Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

introduce more configurable options for service type #32

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

introduce more configurable options for service type #32

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
3157066
introduce more configurable options for service type
carpenike Jan 19, 2021
f5e2639
also include annotation support
carpenike Jan 19, 2021
120206c
documentation and options for service annotations
carpenike Jan 19, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion step-certificates/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
apiVersion: v1
name: step-certificates
version: 1.15.6
version: 1.16.0
appVersion: 0.15.6
description: An online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere.
keywords:
Expand Down
84 changes: 45 additions & 39 deletions step-certificates/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,45 +45,51 @@ deletes the release.
The following table lists the configurable parameters of the Step certificates
chart and their default values.

| Parameter | Description | Default |
| --------------------------- | ----------------------------------------------------------------------------------------------------------- | ----------------------------- |
| `ca.name` | Name for you CA | `Step Certificates` |
| `ca.address` | TCP address where Step CA runs | `:9000` |
| `ca.dns` | DNS of Step CA, if empty it will be inferred | `""` |
| `ca.url` | URL of Step CA, if empty it will be inferred | `""` |
| `ca.password` | Password for the CA keys, if empty it will be automatically generated | `""` |
| `ca.provisioner.name` | Name for the default provisioner | `admin` |
| `ca.provisioner.password` | Password for the default provisioner, if empty it will be automatically generated | `""` |
| `ca.db.enabled` | If true, step certificates will be configured with a database | `true` |
| `ca.db.persistent` | If true a persistent volume will be used to store the db | `true` |
| `ca.db.accessModes` | Persistent volume access mode | `["ReadWriteOnce"]` |
| `ca.db.size` | Persistent volume size | `10Gi` |
| `ca.db.existingClaim` | Persistent volume existing claim name. If defined, PVC must be created manually before volume will be bound | `""` |
| `ca.runAsRoot` | Run the CA as root. | `false` |
| `ca.bootstrap.postInitHook` | Extra script snippet to run after `step ca init` has completed. | `""` |
| `service.type` | Service type | `ClusterIP` |
| `service.port` | Incoming port to access Step CA | `443` |
| `service.targetPort` | Internal port where Step CA runs | `9000` |
| `replicaCount` | Number of Step CA replicas. Only one replica is currently supported. | `1` |
| `image.repository` | Repository of the Step CA image | `smallstep/step-ca` |
| `image.tag` | Tag of the Step CA image | `latest` |
| `image.pullPolicy` | Step CA image pull policy | `IfNotPresent` |
| `bootstrap.image.repository`| Repository of the Step CA bootstrap image | `smallstep/step-ca-bootstrap` |
| `bootstrap.image.tag` | Tag of the Step CA bootstrap image | `latest` |
| `bootstrap.image.pullPolicy`| Step CA bootstrap image pull policy | `IfNotPresent` |
| `bootstrap.enabled` | If false, it does not create the bootstrap job. | `true` |
| `bootstrap.configmaps` | If false, it does not create the configmaps. | `true` |
| `bootstrap.secrets` | If false, it does not create the secrets. | `true` |
| `nameOverride` | Overrides the name of the chart | `""` |
| `fullnameOverride` | Overrides the full name of the chart | `""` |
| `ingress.enabled` | If true Step CA ingress will be created | `false` |
| `ingress.annotations` | Step CA ingress annotations (YAML) | `{}` |
| `ingress.hosts` | Step CA ingress hostNAMES (YAML) | `[]` |
| `ingress.tls` | Step CA ingress TLS configuration (YAML) | `[]` |
| `resources` | CPU/memory resource requests/limits (YAML) | `{}` |
| `nodeSelector` | Node labels for pod assignment (YAML) | `{}` |
| `tolerations` | Toleration labels for pod assignment (YAML) | `[]` |
| `affinity` | Affinity settings for pod assignment (YAML) | `{}` |
| Parameter | Description | Default |
| ----------------------------------- | ----------------------------------------------------------------------------------------------------------- | ----------------------------- |
| `ca.name` | Name for you CA | `Step Certificates` |
| `ca.address` | TCP address where Step CA runs | `:9000` |
| `ca.dns` | DNS of Step CA, if empty it will be inferred | `""` |
| `ca.url` | URL of Step CA, if empty it will be inferred | `""` |
| `ca.password` | Password for the CA keys, if empty it will be automatically generated | `""` |
| `ca.provisioner.name` | Name for the default provisioner | `admin` |
| `ca.provisioner.password` | Password for the default provisioner, if empty it will be automatically generated | `""` |
| `ca.db.enabled` | If true, step certificates will be configured with a database | `true` |
| `ca.db.persistent` | If true a persistent volume will be used to store the db | `true` |
| `ca.db.accessModes` | Persistent volume access mode | `["ReadWriteOnce"]` |
| `ca.db.size` | Persistent volume size | `10Gi` |
| `ca.db.existingClaim` | Persistent volume existing claim name. If defined, PVC must be created manually before volume will be bound | `""` |
| `ca.runAsRoot` | Run the CA as root. | `false` |
| `ca.bootstrap.postInitHook` | Extra script snippet to run after `step ca init` has completed. | `""` |
| `service.type` | Service type | `ClusterIP` |
| `service.annotations` | Service Annotations | `ClusterIP` |
| `service.externalIPs` | Incoming externalIP to assign to Step CA | `[]` |
| `service.loadBalancerIP` | Incoming loadBalancerIP to assign to Step CA | `""` |
| `service.loadBalancerSourceRanges` | Incoming loadBalancerSourceRanges to assign to Step CA | `[]` |
| `service.externalTrafficPolicy` | Incoming externalTrafficPolicy to assign to Step CA | `""` |
| `service.sessionAffinity` | Incoming sessionAffinity to assign to Step CA | `""` |
| `service.port` | Incoming port to access Step CA | `443` |
| `service.targetPort` | Internal port where Step CA runs | `9000` |
| `replicaCount` | Number of Step CA replicas. Only one replica is currently supported. | `1` |
| `image.repository` | Repository of the Step CA image | `smallstep/step-ca` |
| `image.tag` | Tag of the Step CA image | `latest` |
| `image.pullPolicy` | Step CA image pull policy | `IfNotPresent` |
| `bootstrap.image.repository` | Repository of the Step CA bootstrap image | `smallstep/step-ca-bootstrap` |
| `bootstrap.image.tag` | Tag of the Step CA bootstrap image | `latest` |
| `bootstrap.image.pullPolicy` | Step CA bootstrap image pull policy | `IfNotPresent` |
| `bootstrap.enabled` | If false, it does not create the bootstrap job. | `true` |
| `bootstrap.configmaps` | If false, it does not create the configmaps. | `true` |
| `bootstrap.secrets` | If false, it does not create the secrets. | `true` |
| `nameOverride` | Overrides the name of the chart | `""` |
| `fullnameOverride` | Overrides the full name of the chart | `""` |
| `ingress.enabled` | If true Step CA ingress will be created | `false` |
| `ingress.annotations` | Step CA ingress annotations (YAML) | `{}` |
| `ingress.hosts` | Step CA ingress hostNAMES (YAML) | `[]` |
| `ingress.tls` | Step CA ingress TLS configuration (YAML) | `[]` |
| `resources` | CPU/memory resource requests/limits (YAML) | `{}` |
| `nodeSelector` | Node labels for pod assignment (YAML) | `{}` |
| `tolerations` | Toleration labels for pod assignment (YAML) | `[]` |
| `affinity` | Affinity settings for pod assignment (YAML) | `{}` |

