Add ability to provide extra Ingress backends (refs #361).

Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: vault
-version: 0.8.0
+version: 0.8.1
 appVersion: 1.5.4
 description: Official HashiCorp Vault Chart
 home: https://www.vaultproject.io

templates/server-ingress.yaml

@@ -41,6 +41,12 @@ spec:
     - host: {{ .host | quote }}
       http:
         paths:
+        {{- range .extraBackends }}
+          - path: {{ .path }}
+            backend:
+              serviceName: {{ .serviceName }}
+              servicePort: {{ .servicePort }}
+        {{- end }}
         {{- range (.paths | default (list "/")) }}
           - path: {{ . }}
             backend:

test/unit/server-ingress.bats

@@ -120,4 +120,21 @@ load _helpers
       . | tee /dev/stderr |
       yq -r '.spec.rules[0].http.paths[0].backend.serviceName' | tee /dev/stderr)
   [ "${actual}" = "RELEASE-NAME-vault" ]
-}
+}
+
+@test "server/ingress: adds extra backend workaround for ALB https redirection - yaml" {
+  cd `chart_dir`
+
+  local actual=$(helm template \
+      --show-only templates/server-ingress.yaml \
+      --set 'server.ingress.enabled=true' \
+      --set 'server.ingress.hosts[0].host=test.com' \
+      --set 'server.ingress.hosts[0].paths[0]=/' \
+      --set 'server.ingress.hosts[0].extraBackends[0].path=/' \
+      --set 'server.ingress.hosts[0].extraBackends[0].serviceName=ssl-redirect' \
+      --set 'server.ingress.hosts[0].extraBackends[0].servicePort=use-annotation' \
+      --set 'server.service.enabled=true' \
+      . | tee /dev/stderr |
+      yq -r '.spec.rules[0].http.paths[0].backend.serviceName' | tee /dev/stderr)
+  [ "${actual}" = "ssl-redirect" ]
+}

values.yaml

@@ -175,6 +175,14 @@ server:
     hosts:
       - host: chart-example.local
         paths: []
+        # Allow adding extra backend sections. This allows us to make use of
+        # the annotations required to do https redirection using AWS
+        # Application Load Balancers.
+        # See <https://github.com/hashicorp/vault-helm/issues/361>.
+        # extraBackends:
+        #   - path: /*
+        #     serviceName: ssl-redirect
+        #     servicePort: use-annotation
 
     tls: []
     #  - secretName: chart-example-tls