mirror of
https://github.com/h44z/wg-portal
synced 2025-02-26 05:49:14 +00:00
6ffe1a90ae
* Added TLS support for web - Added optional configurations `cert_file` and `key_file` to run web server with https Signed-off-by: Dmytro Bondar <git@bonddim.com> * Helm chart update - Refactored Ingress to use one host only (`config.web.external_url` is required) - Added Certificate resource template (secret is mounted to container into `/app/certs/`) - Added support for service with mixed protocols (exposes UI and Wireguard ports on same IP) - Added helm-docs target to makefile - Changed pod labels to use selectorLabels - Removed default probes (app runs without healthy web) - Removed sections from README Signed-off-by: Dmytro Bondar <git@bonddim.com> * Fix chart workflow path filter * Fix chart lint issue * Skip clean-up tested chart * Try k3d cluster --------- Signed-off-by: Dmytro Bondar <git@bonddim.com>
121 lines
3.8 KiB
Smarty
121 lines
3.8 KiB
Smarty
{{- define "wg-portal.podTemplate" -}}
|
|
metadata:
|
|
annotations:
|
|
checksum/config: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
|
|
kubectl.kubernetes.io/default-container: {{ .Chart.Name }}
|
|
{{- with .Values.podAnnotations }}
|
|
{{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "wg-portal.selectorLabels" . | nindent 4 }}
|
|
{{- with .Values.podLabels }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
{{- with .Values.affinity }}
|
|
affinity: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
|
|
containers:
|
|
{{- with .Values.sidecarContainers }}
|
|
{{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
- name: {{ .Chart.Name }}
|
|
image: "{{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag}}"
|
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
|
{{- with .Values.command }}
|
|
command: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.args }}
|
|
args: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.env }}
|
|
env: {{- tpl (toYaml .) $ | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.envFrom }}
|
|
envFrom: {{- tpl (toYaml .) $ | nindent 8 }}
|
|
{{- end }}
|
|
ports:
|
|
- name: web
|
|
containerPort: {{ .Values.service.web.port }}
|
|
protocol: TCP
|
|
{{- range $index, $port := .Values.service.wireguard.ports }}
|
|
- name: wg{{ $index }}
|
|
containerPort: {{ $port }}
|
|
protocol: UDP
|
|
{{- end }}
|
|
{{- with .Values.livenessProbe }}
|
|
livenessProbe: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.readinessProbe }}
|
|
readinessProbe: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.startupProbe }}
|
|
startupProbe: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.securityContext }}
|
|
securityContext: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.resources}}
|
|
resources: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /app/config
|
|
readOnly: true
|
|
- name: data
|
|
mountPath: /app/data
|
|
{{- if and .Values.certificate.enabled (include "wg-portal.hostname" .) }}
|
|
- name: certs
|
|
mountPath: /app/certs
|
|
{{- end }}
|
|
{{- with .Values.volumeMounts }}
|
|
{{- tpl (toYaml .) $ | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.dnsPolicy }}
|
|
dnsPolicy: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.hostNetwork }}
|
|
hostNetwork: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.imagePullSecrets }}
|
|
imagePullSecrets: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.initContainers }}
|
|
initContainers: {{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.nodeSelector }}
|
|
nodeSelector: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.restartPolicy }}
|
|
restartPolicy: {{ . }}
|
|
{{- end }}
|
|
serviceAccountName: {{ include "wg-portal.serviceAccountName" . }}
|
|
{{- with .Values.podSecurityContext }}
|
|
securityContext: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.tolerations }}
|
|
tolerations: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
volumes:
|
|
- name: config
|
|
secret:
|
|
secretName: {{ include "wg-portal.fullname" . }}
|
|
{{- if and .Values.certificate.enabled (include "wg-portal.hostname" .) }}
|
|
- name: certs
|
|
secret:
|
|
secretName: {{ include "wg-portal.fullname" . }}-tls
|
|
{{- end }}
|
|
{{- if not .Values.persistence.enabled }}
|
|
- name: data
|
|
emptyDir: {}
|
|
{{- else if eq .Values.workloadType "Deployment" }}
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ include "wg-portal.fullname" . }}
|
|
{{- end }}
|
|
{{- with .Values.volumes }}
|
|
{{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
{{- end -}}
|