Merge pull request opencloud-eu#80 from kastl-ars/20250603_tls.enabled_gatewaAPI_resources

use global.tls.enabled for gatewayAPI resources

Author: butonic

charts/opencloud/templates/gateway/gateway.yaml

@@ -17,31 +17,51 @@ spec:
       {{- toYaml . | nindent 4 }}
   {{- end }}
   listeners:
+    {{- if .Values.global.tls.enabled }}
     - name: opencloud-https
+    {{- else }}
+    - name: opencloud-http
+    {{- end }}
+      {{- if .Values.global.tls.enabled }}
       protocol: HTTPS
+      {{- else }}
+      protocol: HTTP
+      {{- end }}
       port: {{ .Values.httpRoute.gateway.port }}
       hostname: {{ .Values.global.domain.opencloud | quote }}
+      {{- if .Values.global.tls.enabled }}
       tls:
         mode: Terminate
         certificateRefs:
           - name: {{ .Values.global.tls.secretName }}
             namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
+      {{- end }}
       allowedRoutes:
         namespaces:
           from: Selector
           selector:
             matchLabels:
               kubernetes.io/metadata.name: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
     {{- if .Values.keycloak.enabled }}
+    {{- if .Values.global.tls.enabled }}
     - name: keycloak-https
+    {{- else }}
+    - name: keycloak-http
+    {{- end }}
+      {{- if .Values.global.tls.enabled }}
       protocol: HTTPS
+      {{- else }}
+      protocol: HTTP
+      {{- end }}
       port: {{ .Values.httpRoute.gateway.port }}
       hostname: {{ .Values.global.domain.keycloak | quote }}
+      {{- if .Values.global.tls.enabled }}
       tls:
         mode: Terminate
         certificateRefs:
           - name: {{ .Values.global.tls.secretName }}
             namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
+      {{- end }}
       allowedRoutes:
         namespaces:
           from: Selector
@@ -50,15 +70,25 @@ spec:
               kubernetes.io/metadata.name: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
     {{- end }}
     {{- if and .Values.opencloud.storage.s3.internal.enabled .Values.opencloud.storage.s3.internal.httpRoute.enabled }}
+    {{- if .Values.global.tls.enabled }}
     - name: minio-https
+    {{- else }}
+    - name: minio-http
+    {{- end }}
+      {{- if .Values.global.tls.enabled }}
       protocol: HTTPS
+      {{- else }}
+      protocol: HTTP
+      {{- end }}
       port: {{ .Values.httpRoute.gateway.port }}
       hostname: {{ .Values.global.domain.minio | quote }}
+      {{- if .Values.global.tls.enabled }}
       tls:
         mode: Terminate
         certificateRefs:
           - name: {{ .Values.global.tls.secretName }}
             namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
+      {{- end }}
       allowedRoutes:
         namespaces:
           from: Selector
@@ -67,15 +97,25 @@ spec:
               kubernetes.io/metadata.name: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
     {{- end }}
     {{- if .Values.collabora.enabled }}
+    {{- if .Values.global.tls.enabled }}
     - name: collabora-https
+    {{- else }}
+    - name: collabora-http
+    {{- end }}
+      {{- if .Values.global.tls.enabled }}
       protocol: HTTPS
+      {{- else }}
+      protocol: HTTP
+      {{- end }}
       port: {{ .Values.httpRoute.gateway.port }}
       hostname: {{ .Values.global.domain.collabora | quote }}
+      {{- if .Values.global.tls.enabled }}
       tls:
         mode: Terminate
         certificateRefs:
           - name: {{ .Values.global.tls.secretName }}
             namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
+      {{- end }}
       allowedRoutes:
         namespaces:
           from: Selector
@@ -84,15 +124,25 @@ spec:
               kubernetes.io/metadata.name: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
     {{- end }}
     {{- if .Values.onlyoffice.enabled }}
+    {{- if .Values.global.tls.enabled }}
     - name: onlyoffice-https
+    {{- else }}
+    - name: onlyoffice-http
+    {{- end }}
+      {{- if .Values.global.tls.enabled }}
       protocol: HTTPS
+      {{- else }}
+      protocol: HTTP
+      {{- end }}
       port: {{ .Values.httpRoute.gateway.port }}
       hostname: {{ .Values.global.domain.onlyoffice | quote }}
+      {{- if .Values.global.tls.enabled }}
       tls:
         mode: Terminate
         certificateRefs:
           - name: {{ .Values.global.tls.secretName }}
             namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
+      {{- end }}
       allowedRoutes:
         namespaces:
           from: Selector
@@ -101,15 +151,25 @@ spec:
               kubernetes.io/metadata.name: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
     {{- end }}
     {{- if and .Values.onlyoffice.collaboration.enabled .Values.onlyoffice.enabled }}
+    {{- if .Values.global.tls.enabled }}
     - name: collaboration-https
+    {{- else }}
+    - name: collaboration-http
+    {{- end }}
+      {{- if .Values.global.tls.enabled }}
       protocol: HTTPS
+      {{- else }}
+      protocol: HTTP
+      {{- end }}
       port: {{ .Values.httpRoute.gateway.port }}
       hostname: {{ .Values.global.domain.wopi | quote }}
+      {{- if .Values.global.tls.enabled }}
       tls:
         mode: Terminate
         certificateRefs:
           - name: {{ .Values.global.tls.secretName }}
             namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
+      {{- end }}
       allowedRoutes:
         namespaces:
           from: Selector