Externalize networking (welcome Wild Central!)
This commit is contained in:
@@ -2,12 +2,6 @@ apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: keila
|
||||
annotations:
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
|
||||
external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
|
||||
external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
|
||||
traefik.ingress.kubernetes.io/router.middlewares: keila-cors@kubernetescrd
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
rules:
|
||||
@@ -21,7 +15,3 @@ spec:
|
||||
name: keila
|
||||
port:
|
||||
number: 80
|
||||
tls:
|
||||
- secretName: "wildcard-wild-cloud-tls"
|
||||
hosts:
|
||||
- "{{ .domain }}"
|
||||
|
||||
@@ -13,5 +13,4 @@ resources:
|
||||
- service.yaml
|
||||
- ingress.yaml
|
||||
- pvc.yaml
|
||||
- db-init-job.yaml
|
||||
- middleware-cors.yaml
|
||||
- db-init-job.yaml
|
||||
@@ -1,15 +1,13 @@
|
||||
version: 0.17.1-4
|
||||
version: 0.17.1-5
|
||||
requires:
|
||||
- name: postgres
|
||||
- name: smtp
|
||||
- name: postgres
|
||||
- name: smtp
|
||||
defaultConfig:
|
||||
namespace: keila
|
||||
externalDnsDomain: '{{ .cloud.domain }}'
|
||||
storage: 1Gi
|
||||
domain: keila.{{ .cloud.domain }}
|
||||
disableRegistration: 'true'
|
||||
adminUser: admin@{{ .cloud.domain }}
|
||||
tlsSecretName: wildcard-wild-cloud-tls
|
||||
db:
|
||||
host: '{{ .apps.postgres.host }}'
|
||||
port: '{{ .apps.postgres.port }}'
|
||||
@@ -22,13 +20,23 @@ defaultConfig:
|
||||
user: '{{ .apps.smtp.user }}'
|
||||
tls: '{{ .apps.smtp.tls }}'
|
||||
startTls: '{{ .apps.smtp.startTls }}'
|
||||
central:
|
||||
headers:
|
||||
response:
|
||||
Access-Control-Allow-Origin: https://{{ .cloud.domain }}
|
||||
Access-Control-Allow-Credentials: 'true'
|
||||
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
|
||||
Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With,
|
||||
Accept, Origin, Cache-Control, X-File-Name
|
||||
Access-Control-Max-Age: '86400'
|
||||
defaultSecrets:
|
||||
- key: secretKeyBase
|
||||
default: "{{ random.AlphaNum 64 }}"
|
||||
- key: dbPassword
|
||||
- key: dbUrl
|
||||
default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
|
||||
- key: adminPassword
|
||||
- key: smtpPassword
|
||||
- key: secretKeyBase
|
||||
default: '{{ random.AlphaNum 64 }}'
|
||||
- key: dbPassword
|
||||
- key: dbUrl
|
||||
default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
|
||||
}}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
|
||||
- key: adminPassword
|
||||
- key: smtpPassword
|
||||
requiredSecrets:
|
||||
- postgres.password
|
||||
- postgres.password
|
||||
|
||||
@@ -1,28 +0,0 @@
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: Middleware
|
||||
metadata:
|
||||
name: cors
|
||||
spec:
|
||||
headers:
|
||||
accessControlAllowCredentials: true
|
||||
accessControlAllowHeaders:
|
||||
- "Content-Type"
|
||||
- "Authorization"
|
||||
- "X-Requested-With"
|
||||
- "Accept"
|
||||
- "Origin"
|
||||
- "Cache-Control"
|
||||
- "X-File-Name"
|
||||
accessControlAllowMethods:
|
||||
- "GET"
|
||||
- "POST"
|
||||
- "PUT"
|
||||
- "DELETE"
|
||||
- "OPTIONS"
|
||||
accessControlAllowOriginList:
|
||||
- "http://localhost:1313"
|
||||
- "https://*.{{ .externalDnsDomain }}"
|
||||
- "https://{{ .externalDnsDomain }}"
|
||||
accessControlExposeHeaders:
|
||||
- "*"
|
||||
accessControlMaxAge: 86400
|
||||
Reference in New Issue
Block a user