Merge pull request #8 from projectsyn/tls-ingress

Add TLS spec to Ingress
projectsyn · Jan 20, 2022 · 9682217 · 9682217
2 parents 7fabc3d + 453a73c
commit 9682217
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 3 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -28,7 +28,8 @@ parameters:
     ingress:
       host: null
       labels: {}
-      annotations: {}
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-production
 
     ocp_route:
       host: null

diff --git a/component/cluster.libsonnet b/component/cluster.libsonnet
@@ -341,6 +341,14 @@ local cluster = function(name, options)
           },
         },
       ],
+      tls: [
+        {
+          hosts: [
+            options.ingress.host,
+          ],
+          secretName: name + '-tls',
+        },
+      ],
     },
   };
 

diff --git a/docs/modules/ROOT/pages/references/parameters.adoc b/docs/modules/ROOT/pages/references/parameters.adoc
@@ -110,13 +110,16 @@ type:: string
 default:: `null`
 
 If set, an ingress with the defined host is created.
+The ingress is created with TLS spec for the same host.
+
+NOTE: It's assumed that `cert-manager` is running on the cluster to provision Let's Encrypt certificates.
 
 
 == `ingress.annotations`
 
 [horizontal]
 type:: dict
-default:: `{}`
+default:: `{cert-manager.io/cluster-issuer: letsencrypt-production}`
 example::
 +
 [source,yaml]

diff --git a/tests/golden/oidc/oidc/oidc/10_cluster.yaml b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
@@ -231,7 +231,8 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations: {}
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
   labels:
     name: oidc
   name: oidc
@@ -248,6 +249,10 @@ spec:
                   name: https
             path: /
             pathType: Prefix
+  tls:
+    - hosts:
+        - testcluster.local
+      secretName: oidc-tls
 ---
 apiVersion: batch/v1
 kind: Job