[incubator/rundeck] allow configurable nginx conf. Add example

incubator/rundeck/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 description: A Rundeck chart for Kubernetes
 name: rundeck
 home: https://github.com/rundeck/rundeck
-version: 0.1.2
+version: 0.1.3
 appVersion: 3.1.12
 keywords:
 - rundeck

incubator/rundeck/README.md

@@ -28,3 +28,4 @@ rundeck.env | The rundeck environment variables that you would want to set | Def
 rundeck.sshSecrets | A reference to the Kubernetes Secret that contains the ssh keys. | ""
 rundeck.awsCredentialsSecret | A reference to the Kubernetes Secret that contains the aws credentials. | ""
 rundeck.awsVolumeId | A Volume ID from a pre-existent AWS EBS volume to persist Rundeck data from /home/rundeck/server/data path. | "" 
+nginxConfOverride | An optional multi-line value that can replace the default nginx.conf. | ""

incubator/rundeck/templates/nginx-configmap.yaml

@@ -5,4 +5,8 @@ metadata:
 type: Opaque
 data:
   nginx.conf: |-
+{{- if .Values.nginxConfOverride }}
+{{ tpl .Values.nginxConfOverride . | indent 4 }}
+{{- else }}
 {{ .Files.Get "files/nginx/nginx.conf" | indent 4 }}
+{{- end }}

incubator/rundeck/values.yaml

@@ -65,3 +65,33 @@ nodeSelector: {}
 tolerations: []
 
 affinity: {}
+
+## Replace the nginx.conf file in this chart with a customised config.
+nginxConfOverride: ""
+  # # This example adds configuration for external auth e.g. via oauth2-proxy
+  # # It also demonstrates templating in another arbitrary value (authRoles)
+  # # to create a map of external users to rundeck roles
+  # events {
+  #   worker_connections  1024;
+  # }
+  # http {
+  #   map $http_x_forwarded_user $x_forwarded_roles {
+  # {{- .Values.authRoles | nindent 4 }}
+  #   }
+  #   server {
+  #     location /metrics/ {
+  #       proxy_pass http://localhost:4440;
+  #       proxy_set_header Host $http_host;
+  #       proxy_set_header X-Forwarded-User metrics;
+  #       proxy_set_header X-Forwarded-Roles user;
+  #     }
+  #     location / {
+  #       recursive_error_pages on;
+  #       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  #       proxy_set_header X-Forwarded-Proto $scheme;
+  #       proxy_set_header X-Forwarded-Roles $x_forwarded_roles;
+  #       proxy_set_header User-Agent $http_user_agent;
+  #       proxy_pass http://localhost:4440;
+  #     }
+  #   }
+  # }