mirror of
https://github.com/h44z/wg-portal
synced 2025-02-26 05:49:14 +00:00
6ffe1a90ae
* Added TLS support for web - Added optional configurations `cert_file` and `key_file` to run web server with https Signed-off-by: Dmytro Bondar <git@bonddim.com> * Helm chart update - Refactored Ingress to use one host only (`config.web.external_url` is required) - Added Certificate resource template (secret is mounted to container into `/app/certs/`) - Added support for service with mixed protocols (exposes UI and Wireguard ports on same IP) - Added helm-docs target to makefile - Changed pod labels to use selectorLabels - Removed default probes (app runs without healthy web) - Removed sections from README Signed-off-by: Dmytro Bondar <git@bonddim.com> * Fix chart workflow path filter * Fix chart lint issue * Skip clean-up tested chart * Try k3d cluster --------- Signed-off-by: Dmytro Bondar <git@bonddim.com>
55 lines
1.7 KiB
YAML
55 lines
1.7 KiB
YAML
{{/* https://cert-manager.io/docs/usage/certificate/#creating-certificate-resources */}}
|
|
{{- if and .Values.certificate.enabled (include "wg-portal.hostname" .) -}}
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: {{ include "wg-portal.fullname" . }}
|
|
labels: {{- include "wg-portal.labels" . | nindent 4 }}
|
|
spec:
|
|
secretName: {{ include "wg-portal.fullname" . }}-tls
|
|
{{- with .Values.certificate.secretTemplate }}
|
|
secretTemplate: {{ toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.privateKey }}
|
|
privateKey: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.keystores }}
|
|
keystores: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.duration }}
|
|
duration: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.renewBefore }}
|
|
renewBefore: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.usages }}
|
|
usages: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.subject }}
|
|
subject: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.commonName }}
|
|
commonName: {{ . }}
|
|
{{- end }}
|
|
dnsNames:
|
|
- {{ include "wg-portal.hostname" . }}
|
|
{{- with .Values.certificate.uris }}
|
|
uris: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.emailAddresses }}
|
|
emailAddresses: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.ipAddresses }}
|
|
ipAddresses: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.certificate.otherNames }}
|
|
otherNames: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
issuerRef:
|
|
{{- with .Values.certificate.issuer.group }}
|
|
group: {{ . }}
|
|
{{- end }}
|
|
kind: {{ .Values.certificate.issuer.kind }}
|
|
name: {{ .Values.certificate.issuer.name }}
|
|
{{- end -}}
|