feat: add an optional wildcard cert secret which is disabled by default but allows us to enable in an environment when needed

This commit is contained in:
James Rawlings
2019-10-11 21:19:23 +01:00
parent f1a5889b42
commit c7d1227f63

26
env/templates/wildcardcert-secret.yaml vendored Normal file
View File

@@ -0,0 +1,26 @@
{{- if .Values.expose }}
{{- if .Values.expose.config }}
{{- if .Values.expose.config.tlsacme }}
{{- if eq .Values.expose.config.tlsacme "true" }}
apiVersion: v1
data:
tls.crt: Zm9vIC1uCg==
tls.key: Zm9vIC1uCg==
kind: Secret
metadata:
annotations:
{{- if .Values.expose.production }}
replicator.v1.mittwald.de/replicate-from: jx/tls-{{ .Values.expose.config.domain | replace "." "-" }}-p
{{- else }}
replicator.v1.mittwald.de/replicate-from: jx/tls-{{ .Values.expose.config.domain | replace "." "-" }}-s
{{- end }}
{{- if .Values.expose.production }}
name: "tls-{{ .Values.expose.config.domain | replace "." "-" }}-p"
{{- else }}
name: "tls-{{ .Values.expose.config.domain | replace "." "-" }}-s"
{{- end }}
type: kubernetes.io/tls
{{- end }}
{{- end }}
{{- end }}
{{- end }}