mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-02-18 13:54:23 -05:00
e9694d40b9
Bumping Cilium to also enable node-to-node encryption and node-to-node strict mode. Since the second is not upstream we use our fork.
39 lines
1.5 KiB
YAML
39 lines
1.5 KiB
YAML
{{- if (or .Values.externalWorkloads.enabled .Values.clustermesh.useAPIServer) }}
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: clustermesh-apiserver
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
k8s-app: clustermesh-apiserver
|
|
app.kubernetes.io/part-of: cilium
|
|
app.kubernetes.io/name: clustermesh-apiserver
|
|
{{- if or .Values.clustermesh.apiserver.service.annotations .Values.clustermesh.annotations }}
|
|
annotations:
|
|
{{- with .Values.clustermesh.annotations }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.clustermesh.apiserver.service.annotations }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
spec:
|
|
type: {{ .Values.clustermesh.apiserver.service.type }}
|
|
selector:
|
|
k8s-app: clustermesh-apiserver
|
|
ports:
|
|
- port: 2379
|
|
{{- if and (eq "NodePort" .Values.clustermesh.apiserver.service.type) .Values.clustermesh.apiserver.service.nodePort }}
|
|
nodePort: {{ .Values.clustermesh.apiserver.service.nodePort }}
|
|
{{- end }}
|
|
{{- if and (eq "LoadBalancer" .Values.clustermesh.apiserver.service.type) .Values.clustermesh.apiserver.service.loadBalancerIP }}
|
|
loadBalancerIP: {{ .Values.clustermesh.apiserver.service.loadBalancerIP }}
|
|
{{- end }}
|
|
{{- if .Values.clustermesh.apiserver.service.externalTrafficPolicy }}
|
|
externalTrafficPolicy: {{ .Values.clustermesh.apiserver.service.externalTrafficPolicy }}
|
|
{{- end }}
|
|
{{- if .Values.clustermesh.apiserver.service.internalTrafficPolicy }}
|
|
internalTrafficPolicy: {{ .Values.clustermesh.apiserver.service.internalTrafficPolicy }}
|
|
{{- end }}
|
|
{{- end }}
|