Files
charts/bitnami/neo4j/templates/ingress-tls-secret.yaml
T
e74b9ca8c8 [bitnami/neo4j] Add chart (#27616)
* [bitnami/neo4j] Add chart

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Add support for readOnlyRootFilesystem, use development image

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Remove serviceMonitor

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Add VIB tests and image improvements

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Add neo4j host

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update chart

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Fix values metadata

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Fix test inputs

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Add TLS support

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Change readiness

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update README metadata

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Update test service ports

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Add goss https test

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Fix goss vars file

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update dev image

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Increase timeout

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Change bolt port

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Use bitnami/neo4j:5.20.0-debian-12-r2

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Modify TLS secrets

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Add ingress-tls-secret.yaml

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>

---------

Signed-off-by: Miguel Ruiz <miruiz@vmware.com>
Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
2024-07-04 13:49:18 +02:00

48 lines
1.9 KiB
YAML

{{- /*
Copyright Broadcom, Inc. All Rights Reserved.
SPDX-License-Identifier: APACHE-2.0
*/}}
{{- if .Values.ingress.enabled }}
{{- if .Values.ingress.secrets }}
{{- range .Values.ingress.secrets }}
apiVersion: v1
kind: Secret
metadata:
name: {{ .name }}
namespace: {{ include "common.names.namespace" $ | quote }}
labels: {{- include "common.labels.standard" ( dict "customLabels" $.Values.commonLabels "context" $ ) | nindent 4 }}
app.kubernetes.io/component: neo4j
{{- if $.Values.commonAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" $.Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
type: kubernetes.io/tls
data:
tls.crt: {{ .certificate | b64enc }}
tls.key: {{ .key | b64enc }}
---
{{- end }}
{{- end }}
{{- if and .Values.ingress.tls .Values.ingress.selfSigned }}
{{- $secretName := printf "%s-tls" .Values.ingress.hostname }}
{{- $ca := genCA "neo4j-ca" 365 }}
{{- $cert := genSignedCert .Values.ingress.hostname nil (list .Values.ingress.hostname) 365 $ca }}
apiVersion: v1
kind: Secret
metadata:
name: {{ $secretName }}
namespace: {{ include "common.names.namespace" . | quote }}
labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
app.kubernetes.io/component: neo4j
{{- if .Values.commonAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
type: kubernetes.io/tls
data:
tls.crt: {{ include "common.secrets.lookup" (dict "secret" $secretName "key" "tls.crt" "defaultValue" $cert.Cert "context" $) }}
tls.key: {{ include "common.secrets.lookup" (dict "secret" $secretName "key" "tls.key" "defaultValue" $cert.Key "context" $) }}
ca.crt: {{ include "common.secrets.lookup" (dict "secret" $secretName "key" "ca.crt" "defaultValue" $ca.Cert "context" $) }}
---
{{- end }}
{{- end }}