Skip to content
Snippets Groups Projects
Commit 7747476b authored by Jakob Probst's avatar Jakob Probst
Browse files

Merge branch 'charts-disable-tls' into 'master'

charts: disable TLS

See merge request !1
parents 9f64f1bf e157fee1
No related branches found
No related tags found
1 merge request!1charts: disable TLS
Pipeline #157039 passed
FROM golang:1.15 as builder FROM golang:1.20 as builder
WORKDIR /build WORKDIR /build
COPY go.mod go.mod COPY go.mod go.mod
......
...@@ -60,3 +60,16 @@ Create the name of the service account to use ...@@ -60,3 +60,16 @@ Create the name of the service account to use
{{- default "default" .Values.serviceAccount.name }} {{- default "default" .Values.serviceAccount.name }}
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- define "bbbatscale-support-notify.dockerConfig" -}}
auths:
{{- $auths := .auths }}
{{- range (keys $auths) }}
{{- $auth := get $auths . }}
{{ quote . }}:
username: {{ quote $auth.username }}
password: {{ quote $auth.password }}
auth: {{ printf "%s:%s" $auth.username $auth.password | b64enc }}
email: {{ get $auth "email" | quote }}
{{- end }}
{{- end -}}
...@@ -31,11 +31,6 @@ spec: ...@@ -31,11 +31,6 @@ spec:
serviceAccountName: {{ include "bbbatscale-support-notify.serviceAccountName" . }} serviceAccountName: {{ include "bbbatscale-support-notify.serviceAccountName" . }}
securityContext: securityContext:
{{- toYaml .Values.podSecurityContext | nindent 8 }} {{- toYaml .Values.podSecurityContext | nindent 8 }}
volumes:
- name: tls
secret:
defaultMode: 420
secretName: {{ include "bbbatscale-support-notify.fullname" . }}-tls
containers: containers:
- name: {{ .Chart.Name }} - name: {{ .Chart.Name }}
securityContext: securityContext:
...@@ -46,18 +41,12 @@ spec: ...@@ -46,18 +41,12 @@ spec:
- secretRef: - secretRef:
name: {{ include "bbbatscale-support-notify.fullname" . }} name: {{ include "bbbatscale-support-notify.fullname" . }}
env: env:
- name: NOTIFY_CERT - name: NOTIFY_NOTLS
value: /etc/tls/private/tls.crt value: "1"
- name: NOTIFY_KEY
value: /etc/tls/private/tls.key
ports: ports:
- name: https - name: http
containerPort: 8443 containerPort: 8080
protocol: TCP protocol: TCP
volumeMounts:
- mountPath: /etc/tls/private
name: tls
readOnly: true
resources: resources:
{{- toYaml .Values.resources | nindent 12 }} {{- toYaml .Values.resources | nindent 12 }}
{{- with .Values.nodeSelector }} {{- with .Values.nodeSelector }}
......
apiVersion: v1
kind: Secret
metadata:
name: {{ include "bbbatscale-support-notify.fullname" . }}-pullsecret
labels:
{{- include "bbbatscale-support-notify.labels" . | nindent 4 }}
type: kubernetes.io/dockerconfigjson
data:
.dockerconfigjson: {{ include "bbbatscale-support-notify.dockerConfig" .Values.imagePullConfig | fromYaml | toJson | b64enc }}
...@@ -4,13 +4,11 @@ metadata: ...@@ -4,13 +4,11 @@ metadata:
name: {{ include "bbbatscale-support-notify.fullname" . }} name: {{ include "bbbatscale-support-notify.fullname" . }}
labels: labels:
{{- include "bbbatscale-support-notify.labels" . | nindent 4 }} {{- include "bbbatscale-support-notify.labels" . | nindent 4 }}
annotations:
service.alpha.openshift.io/serving-cert-secret-name: {{ include "bbbatscale-support-notify.fullname" . }}-tls
spec: spec:
type: {{ .Values.service.type }} type: {{ .Values.service.type }}
ports: ports:
- port: {{ .Values.service.port }} - port: {{ .Values.service.port }}
targetPort: 8443 targetPort: 8080
protocol: TCP protocol: TCP
name: http name: http
selector: selector:
......
...@@ -9,4 +9,6 @@ metadata: ...@@ -9,4 +9,6 @@ metadata:
annotations: annotations:
{{- toYaml . | nindent 4 }} {{- toYaml . | nindent 4 }}
{{- end }} {{- end }}
imagePullSecrets:
- {{ include "bbbatscale-support-notify.fullname" . }}-pullsecret
{{- end }} {{- end }}
...@@ -51,7 +51,7 @@ securityContext: {} ...@@ -51,7 +51,7 @@ securityContext: {}
service: service:
type: ClusterIP type: ClusterIP
port: 8443 port: 80
ingress: ingress:
enabled: true enabled: true
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment