mirror of
https://github.com/rustfs/rustfs.git
synced 2026-08-18 10:43:15 +00:00
hector
beb6e1383e
Add an optional TLS passthrough listener to the Gateway API support. When gatewayApi.listeners.tls.enabled is true, the Gateway gets a TLS listener with tls.mode: Passthrough and a TLSRoute is rendered to the RustFS service so TLS terminates at the backend (end-to-end encryption). Refs rustfs/rustfs#3862.
41 lines
1.0 KiB
YAML
41 lines
1.0 KiB
YAML
{{- if and .Values.gatewayApi.enabled (empty .Values.gatewayApi.existingGateway.name) }}
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: Gateway
|
|
metadata:
|
|
name: {{ include "rustfs.fullname" . }}-gateway
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
gatewayClassName: {{ .Values.gatewayApi.gatewayClass }}
|
|
{{- with .Values.gatewayApi.listeners }}
|
|
listeners:
|
|
{{- if .http }}
|
|
- name: {{ .http.name }}
|
|
port: {{ .http.port }}
|
|
protocol: HTTP
|
|
allowedRoutes:
|
|
namespaces:
|
|
from: Same
|
|
{{- end }}
|
|
{{- if .https }}
|
|
- name: {{ .https.name }}
|
|
port: {{ .https.port }}
|
|
protocol: HTTPS
|
|
tls:
|
|
mode: Terminate
|
|
certificateRefs:
|
|
- name: {{ include "rustfs.fullname" $ }}-tls
|
|
kind: Secret
|
|
{{- end }}
|
|
{{- if .tls.enabled }}
|
|
- name: {{ .tls.name }}
|
|
port: {{ .tls.port }}
|
|
protocol: TLS
|
|
tls:
|
|
mode: Passthrough
|
|
allowedRoutes:
|
|
namespaces:
|
|
from: Same
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|