23 lines
889 B
YAML
23 lines
889 B
YAML
|
{{- if eq (include "harbor.autoGenCertForNginx" .) "true" }}
|
||
|
|
{{- $ca := genCA "harbor-ca" 365 }}
|
||
|
|
{{- $cn := (required "The \"expose.tls.auto.commonName\" is required!" .Values.expose.tls.auto.commonName) }}
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Secret
|
||
|
|
metadata:
|
||
|
|
name: {{ template "harbor.nginx" . }}
|
||
|
|
labels:
|
||
|
|
{{ include "harbor.labels" . | indent 4 }}
|
||
|
|
type: Opaque
|
||
|
|
data:
|
||
|
|
{{- if regexMatch `^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$` $cn }}
|
||
|
|
{{- $cert := genSignedCert $cn (list $cn) nil 365 $ca }}
|
||
|
|
tls.crt: {{ $cert.Cert | b64enc | quote }}
|
||
|
|
tls.key: {{ $cert.Key | b64enc | quote }}
|
||
|
|
ca.crt: {{ $ca.Cert | b64enc | quote }}
|
||
|
|
{{- else }}
|
||
|
|
{{- $cert := genSignedCert $cn nil (list $cn) 365 $ca }}
|
||
|
|
tls.crt: {{ $cert.Cert | b64enc | quote }}
|
||
|
|
tls.key: {{ $cert.Key | b64enc | quote }}
|
||
|
|
ca.crt: {{ $ca.Cert | b64enc | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|