From b9dd05ffb2a3264a9cc8de68ab65731712a25e87 Mon Sep 17 00:00:00 2001
From: root <root@BITMT501.boday.biz>
Date: Fri, 13 Nov 2026 16:52:28 +0100
Subject: [PATCH] adding ingress and certs

---
 charts/boday-it/templates/ingress.yaml | 8 ++++++++
 charts/boday-it/values-prod.yaml       | 5 +++++
 charts/boday-it/values.yaml            | 3 +++
 3 files changed, 16 insertions(+)

diff --git a/charts/boday-it/templates/ingress.yaml b/charts/boday-it/templates/ingress.yaml
index 571b472..1b8ae3a 100644
--- a/charts/boday-it/templates/ingress.yaml
+++ b/charts/boday-it/templates/ingress.yaml
@@ -10,6 +10,14 @@ spec:
   {{- with .Values.ingress.className }}
   ingressClassName: {{ . | quote }}
   {{- end }}
+  {{- if .Values.ingress.tls.enabled }}
+  tls:
+    - secretName: {{ .Values.ingress.tls.secretName | quote }}
+      hosts:
+        {{- range .Values.ingress.hosts }}
+        - {{ . | quote }}
+        {{- end }}
+  {{- end }}
   rules:
     {{- range .Values.ingress.hosts }}
     - host: {{ . | quote }}
diff --git a/charts/boday-it/values-prod.yaml b/charts/boday-it/values-prod.yaml
index 5614ab5..c930763 100644
--- a/charts/boday-it/values-prod.yaml
+++ b/charts/boday-it/values-prod.yaml
@@ -8,3 +8,8 @@ ingress:
   className: traefik
   annotations:
     kubernetes.io/ingress.class: null   # alte Annotation entfernen
+    # cert-manager holt das Zertifikat für alle hosts automatisch (HTTP-01 über Port 80)
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  tls:
+    enabled: true
+    secretName: boday-it-tls
diff --git a/charts/boday-it/values.yaml b/charts/boday-it/values.yaml
index 3f08186..ae3f9c0 100644
--- a/charts/boday-it/values.yaml
+++ b/charts/boday-it/values.yaml
@@ -28,3 +28,6 @@ ingress:
   hosts:
     - boday-it.ch
     - www.boday-it.ch
+  tls:
+    enabled: false
+    secretName: boday-it-tls