adding ingress and certs

charts/boday-it/templates/ingress.yaml

@@ -10,6 +10,14 @@ spec:
   {{- with .Values.ingress.className }}
   ingressClassName: {{ . | quote }}
   {{- end }}
+  {{- if .Values.ingress.tls.enabled }}
+  tls:
+    - secretName: {{ .Values.ingress.tls.secretName | quote }}
+      hosts:
+        {{- range .Values.ingress.hosts }}
+        - {{ . | quote }}
+        {{- end }}
+  {{- end }}
   rules:
     {{- range .Values.ingress.hosts }}
     - host: {{ . | quote }}

charts/boday-it/values-prod.yaml

@@ -8,3 +8,8 @@ ingress:
   className: traefik
   annotations:
     kubernetes.io/ingress.class: null   # alte Annotation entfernen
+    # cert-manager holt das Zertifikat für alle hosts automatisch (HTTP-01 über Port 80)
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  tls:
+    enabled: true
+    secretName: boday-it-tls

charts/boday-it/values.yaml

@@ -28,3 +28,6 @@ ingress:
   hosts:
     - boday-it.ch
     - www.boday-it.ch
+  tls:
+    enabled: false
+    secretName: boday-it-tls