modifications to web service for ingress / ssl config

Author: batpad

osm-seed/templates/web/web-service.yaml

@@ -8,39 +8,22 @@ metadata:
     component: web-service
     environment: {{ .Values.environment }}
     release: {{ .Release.Name }}
-  {{- if eq .Values.cloudProvider "aws" }}
   annotations:
-    service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "300"
-    {{- if .Values.AWS_SSL_ARN }}
-    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: {{ .Values.AWS_SSL_ARN }}
-    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: https
-    {{- end }}
-  {{- end }}
+    kubernetes.io/ingress.class: nginx
+    # nginx.ingress.kubernetes.io/proxy-body-size: "300m"
+    cert-manager.io/cluster-issuer: letsencrypt-prod-issuer
 spec:
-  # In case cloudProvider=aws
-  {{- if eq .Values.cloudProvider "aws" }}
-  type: LoadBalancer
-  {{- end }}
-  # In case cloudProvider=gcp
-  {{- if eq .Values.cloudProvider "gcp" }}
-  type: LoadBalancer
-  {{- end }}
-  # In case cloudProvider=minikube
   {{- if eq .Values.cloudProvider "minikube" }}
   type: NodePort
+  {{- else }}
+  type: ClusterIP
   {{- end }}
   ports:
     - port: 80
       targetPort: http
+      nodePort: null
       protocol: TCP
       name: http
-  {{- if .Values.AWS_SSL_ARN }} #FIXME: make generic
-    - port: 443
-      targetPort: http
-      protocol: TCP
-      name: https
-  {{- end }}
   selector:
     app: {{ template "osm-seed.name" . }}
     release: {{ .Release.Name }}