first commit
This commit is contained in:
12
templates/apitraffic/apitraffic-configmap.yaml
Normal file
12
templates/apitraffic/apitraffic-configmap.yaml
Normal file
@@ -0,0 +1,12 @@
|
||||
{{- if and .Values.apitraffic.enabled .Values.apitraffic.license }}
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: {{ .Release.Name }}-apitraffic-license-config
|
||||
data:
|
||||
{{- range $path, $config := .Values.apitraffic.license }}
|
||||
{{ $path }}: |
|
||||
{{ $config | indent 4 -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
228
templates/apitraffic/apitraffic-deployment.yaml
Normal file
228
templates/apitraffic/apitraffic-deployment.yaml
Normal file
@@ -0,0 +1,228 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apitraffic"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
spec:
|
||||
{{- if not .Values.apitraffic.autoscaling.enabled }}
|
||||
replicas: {{ .Values.apitraffic.replicaCount }}
|
||||
{{- end }}
|
||||
strategy:
|
||||
{{- if eq (default .Values.global.updateStrategy.type .Values.apitraffic.updateStrategy.type) "RollingUpdate" }}
|
||||
rollingUpdate:
|
||||
maxSurge: {{ default .Values.global.updateStrategy.rollingUpdate.maxSurge .Values.apitraffic.updateStrategy.rollingUpdate.maxSurge }}
|
||||
maxUnavailable: {{ default .Values.global.updateStrategy.rollingUpdate.maxUnavailable .Values.apitraffic.updateStrategy.rollingUpdate.maxUnavailable }}
|
||||
{{- end }}
|
||||
type: {{ default .Values.global.updateStrategy.type .Values.apitraffic.updateStrategy.type }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "gateway.selectorLabels" . | nindent 6 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
{{- with .Values.apitraffic.podLabels }}
|
||||
{{- toYaml . | nindent 6 }}
|
||||
{{- end }}
|
||||
template:
|
||||
metadata:
|
||||
{{- with .Values.apitraffic.podAnnotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "gateway.selectorLabels" . | nindent 8 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
{{- with .Values.apitraffic.podLabels }}
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.global.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "gateway.apitraffic.serviceAccountName" . }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.apitraffic.podSecurityContext | nindent 8 }}
|
||||
initContainers:
|
||||
{{- if .Values.global.cassandra.enabled }}
|
||||
- name: init-cassandra
|
||||
image: {{ .Values.global.initContainers.image | quote }}
|
||||
{{- with (first .Values.global.cassandra.hosts) }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ .hostname }} 9042; do echo waiting for {{ .hostname }}; sleep 2; done;"]
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.resources }}
|
||||
resources:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.global.database.metrics.enabled }}
|
||||
- name: init-mysql
|
||||
image: {{ .Values.global.initContainers.image | quote }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ tpl .Values.global.database.host . }} {{ .Values.global.database.port | int }}; do echo waiting for mysql; sleep 2; done;"]
|
||||
{{- with .Values.global.initContainers.resources }}
|
||||
resources:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
- name: init-anm
|
||||
image: {{ .Values.global.initContainers.image | quote }}
|
||||
{{- if .Values.anm.hostname }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ .Values.anm.hostname }}; do echo waiting for anm; sleep 2; done;"]
|
||||
{{- else }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ include "gateway.fullname" . }}-anm 8090; do echo waiting for anm; sleep 2; done;"]
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.resources }}
|
||||
resources:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apitraffic.extraInitContainers }}
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.apitraffic.securityContext | nindent 12 }}
|
||||
image: "{{ default .Values.global.defaultRegistry .Values.apitraffic.image.registry }}/{{ .Values.apitraffic.image.repository }}:{{ .Values.apitraffic.image.tag | default .Chart.AppVersion }}"
|
||||
imagePullPolicy: {{ .Values.global.imagePullPolicy }}
|
||||
ports:
|
||||
- containerPort: {{ .Values.apitraffic.service.ports.traffic.port }}
|
||||
protocol: {{ .Values.apitraffic.service.ports.traffic.protocol }}
|
||||
{{- with .Values.apitraffic.livenessProbe }}
|
||||
livenessProbe:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apitraffic.readinessProbe }}
|
||||
readinessProbe:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.apitraffic.resources | nindent 12 }}
