ingress tls wrapper

config/payform/values.yaml

@@ -5,5 +5,5 @@ ingress:
   annotations:
     nginx.ingress.kubernetes.io/rewrite-target: /$2
     # kubernetes.io/tls-acme: "true"
-  host: api.rbk.dev
+  host: rbkmoney.standoff.city
   path: /web(/|$)(.*)

config/wapi-pcidss-v0/values.yaml

@@ -1 +1,7 @@
 replicaCount: 1
+
+ingress:
+  host: rbkmoney.standoff.city
+  paths: 
+    - path: /privdoc/v0
+    - path: /payres/v0

helmfile.yaml

@@ -20,6 +20,10 @@ templates:
     missingFileHandler: Warn
     values:
     - config/{{`{{ .Release.Name }}`}}/values.yaml
+    - ingress:
+        tls:
+          enabled: true
+          secret: default/standoff
     timeout: 600
 
 

services/capi-pcidss-v1/templates/ingress.yaml

@@ -14,3 +14,9 @@ spec:
             backend:
               serviceName: {{ include "capi-pcidss-v1.fullname" . }}
               servicePort: {{ .Values.service.port }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host}}
+      secretName: {{ .Values.ingress.tls.secret}}
+{{- end -}}

services/capi-pcidss-v2/templates/ingress.yaml

@@ -14,3 +14,9 @@ spec:
             backend:
               serviceName: {{ include "capi-pcidss-v2.fullname" . }}
               servicePort: {{ .Values.service.port }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.secret }}
+{{- end -}}

services/capi-v1/templates/ingress.yaml

@@ -13,3 +13,9 @@ spec:
         backend:
           serviceName: {{ include "capi-v1.fullname" . }}
           servicePort: {{ .Values.service.port }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.secret }}
+{{- end -}}

services/capi-v2/templates/ingress.yaml

@@ -13,3 +13,9 @@ spec:
         backend:
           serviceName: {{ include "capi-v2.fullname" . }}
           servicePort: {{ .Values.service.port }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.secret }}
+{{- end -}}

services/payform/templates/ingress.yaml

@@ -19,4 +19,10 @@ spec:
         backend:
           serviceName: {{ include "payform.fullname" . }}
           servicePort: {{ .Values.service.port }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.secret }}
+{{- end -}}
 {{- end -}}

services/wapi-pcidss-v0/templates/ingress.yaml

@@ -14,3 +14,9 @@ spec:
             backend:
               serviceName: {{ include "wapi-pcidss-v0.fullname" . }}
               servicePort: {{ .Values.service.port }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.secret }}
+{{- end -}}

services/wapi/templates/ingress.yaml

@@ -13,3 +13,9 @@ spec:
         backend:
           serviceName: {{ include "wapi.fullname" . }}
           servicePort: {{ .Values.service.ports.ingressPort }}
+{{ if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.secret }}
+{{- end -}}