28e94f96e3
SSH service might want to limit the a range of source IPs. LoadBalancerSourceRanges enables to limit them just passing a list of CIDR addresses to whitelist Co-authored-by: javier <perezrubio.javier@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/105 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JPRbrs <jprbrs@noreply.gitea.io> Co-committed-by: JPRbrs <jprbrs@noreply.gitea.io>
42 lines
1.4 KiB
YAML
42 lines
1.4 KiB
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: {{ include "gitea.fullname" . }}-ssh
|
|
labels:
|
|
{{- include "gitea.labels" . | nindent 4 }}
|
|
annotations:
|
|
{{- toYaml .Values.service.ssh.annotations | nindent 4 }}
|
|
spec:
|
|
type: {{ .Values.service.ssh.type }}
|
|
{{- if eq .Values.service.ssh.type "LoadBalancer" }}
|
|
{{- if .Values.service.ssh.loadBalancerIP }}
|
|
loadBalancerIP: {{ .Values.service.ssh.loadBalancerIP }}
|
|
{{- end -}}
|
|
{{- if .Values.service.ssh.loadBalancerSourceRanges }}
|
|
loadBalancerSourceRanges:
|
|
{{- range .Values.service.ssh.loadBalancerSourceRanges }}
|
|
- {{ . }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if and .Values.service.ssh.clusterIP (eq .Values.service.ssh.type "ClusterIP") }}
|
|
clusterIP: {{ .Values.service.ssh.clusterIP }}
|
|
{{- end }}
|
|
{{- if .Values.service.ssh.externalIPs }}
|
|
externalIPs:
|
|
{{- toYaml .Values.service.ssh.externalIPs | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .Values.service.ssh.externalTrafficPolicy }}
|
|
externalTrafficPolicy: {{ .Values.service.ssh.externalTrafficPolicy }}
|
|
{{- end }}
|
|
ports:
|
|
- name: ssh
|
|
port: {{ .Values.service.ssh.port }}
|
|
targetPort: {{ .Values.gitea.config.server.SSH_LISTEN_PORT }}
|
|
protocol: TCP
|
|
{{- if .Values.service.ssh.nodePort }}
|
|
nodePort: {{ .Values.service.ssh.nodePort }}
|
|
{{- end }}
|
|
selector:
|
|
{{- include "gitea.selectorLabels" . | nindent 4 }}
|