mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-26 06:52:57 +08:00
Daneyon Hansen
40e01424c1
* fix(helm): improve GatewayClass overrides Give chart-created Gateways a distinct default name and allow GRPCRoutes to select a listener on an existing Gateway. Fixes: #2469 Signed-off-by: Daneyon Hansen <daneyon.hansen@solo.io> * fix(e2e): resolve rendered Gateway name Signed-off-by: Daneyon Hansen <daneyon.hansen@solo.io> * fix(helm): preserve Gateway name defaults Signed-off-by: Daneyon Hansen <daneyon.hansen@solo.io> --------- Signed-off-by: Daneyon Hansen <daneyon.hansen@solo.io>
33 lines
1.7 KiB
YAML
33 lines
1.7 KiB
YAML
{{- if and .Values.grpcRoute.enabled .Values.grpcRoute.gateway.create }}
|
|
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: Gateway
|
|
metadata:
|
|
name: {{ include "openshell.grpcRouteGatewayName" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "openshell.labels" . | nindent 4 }}
|
|
spec:
|
|
gatewayClassName: {{ .Values.grpcRoute.gateway.className }}
|
|
listeners:
|
|
- name: {{ ternary "https" "http" (eq .Values.grpcRoute.gateway.listener.protocol "HTTPS") }}
|
|
port: {{ .Values.grpcRoute.gateway.listener.port }}
|
|
protocol: {{ .Values.grpcRoute.gateway.listener.protocol }}
|
|
{{- if eq .Values.grpcRoute.gateway.listener.protocol "HTTPS" }}
|
|
{{- if not .Values.grpcRoute.gateway.listener.tls.certificateRefs }}
|
|
{{- fail "grpcRoute.gateway.listener.tls.certificateRefs is required when grpcRoute.gateway.listener.protocol is HTTPS" }}
|
|
{{- end }}
|
|
{{- if and (not .Values.server.disableTls) (not .Values.grpcRoute.backendTLSPolicy.enabled) }}
|
|
{{- fail "grpcRoute.gateway.listener.protocol=HTTPS terminates TLS at the Gateway listener. Either set server.disableTls=true so the pod listens plaintext, or enable grpcRoute.backendTLSPolicy for end-to-end TLS re-encryption to the gateway pod." }}
|
|
{{- end }}
|
|
tls:
|
|
mode: Terminate
|
|
certificateRefs:
|
|
{{- toYaml .Values.grpcRoute.gateway.listener.tls.certificateRefs | nindent 10 }}
|
|
{{- end }}
|
|
allowedRoutes:
|
|
namespaces:
|
|
from: {{ .Values.grpcRoute.gateway.listener.allowedRoutes }}
|
|
{{- end }}
|