Externalize networking (welcome Wild Central!)

This commit is contained in:
2026-07-10 03:49:38 +00:00
parent bb5a76b864
commit dc5518b57f
143 changed files with 691 additions and 1379 deletions

View File

@@ -2,12 +2,6 @@ apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: keila
annotations:
traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
traefik.ingress.kubernetes.io/router.middlewares: keila-cors@kubernetescrd
spec:
ingressClassName: traefik
rules:
@@ -21,7 +15,3 @@ spec:
name: keila
port:
number: 80
tls:
- secretName: "wildcard-wild-cloud-tls"
hosts:
- "{{ .domain }}"

View File

@@ -13,5 +13,4 @@ resources:
- service.yaml
- ingress.yaml
- pvc.yaml
- db-init-job.yaml
- middleware-cors.yaml
- db-init-job.yaml

View File

@@ -1,15 +1,13 @@
version: 0.17.1-4
version: 0.17.1-5
requires:
- name: postgres
- name: smtp
- name: postgres
- name: smtp
defaultConfig:
namespace: keila
externalDnsDomain: '{{ .cloud.domain }}'
storage: 1Gi
domain: keila.{{ .cloud.domain }}
disableRegistration: 'true'
adminUser: admin@{{ .cloud.domain }}
tlsSecretName: wildcard-wild-cloud-tls
db:
host: '{{ .apps.postgres.host }}'
port: '{{ .apps.postgres.port }}'
@@ -22,13 +20,23 @@ defaultConfig:
user: '{{ .apps.smtp.user }}'
tls: '{{ .apps.smtp.tls }}'
startTls: '{{ .apps.smtp.startTls }}'
central:
headers:
response:
Access-Control-Allow-Origin: https://{{ .cloud.domain }}
Access-Control-Allow-Credentials: 'true'
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With,
Accept, Origin, Cache-Control, X-File-Name
Access-Control-Max-Age: '86400'
defaultSecrets:
- key: secretKeyBase
default: "{{ random.AlphaNum 64 }}"
- key: dbPassword
- key: dbUrl
default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
- key: adminPassword
- key: smtpPassword
- key: secretKeyBase
default: '{{ random.AlphaNum 64 }}'
- key: dbPassword
- key: dbUrl
default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
}}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
- key: adminPassword
- key: smtpPassword
requiredSecrets:
- postgres.password
- postgres.password

View File

@@ -1,28 +0,0 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: cors
spec:
headers:
accessControlAllowCredentials: true
accessControlAllowHeaders:
- "Content-Type"
- "Authorization"
- "X-Requested-With"
- "Accept"
- "Origin"
- "Cache-Control"
- "X-File-Name"
accessControlAllowMethods:
- "GET"
- "POST"
- "PUT"
- "DELETE"
- "OPTIONS"
accessControlAllowOriginList:
- "http://localhost:1313"
- "https://*.{{ .externalDnsDomain }}"
- "https://{{ .externalDnsDomain }}"
accessControlExposeHeaders:
- "*"
accessControlMaxAge: 86400