40 lines
894 B
Terraform
40 lines
894 B
Terraform
|
resource "kubernetes_ingress_v1" "vaultwarden" {
|
||
|
|
metadata {
|
||
|
|
name = "ingress"
|
||
|
|
namespace = kubernetes_namespace.vaultwarden.metadata[0].name
|
||
|
|
|
||
|
|
annotations = {
|
||
|
|
"kubernetes.io/ingress.class" = "public"
|
||
|
|
"cert-manager.io/cluster-issuer" = var.issuer
|
||
|
|
"kubernetes.io/tls-acme" = "true"
|
||
|
|
"nginx.ingress.kubernetes.io/ssl-redirect" = "true"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
spec {
|
||
|
|
dynamic "tls" {
|
||
|
|
for_each = var.tls_enabled ? [1] : []
|
||
|
|
content {
|
||
|
|
hosts = [var.fqdn]
|
||
|
|
secret_name = "vaultwarden-tls"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
rule {
|
||
|
|
host = var.fqdn
|
||
|
|
http {
|
||
|
|
path {
|
||
|
|
backend {
|
||
|
|
service {
|
||
|
|
name = kubernetes_service.vaultwarden.metadata[0].name
|
||
|
|
port {
|
||
|
|
number = 80
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|