gravitl/netmaker
1
1
Fork 0
mirror of https://github.com/gravitl/netmaker.git synced 2025-10-04 19:05:27 +08:00
Code Issues Projects Releases Packages Wiki Activity

cert change for helm

Browse source
This commit is contained in:
afeiszli 2021-10-17 16:42:09 -04:00
parent 445df67030
commit ef029b0713
2 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
kube/helm/netmaker/templates/ingress.yaml
View file

@ -35,6 +35,7 @@ metadata:
{{- end }} {{- end }}
{{- if .tls.enabled }} {{- if .tls.enabled }}
{{- toYaml .annotations.tls | nindent 4 }} {{- toYaml .annotations.tls | nindent 4 }}
cert-manager.io/cluster-issuer: {{ .tls.issuerName }}
{{- end }} {{- end }}
{{- end }} {{- end }}
spec: spec:
@ -89,6 +90,7 @@ metadata:
{{- end }} {{- end }}
{{- if .tls.enabled }} {{- if .tls.enabled }}
{{- toYaml .annotations.tls | nindent 4 }} {{- toYaml .annotations.tls | nindent 4 }}
cert-manager.io/cluster-issuer: {{ .tls.issuerName }}
{{- end }} {{- end }}
{{- end }} {{- end }}
spec: spec:
@ -145,6 +147,7 @@ metadata:
{{- end }} {{- end }}
{{- if .tls.enabled }} {{- if .tls.enabled }}
{{- toYaml .annotations.tls | nindent 4 }} {{- toYaml .annotations.tls | nindent 4 }}
cert-manager.io/cluster-issuer: {{ .tls.issuerName }}
{{- end }} {{- end }}
{{- end }} {{- end }}
spec: spec:

5
kube/helm/netmaker/values.yaml
View file

@ -53,15 +53,14 @@ ingress:
enabled: false enabled: false
tls: tls:
enabled: true enabled: true
issuerName: "letsencrypt-prod"
annotations: annotations:
base: base:
# -- annotation to generate ACME certs if available # -- annotation to generate ACME certs if available
kubernetes.io/ingress.allow-http: "false" kubernetes.io/ingress.allow-http: "false"
tls: tls:
# -- use acme cert if available
kubernetes.io/tls-acme: "true" kubernetes.io/tls-acme: "true"
# -- LE issuer name
cert-manager.io/cluster-issuer: "letsencrypt-prod"
# -- Block HTTP requests
nginx: nginx:
# -- Redirect http to https # -- Redirect http to https
nginx.ingress.kubernetes.io/ssl-redirect: 'true' nginx.ingress.kubernetes.io/ssl-redirect: 'true'