Todd MarimonandMarkus Pesch
7747a001f7
Add full Gateway API support for exposing Gitea via HTTPRoute, TCPRoute, BackendTLSPolicy, and ClientSettingsPolicy resources. New templates: - `httpRoute.yaml` — renders an HTTPRoute with configurable parentRefs, hostnames, and rules (defaults to PathPrefix `/`) - `tcpRoute.yaml` — renders a TCPRoute for SSH traffic - `backendTLSPolicy.yaml` — renders a BackendTLSPolicy for encrypted backend connections with required validation config - `clientSettingsPolicy.yaml` — renders an NGINX Gateway Fabric ClientSettingsPolicy to raise the request body size limit Infrastructure: - `gatewayAPI.enabled` global toggle gates all resources - Resources grouped under `gatewayAPI.core.*` and `gatewayAPI.nginx.*` - Helper templates extracted into dedicated `_*.tpl` files - Service name helpers (`gitea.service.http.name`, `gitea.service.ssh.name`) extracted into `_services.tpl`; service templates renamed to camelCase - `ROOT_URL`, `DOMAIN`, and `SSH_DOMAIN` auto-resolve from `httpRoute.hostnames[0]`; `httpRoute.tls` switches to `https` Documentation: - New `docs/gateway-api.md` with topology examples, BackendTLSPolicy setup, sectionName guidance, SSH considerations, and NGINX body size limit configuration - `.github/copilot-instructions.md` with project conventions - README parameter table auto-generated via `make readme` Tests: - Helm unit tests for all four new resource templates - Config tests for hostname/TLS resolution from Gateway API values Co-authored-by: Todd Marimon <toddmarimon@gmail.com>
58 lines
1.9 KiB
YAML
58 lines
1.9 KiB
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
annotations:
|
|
{{- toYaml .Values.service.ssh.annotations | nindent 4 }}
|
|
labels:
|
|
{{- include "gitea.labels" . | nindent 4 }}
|
|
{{- if .Values.service.ssh.labels }}
|
|
{{- toYaml .Values.service.ssh.labels | nindent 4 }}
|
|
{{- end }}
|
|
name: {{ include "gitea.service.ssh.name" . }}
|
|
namespace: {{ .Values.namespace | default .Release.Namespace }}
|
|
spec:
|
|
type: {{ .Values.service.ssh.type }}
|
|
{{- if eq .Values.service.ssh.type "LoadBalancer" }}
|
|
{{- if .Values.service.ssh.loadBalancerClass }}
|
|
loadBalancerClass: {{ .Values.service.ssh.loadBalancerClass }}
|
|
{{- end }}
|
|
{{- if .Values.service.ssh.loadBalancerIP }}
|
|
loadBalancerIP: {{ .Values.service.ssh.loadBalancerIP }}
|
|
{{- end -}}
|
|
{{- if .Values.service.ssh.loadBalancerSourceRanges }}
|
|
loadBalancerSourceRanges:
|
|
{{- range .Values.service.ssh.loadBalancerSourceRanges }}
|
|
- {{ . }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if and .Values.service.ssh.clusterIP (eq .Values.service.ssh.type "ClusterIP") }}
|
|
clusterIP: {{ .Values.service.ssh.clusterIP }}
|
|
{{- end }}
|
|
{{- if .Values.service.ssh.externalIPs }}
|
|
externalIPs:
|
|
{{- toYaml .Values.service.ssh.externalIPs | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .Values.service.ssh.ipFamilyPolicy }}
|
|
ipFamilyPolicy: {{ .Values.service.ssh.ipFamilyPolicy }}
|
|
{{- end }}
|
|
{{- with .Values.service.ssh.ipFamilies }}
|
|
ipFamilies:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end -}}
|
|
{{- if .Values.service.ssh.externalTrafficPolicy }}
|
|
externalTrafficPolicy: {{ .Values.service.ssh.externalTrafficPolicy }}
|
|
{{- end }}
|
|
ports:
|
|
- name: ssh
|
|
port: {{ .Values.service.ssh.port }}
|
|
{{- if .Values.gitea.config.server.SSH_LISTEN_PORT }}
|
|
targetPort: {{ .Values.gitea.config.server.SSH_LISTEN_PORT }}
|
|
{{- end }}
|
|
protocol: TCP
|
|
{{- if .Values.service.ssh.nodePort }}
|
|
nodePort: {{ .Values.service.ssh.nodePort }}
|
|
{{- end }}
|
|
selector:
|
|
{{- include "gitea.selectorLabels" . | nindent 4 }}
|