keycloak/.helm/templates/90-ingress.yaml
Мостовой Владимир Андреевич 3edb6c95ab [flant] init repo
2026-09-09 17:06:31 +03:00

43 lines
1.6 KiB
YAML

---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: {{ .Chart.Name }}
annotations:
nginx.ingress.kubernetes.io/affinity: cookie
nginx.ingress.kubernetes.io/proxy-buffer-size: "8k"
nginx.ingress.kubernetes.io/session-cookie-expires: "86400"
nginx.ingress.kubernetes.io/session-cookie-max-age: "86400"
nginx.ingress.kubernetes.io/session-cookie-name: keycloak-cookie
nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
spec:
ingressClassName: {{ dig .Values.werf.env .Values.keycloak.ingress.classNames._default .Values.keycloak.ingress.classNames | quote }}
tls:
- hosts:
- {{ dig .Values.werf.env .Values.keycloak.ingress.domain._default .Values.keycloak.ingress.domain | quote }}
secretName: {{ dig .Values.werf.env .Values.keycloak.ingress.secretName._default .Values.keycloak.ingress.secretName | quote }}
rules:
- host: {{ dig .Values.werf.env .Values.keycloak.ingress.domain._default .Values.keycloak.ingress.domain | quote }}
http:
paths:
- backend:
service:
name: {{ .Chart.Name }}
port:
number: 8080
path: /
pathType: ImplementationSpecific
---
apiVersion: v1
kind: Secret
metadata:
name: {{ dig .Values.werf.env .Values.keycloak.ingress.secretName._default .Values.keycloak.ingress.secretName }}
annotations:
"werf.io/sensitive": "true"
type: kubernetes.io/tls
stringData:
tls.crt: |
{{- werf_secret_file (printf "%s/%s" .Values.werf.env "tls.crt") | nindent 4 }}
tls.key: |
{{- werf_secret_file (printf "%s/%s" .Values.werf.env "tls.key") | nindent 4 }}