|
||||
env:
|
||||
{{- with .Values.apitraffic.extraEnvVars }}
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.FIPS.enabled }}
|
||||
- name: EMT_FIPS_MODE
|
||||
value: {{ .Values.apitraffic.FIPS.enabled | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.jvmHeapSize }}
|
||||
- name: EMT_HEAP_SIZE_MB
|
||||
value: {{ .Values.apitraffic.jvmHeapSize | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.logs.trace.level }}
|
||||
- name: EMT_TRACE_LEVEL
|
||||
value: {{ .Values.apitraffic.logs.trace.level | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.logs.trace.disk }}
|
||||
- name: APIGW_LOG_TRACE_TO_FILE
|
||||
value: {{ .Values.apitraffic.logs.trace.disk | quote }}
|
||||
{{- end }}
|
||||
- name: APIGW_LOG_TRACE_JSON_TO_STDOUT
|
||||
value: {{ default .Values.apitraffic.logs.trace.stdoutJSON false | quote }}
|
||||
{{- if .Values.apitraffic.logs.opentraffic.output | quote}}
|
||||
- name: APIGW_LOG_OPENTRAFFIC_OUTPUT
|
||||
value: {{ .Values.apitraffic.logs.opentraffic.output | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.global.domainkeypassphrase }}
|
||||
- name: DOMAIN_KEY_PASSPHRASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.domainkeypassphrase.secretName" . }}
|
||||
key: passphrase
|
||||
{{- end }}
|
||||
{{- if .Values.global.database.metrics.enabled }}
|
||||
- name: METRICS_DB_URL
|
||||
value: {{ tpl .Values.global.database.metrics.url . | quote }}
|
||||
- name: METRICS_DB_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.metrics-db.secretName" . }}
|
||||
key: {{ with .Values.global.database.metrics.existingSecret.keyMapping }}{{- default "username" .username }}{{- else -}}"username"{{- end }}
|
||||
- name: METRICS_DB_PASS
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.metrics-db.secretName" . }}
|
||||
key: {{ with .Values.global.database.metrics.existingSecret.keyMapping }}{{- default "password" .password }}{{- else -}}"password"{{- end }}
|
||||
{{- end }}
|
||||
- name: GROUP_ID
|
||||
value: {{ .Values.apitraffic.groupId }}
|
||||
{{- if .Values.global.domainId }}
|
||||
- name: DOMAIN_ID
|
||||
value: {{ .Values.global.domainId }}
|
||||
{{- end }}
|
||||
{{- if .Values.global.cassandra.enabled }}
|
||||
{{- range .Values.global.cassandra.hosts }}
|
||||
- name: {{ .variable }}
|
||||
value: {{ .hostname | quote }}
|
||||
{{- end }}
|
||||
- name: CASS_PORT
|
||||
value: {{ .Values.global.cassandra.port | quote }}
|
||||
- name: CASS_KEYSPACE
|
||||
value: {{ tpl .Values.global.cassandra.keyspace . | quote }}
|
||||
- name: CASS_TKEYSPACE
|
||||
value: {{ tpl .Values.global.cassandra.tkeyspace . | quote }}
|
||||
- name: CASS_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.cassandra.secretName" . }}
|
||||
key: {{ with .Values.global.cassandra.existingSecret.keyMapping }}{{- default "password" .password }}{{- else -}}"password"{{- end }}
|
||||
- name: CASS_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.cassandra.secretName" . }}
|
||||
key: {{ with .Values.global.cassandra.existingSecret.keyMapping }}{{- default "username" .username }}{{- else -}}"username"{{- end }}
|
||||
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.image.generalConditions }}
|
||||
- name: ACCEPT_GENERAL_CONDITIONS
|
||||
value: {{ .Values.apitraffic.image.generalConditions.accept | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.anm.hostname }}
|
||||
- name: EMT_ANM_HOSTS
|
||||
value: {{ .Values.anm.hostname | quote }}
|
||||
{{- else }}
|
||||
- name: EMT_ANM_HOSTS
|
||||
value: "{{ include "gateway.fullname" . }}-anm:8090"
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.extraVolumeMounts }}
|
||||
volumeMounts:
|
||||
{{- if .Values.apitraffic.license }}
|
||||
- name: license
|
||||
mountPath: "/opt/Axway/apigateway/conf/licenses/license.lic"
|
||||
subPath: "license.lic"
|
||||
{{- end }}
|
||||
{{- toYaml ( .Values.apitraffic.extraVolumeMounts ) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.extraVolumes }}
|
||||
volumes:
|
||||
{{- if .Values.apitraffic.license }}
|
||||
- name: license
|
||||
configMap:
|
||||
name: {{ .Release.Name }}-apitraffic-license-config
|
||||
{{- end }}
|
||||
{{ toYaml ( .Values.apitraffic.extraVolumes ) | indent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apitraffic.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apitraffic.affinity }}
|
||||
affinity:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apitraffic.tolerations }}
|
||||
tolerations:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
33
templates/apitraffic/apitraffic-hpa.yaml
