k8s/helm/apps/gitea/istio-ingress.yaml

58 lines
943 B
YAML

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: gitea-cert
namespace: istio-system
spec:
secretName: gitea-cert
commonName: git.minhas.io
dnsNames:
- git.minhas.io
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
group: cert-manager.io
...
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
name: gitea-gateway
namespace: gitea
spec:
selector:
istio: ingressgateway
servers:
- port:
number: 443
name: https
protocol: HTTPS
tls:
mode: SIMPLE
credentialName: gitea-cert
hosts:
- git.minhas.io
...
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: gitea-gateway
namespace: gitea
spec:
hosts:
- git.minhas.io
gateways:
- gitea-gateway
http:
- match:
- uri:
prefix: /
route:
- destination:
port:
number: 80
host: gitea-http
...