager.io/docs/usage/ingress/#supported-annotations
|
|
# https://github.com/cert-manager/cert-manager/issues/2239
|
|
cert-manager.io/cluster-issuer: letsencrypt-http
|
|
cert-manager.io/private-key-rotation-policy: Always
|
|
cert-manager.io/private-key-algorithm: ECDSA
|
|
cert-manager.io/private-key-size: '384'
|
|
{{- range $key, $value := .Values.ingress.annotations }}
|
|
{{ $key }}: {{ $value | quote }}
|
|
{{- end }}
|
|
spec:
|
|
{{- if .Values.ingress.className }}
|
|
ingressClassName: {{ tpl .Values.ingress.className . }}
|
|
{{- end }}
|
|
{{- if .Values.ingress.tls }}
|
|
tls:
|
|
{{- range .Values.ingress.tls }}
|
|
- hosts:
|
|
{{- range .hosts }}
|
|
- {{ tpl . $ | quote }}
|
|
{{- end }}
|
|
secretName: {{ .secretName }}
|
|
{{- end }}
|
|
{{- end }}
|
|
rules:
|
|
{{- range .Values.ingress.hosts }}
|
|
- host: {{ tpl .host $ | quote }}
|
|
http:
|
|
paths:
|
|
{{- range .paths }}
|
|
- path: {{ .path }}
|
|
{{- if .pathType }}
|
|
pathType: {{ .pathType }}
|
|
{{- end }}
|
|
backend:
|
|
service:
|
|
name: git-mirror-{{ .Release.Name }}
|
|
port:
|
|
name: http
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|