Normal file
33
templates/apitraffic/apitraffic-hpa.yaml
Normal file
@@ -0,0 +1,33 @@
|
||||
{{- if .Values.apitraffic.autoscaling.enabled }}
|
||||
apiVersion: autoscaling/v2
|
||||
kind: HorizontalPodAutoscaler
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apitraffic"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
spec:
|
||||
scaleTargetRef:
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
name: "{{ include "gateway.fullname" . }}-apitraffic"
|
||||
minReplicas: {{ .Values.apitraffic.autoscaling.minReplicas }}
|
||||
maxReplicas: {{ .Values.apitraffic.autoscaling.maxReplicas }}
|
||||
metrics:
|
||||
{{- if .Values.apitraffic.autoscaling.targetCPUUtilizationPercentage }}
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: {{ .Values.apitraffic.autoscaling.targetCPUUtilizationPercentage }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.autoscaling.targetMemoryUtilizationPercentage }}
|
||||
- type: Resource
|
||||
resource:
|
||||
name: memory
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: {{ .Values.apitraffic.autoscaling.targetMemoryUtilizationPercentage }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
47
templates/apitraffic/apitraffic-ingress.yaml
Normal file
47
templates/apitraffic/apitraffic-ingress.yaml
Normal file
@@ -0,0 +1,47 @@
|
||||
{{- if .Values.apitraffic.ingress.enabled -}}
|
||||
{{- $fullName := include "gateway.fullname" . -}}
|
||||
{{- $svcPort := .Values.apitraffic.service.ports.traffic.port -}}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ $fullName }}-apitraffic
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
{{- with .Values.apitraffic.ingress.annotations }}
|
||||
annotations:
|
||||
{{- tpl (toYaml .) $ | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if .Values.apitraffic.ingress.className }}
|
||||
ingressClassName: {{ .Values.apitraffic.ingress.className }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.ingress.tls }}
|
||||
tls:
|
||||
{{- range .Values.apitraffic.ingress.tls }}
|
||||
- hosts:
|
||||
{{- range .hosts }}
|
||||
- {{ tpl . $ | quote }}
|
||||
{{- end }}
|
||||
{{- if .secretName }}
|
||||
secretName: {{ tpl (.secretName) $ }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
rules:
|
||||
{{- range .Values.apitraffic.ingress.hosts }}
|
||||
- host: {{ tpl .host $ | quote }}
|
||||
http:
|
||||
paths:
|
||||
{{- range .paths }}
|
||||
- path: {{ .path }}
|
||||
{{- if .pathType }}
|
||||
pathType: {{ .pathType }}
|
||||
{{- end }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ $fullName }}-apitraffic
|
||||
port:
|
||||
number: {{ $svcPort }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
40
templates/apitraffic/apitraffic-routes.yaml
Normal file
40
templates/apitraffic/apitraffic-routes.yaml
Normal file
@@ -0,0 +1,40 @@
|
||||
{{- if .Values.apitraffic.route.enabled -}}
|
||||
kind: Route
|
||||
apiVersion: route.openshift.io/v1
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apitraffic"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
spec:
|
||||
{{- if .Values.global.domainName }}
|
||||
host: apitraffic.{{ .Values.global.domainName }}
|
||||
{{- end }}
|
||||
to:
|
||||
kind: Service
|
||||
name: "{{ include "gateway.fullname" . }}-apitraffic"
|
||||
port:
|
||||
targetPort: {{ tpl .Values.apitraffic.route.targetPort . }}
|
||||
{{- if .Values.apitraffic.route.tls.enabled }}
|
||||
tls:
|
||||
termination: {{ .Values.apitraffic.route.tls.termination }}
|
||||
insecureEdgeTerminationPolicy: {{ .Values.apitraffic.route.tls.insecureEdgeTerminationPolicy }}
|
||||
{{- if .Values.apitraffic.route.tls.key }}
|
||||
key: |-
|
||||
{{- .Values.apitraffic.route.tls.key | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.route.tls.destinationCACertificate }}
|
||||
destinationCACertificate: |-
|
||||
{{- .Values.apitraffic.route.tls.destinationCACertificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.route.tls.caCertificate }}
|
||||
caCertificate: |-
|
||||
{{- .Values.apitraffic.route.tls.caCertificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.route.tls.certificate }}
|
||||
certificate: |-
|
||||
{{- .Values.apitraffic.route.tls.certificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
wildcardPolicy: None
|
||||
{{- end }}
|
||||
39
templates/apitraffic/apitraffic-service.yaml
Normal file
39
templates/apitraffic/apitraffic-service.yaml
Normal file
@@ -0,0 +1,39 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apitraffic"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
spec:
|
||||
