Merge pull request 'feat: Add middleware and ingress tcp route' (#367…

…) from puppetdb into master Reviewed-on: https://gitea.obmondo.com/EnableIT/KubeAid/pulls/367
Obmondo · Aug 23, 2024 · 8b22008 · 8b22008
2 parents 0cff28f + a329313
commit 8b22008
Show file tree

Hide file tree

Showing 2 changed files with 30 additions and 0 deletions.
diff --git a/argocd-helm-charts/puppetserver/templates/ingressroutetcp-puppetdb.yaml b/argocd-helm-charts/puppetserver/templates/ingressroutetcp-puppetdb.yaml
@@ -0,0 +1,20 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: puppetdb-{{ .Values.customerid }}
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: HostSNI(`{{ .Values.customerid }}.puppetdb.obmondo.com`)
+    priority: 10
+    services:
+    - name: puppetserver-{{ .Values.customerid }}-puppetdb
+      port: pdb-https
+    middlewares:
+      - name: middleware-{{ .Values.customerid }}
+  tls:
+    passthrough: true
+    options:
+      name: prometheus-puppet-agent-tls-auth
+      namespace: traefik
diff --git a/argocd-helm-charts/puppetserver/templates/middleware.yaml b/argocd-helm-charts/puppetserver/templates/middleware.yaml
@@ -0,0 +1,10 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: middleware-{{ .Values.customerid }}
+spec:
+  ipAllowList:
+    sourceRange:
+      {{- range .Values.ipAllowedList }}
+      - "{{ . }}"
+      {{- end }}