mirror of
https://github.com/dragonflydb/dragonfly.git
synced 2024-12-14 11:58:02 +00:00
30ec81c456
* fix(helm): add issuer group to create the certificate without wait for the previous created issuer
Signed-off-by: Fabiano Arruda Ferreira das Graças <fafg@fafg-mbm1.fritz.box>
* fix(helm): remove condition that can prevent the helm chart be rendered on machines where monitoring.coreos.com is not installed or is not the end target of the helm template command
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* fix(helm): lint - remove blank line
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* add(helm): missing service monitor test files
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* add(helm): add missing cert-manager test files
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* fix(helm): lint - add missing blank lines
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* fix(helm): rebase
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* Revert "fix(helm): rebase"
This reverts commit c4ce16b76e.
* fix(helm): fix service monitor namespace rendering
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* fix(helm): add missing up to date golden file
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* fix(helm): merge upstream
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
* update golden files
* also install prom operator dependencies
* also install cert-manager
* skip cert-manager chart
* skip cert-manager value
* remove CI TLS files
* fix formatting
* fix formatting
* fix actions
---------
Signed-off-by: Fabiano Arruda Ferreira das Graças <fafg@fafg-mbm1.fritz.box>
Signed-off-by: fafg <fabiano.arruda@hotmail.com>
Co-authored-by: Tarun Pothulapati <tarun@dragonflydb.io>
Co-authored-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
31 lines
1.2 KiB
YAML
31 lines
1.2 KiB
YAML
{{- if and .Values.tls.enabled .Values.tls.createCerts }}
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: {{ include "dragonfly.fullname" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "dragonfly.labels" . | nindent 4 }}
|
|
spec:
|
|
commonName: '{{ include "dragonfly.fullname" . }}'
|
|
dnsNames:
|
|
- '*.{{ include "dragonfly.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local'
|
|
- '{{ include "dragonfly.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local'
|
|
- '{{ include "dragonfly.fullname" . }}.{{ .Release.Namespace }}.svc'
|
|
- '{{ include "dragonfly.fullname" . }}.{{ .Release.Namespace }}'
|
|
- '{{ include "dragonfly.fullname" . }}'
|
|
- localhost
|
|
duration: {{ required "tls.duration is required, if createCerts is enabled" .Values.tls.duration }}
|
|
ipAddresses:
|
|
- 127.0.0.1
|
|
issuerRef:
|
|
kind: {{ required "tls.issuer.kind is required, if createCerts is enabled" .Values.tls.issuer.kind }}
|
|
name: {{ required "tls.issuer.name is required, if createCerts is enabled" .Values.tls.issuer.name }}
|
|
group: {{ .Values.tls.issuer.group }}
|
|
secretName: '{{ include "dragonfly.fullname" . }}-server-tls'
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
- signing
|
|
- key encipherment
|
|
{{- end }}
|