type: {{ .Values.apitraffic.service.type }}
|
||||
ports:
|
||||
- port: {{ .Values.apitraffic.service.ports.traffic.port }}
|
||||
targetPort: {{ .Values.apitraffic.service.ports.traffic.port }}
|
||||
protocol: {{ .Values.apitraffic.service.ports.traffic.protocol }}
|
||||
name: apigatewaytraffic
|
||||
selector:
|
||||
{{- include "gateway.selectorLabels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
|
||||
---
|
||||
|
||||
{{- if eq .Values.apitraffic.oauth.enabled true }}
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-oauth"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
spec:
|
||||
type: {{ .Values.apitraffic.oauth.type }}
|
||||
ports:
|
||||
- port: {{ .Values.apitraffic.oauth.port }}
|
||||
targetPort: {{ .Values.apitraffic.oauth.port }}
|
||||
protocol: {{ .Values.apitraffic.oauth.protocol }}
|
||||
name: oauth
|
||||
selector:
|
||||
{{- include "gateway.selectorLabels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
{{- end }}
|
||||
13
templates/apitraffic/apitraffic-serviceaccount.yaml
Normal file
13
templates/apitraffic/apitraffic-serviceaccount.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
{{- if .Values.apitraffic.serviceAccount.create -}}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ include "gateway.apitraffic.serviceAccountName" . }}
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apitraffic
|
||||
{{- with .Values.apitraffic.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
45
templates/apitraffic/oauth-ingress.yaml
Normal file
45
templates/apitraffic/oauth-ingress.yaml
Normal file
@@ -0,0 +1,45 @@
|
||||
{{- if .Values.apitraffic.oauth.ingress.enabled -}}
|
||||
{{- $fullName := include "gateway.fullname" . -}}
|
||||
{{- $svcPort := .Values.apitraffic.oauth.port -}}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ $fullName }}-oauth
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
{{- with .Values.apitraffic.oauth.ingress.annotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if .Values.apitraffic.oauth.ingress.className }}
|
||||
ingressClassName: {{ .Values.apitraffic.oauth.ingress.className }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.oauth.ingress.tls }}
|
||||
tls:
|
||||
{{- range .Values.apitraffic.oauth.ingress.tls }}
|
||||
- hosts:
|
||||
{{- range .hosts }}
|
||||
- {{ . | quote }}
|
||||
{{- end }}
|
||||
secretName: {{ .secretName }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
rules:
|
||||
{{- range .Values.apitraffic.oauth.ingress.hosts }}
|
||||
- host: {{ .host | quote }}
|
||||
http:
|
||||
paths:
|
||||
{{- range .paths }}
|
||||
- path: {{ .path }}
|
||||
{{- if .pathType }}
|
||||
pathType: {{ .pathType }}
|
||||
{{- end }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ $fullName }}-oauth
|
||||
port:
|
||||
number: {{ $svcPort }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
40
templates/apitraffic/oauth-routes.yaml
Normal file
40
templates/apitraffic/oauth-routes.yaml
Normal file
@@ -0,0 +1,40 @@
|
||||
{{- if .Values.apitraffic.oauth.route.enabled -}}
|
||||
kind: Route
|
||||
apiVersion: route.openshift.io/v1
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-oauth"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: oauth
|
||||
spec:
|
||||
{{- if .Values.global.domainName }}
|
||||
host: oauth.{{ .Values.global.domainName }}
|
||||
{{- end }}
|
||||
to:
|
||||
kind: Service
|
||||
name: "{{ include "gateway.fullname" . }}-oauth"
|
||||
port:
|
||||
targetPort: {{ tpl .Values.apitraffic.oauth.route.targetPort . }}
|
||||
{{- if .Values.apitraffic.oauth.route.tls.enabled }}
|
||||
tls:
|
||||
termination: {{ .Values.apitraffic.oauth.route.tls.termination }}
|
||||
insecureEdgeTerminationPolicy: {{ .Values.apitraffic.oauth.route.tls.insecureEdgeTerminationPolicy }}
|
||||
{{- if .Values.apitraffic.oauth.route.tls.key }}
|
||||
key: |-
|
||||
{{- .Values.apitraffic.oauth.route.tls.key | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.oauth.route.tls.destinationCACertificate }}
|
||||
destinationCACertificate: |-
|
||||
{{- .Values.apitraffic.oauth.route.tls.destinationCACertificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.oauth.route.tls.caCertificate }}
|
||||
caCertificate: |-
|
||||
{{- .Values.apitraffic.oauth.route.tls.caCertificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apitraffic.oauth.route.tls.certificate }}
|
||||
certificate: |-
|
||||
{{- .Values.apitraffic.oauth.route.tls.certificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
wildcardPolicy: None
|
||||
{{- end }}
|
||||
Reference in New Issue
Block a user