Specify each parameter using the `--set key=value[,key=value]` argument to `helm
install`. For example,
Expand Down
23 changes: 23 additions & 0 deletions step-certificates/templates/service.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,33 @@ apiVersion: v1
kind: Service
metadata:
name: {{ include "step-certificates.fullname" . }}
{{- if .Values.service.annotations }}
annotations:
{{- range $key, $value := .Values.service.annotations }}
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
labels:
{{- include "step-certificates.labels" . | nindent 4 }}
spec:
type: {{ .Values.service.type }}
{{- if .Values.service.externalIPs }}
externalIPs:
{{ toYaml .Values.service.externalIPs | indent 4 }}
{{- end }}
{{- if .Values.service.loadBalancerIP }}
loadBalancerIP: "{{ .Values.service.loadBalancerIP }}"
{{- end }}
{{- if .Values.service.loadBalancerSourceRanges }}
loadBalancerSourceRanges:
{{ toYaml .Values.service.loadBalancerSourceRanges | indent 4 }}
{{- end }}
{{- if .Values.service.externalTrafficPolicy }}
externalTrafficPolicy: "{{ .Values.service.externalTrafficPolicy }}"
{{- end }}
{{- if .Values.service.sessionAffinity }}
sessionAffinity: "{{ .Values.service.sessionAffinity }}"
{{- end }}
ports:
- port: {{ .Values.service.port }}
targetPort: {{ .Values.service.targetPort }}
Expand Down
6 changes: 6 additions & 0 deletions step-certificates/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,12 @@ service:
type: ClusterIP
port: 443
targetPort: 9000
# externalIPs: []
# loadBalancerIP: ""
# loadBalancerSourceRanges: []
# externalTrafficPolicy: "local"
# sessionAffinity: ""
# annotations:

# ca contains the certificate authority configuration.
ca:
Expand Down