Allow TLS configuration for Ingress (#119)

This commit is contained in:
leoxiongideahq 2019-09-24 09:58:42 +12:00 committed by Alex Collins
parent 480c730725
commit 3fce11cdc2
3 changed files with 11 additions and 1 deletions

View file

@ -59,6 +59,7 @@ $ helm install --name my-release argo/argo-cd
| ingress.additionalHosts | list | `[]` | Ingress additional hosts |
| ingress.annotations | object | `{}` | Annotations for ingress object, set `nginx.ingress.kubernetes.io/force-ssl-redirect: "true"` and `nginx.ingress.kubernetes.io/ssl-passthrough: "true"` if serving GRPC and HTTPS on the same ingress |
| ingress.enabled | bool | `false` | Enable ingress |
| ingress.tls | object | `{}` | Ingress TLS configuration |
| rbac.policyCsv | string | `nil` | RBAC policy in CSV, see [values.yaml](./values.yaml) for format |
| rbac.policyDefault | string | `nil` | The default role Argo CD will fall back to, when authorizing API requests, ie: `role:readonly` |
| rbac.scopes | string | `nil` | Scopes controls which OIDC scopes to examine during rbac enforcement (in addition to `sub` scope). ie: `[groups]` |

View file

@ -26,4 +26,8 @@ spec:
serviceName: argocd-server
servicePort: https
{{- end }}
{{- if .Values.ingress.tls }}
tls:
{{ toYaml .Values.ingress.tls | indent 4 }}
{{- end -}}
{{- end }}

View file

@ -65,6 +65,11 @@ ingress:
# nginx.ingress.kubernetes.io/ssl-passthrough: "true"
path: /
additionalHosts: []
tls:
# Secrets must be manually created in the namespace.
# - secretName: chart-example-tls
# hosts:
# - chart-example.local
certificate:
enabled: false