91 lines
2.5 KiB
Smarty
91 lines
2.5 KiB
Smarty
{{- define "k8sgateway.container" -}}
|
|
enabled: true
|
|
imageSelector: k8sgatewayImage
|
|
securityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
readOnlyRootFilesystem: true
|
|
args: ["-conf", "/etc/coredns/Corefile"]
|
|
probes:
|
|
readiness:
|
|
enabled: true
|
|
path: /ready
|
|
port: 8181
|
|
liveness:
|
|
enabled: true
|
|
path: /health
|
|
port: 8080
|
|
startup:
|
|
enabled: true
|
|
path: /ready
|
|
port: 8181
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Create the matchable regex from domain
|
|
*/}}
|
|
{{- define "k8sgateway.configmap.regex" -}}
|
|
{{- if .dnsChallenge.domain }}
|
|
{{- .dnsChallenge.domain | replace "." "[.]" -}}
|
|
{{- else -}}
|
|
{{ "unset" }}
|
|
{{- end }}
|
|
{{- end -}}
|
|
|
|
{{/* Define the configmap */}}
|
|
{{- define "k8sgateway.configmap" -}}
|
|
{{- $values := .Values.k8sgateway }}
|
|
{{- $fqdn := ( include "tc.v1.common.lib.chart.names.fqdn" . ) }}
|
|
enabled: true
|
|
data:
|
|
Corefile: |
|
|
.:{{ .Values.service.k8sgateway.ports.k8sgateway.targetPort }} {
|
|
errors
|
|
log
|
|
health {
|
|
lameduck 5s
|
|
}
|
|
ready
|
|
{{- range .Values.k8sgateway.domains }}
|
|
{{- if .dnsChallenge.enabled }}
|
|
{{- if not .dnsChallenge.domain -}}
|
|
{{- fail "DNS01 challenge domain is mandatory" -}}
|
|
{{- end }}
|
|
|
|
template IN ANY {{ required "Delegated domain ('domain') is mandatory" .domain }} {
|
|
match "_acme-challenge[.](.*)[.]{{ include "k8sgateway.configmap.regex" . }}"
|
|
{{- $name := "{{ \"{{ .Name }}\" }}" }}
|
|
{{- $index := "{{ \"{{ index .Match 1 }}\" }}" }}
|
|
answer "{{ $name }} 5 IN CNAME {{ $index }}.{{ .dnsChallenge.domain }}"
|
|
fallthrough
|
|
}
|
|
{{- end }}
|
|
{{- end }}
|
|
k8s_gateway {{ range .Values.k8sgateway.domains }}"{{ required "Delegated domain ('domain') is mandatory " .domain }}"{{ end }} {
|
|
apex {{ $values.apex | default $fqdn }}
|
|
ttl {{ $values.ttl }}
|
|
{{- if $values.secondary }}
|
|
secondary {{ $values.secondary }}
|
|
{{- end }}
|
|
{{- if $values.watchedResources }}
|
|
resources {{ join " " $values.watchedResources }}
|
|
{{- end }}
|
|
fallthrough
|
|
}
|
|
|
|
prometheus 0.0.0.0:9153
|
|
{{- if .Values.k8sgateway.forward.enabled }}
|
|
forward . {{ .Values.k8sgateway.forward.primary }} {{ .Values.k8sgateway.forward.secondary }} {
|
|
{{- range .Values.k8sgateway.forward.options }}
|
|
{{ .name }} {{ .value }}
|
|
{{- end }}
|
|
}
|
|
{{- else }}
|
|
forward . 1.1.1.1
|
|
{{- end }}
|
|
loop
|
|
reload
|
|
loadbalance
|
|
}
|
|
{{- end -}}
|