deploy/templates/ingress.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Release.Name }}
+  annotations:
+    external-dns.alpha.kubernetes.io/target: omegamaestro.{{ .Values.ingress.domain }}
+    cert-manager.io/cluster-issuer: {{ .Values.ingress.issuer }}
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    {{- if .Values.ingress.geoip }}
+    nginx.ingress.kubernetes.io/server-snippet: |
+      if ($lan = yes) { set $allowed_country yes; }
+      if ($allowed_country = no) { return 451; }
+    {{- end }}
+spec:
+  ingressClassName: {{ .Values.ingress.class }}
+  tls:
+  - hosts:
+    - {{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}
+    secretName: {{ .Release.Name }}-tls
+  rules:
+  - host: "{{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+            port:
+              name: {{ .Values.service.name }}
+{{- end }}

deploy/templates/service.yaml

@@ -0,0 +1,15 @@
+{{- if .Values.service.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - name: {{ .Values.service.name }}
+      port: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      targetPort: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      protocol: TCP
+  selector:
+    {{ .Release.Name }}
+{{- end }}

deploy/values.yaml

@@ -16,3 +16,16 @@ deployment:
     requests:
       Cpu: "0.1"
       Memory: "50Mi"
+
+service:
+  enabled: true
+  type: ClusterIP
+  name: twurple
+
+ingress:
+  enabled: true
+  class: nginx
+  subdomain: dcb-chantier.prd
+  domain: angels-dev.fr
+  issuer: letsencrypt-prod
+  geoip: false