grpcs configs

kubeshop · Mar 14, 2024 · 49ec493 · 49ec493
1 parent f5163b2
commit 49ec493
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 1 deletion.
diff --git a/charts/testkube-enterprise/values.yaml b/charts/testkube-enterprise/values.yaml
@@ -283,6 +283,7 @@ testkube-worker-service:
   api:
     nats:
       uri: "nats://testkube-enterprise-nats:4222"
+
 testkube-logs-service:
   enabled: true
   fullnameOverride: testkube-enterprise-logs-service
@@ -293,10 +294,21 @@ testkube-logs-service:
     host: ""
   api:
     tls:
-      serveHTTPS: false
+      # -- Toggle should the Application terminate TLS instead of the Ingress
+      serveHTTPS: true
+      # -- API HTTPS port
+      apiPort: 9443
+      # -- Agent gRPCS port
+      agentPort: 8443
       certManager:
         # -- Certificate Issuer kind (only used if `provider` is set to `cert-manager`)
         issuerKind: ClusterIssuer
+        # -- Certificate Issuer group (only used if `provider` is set to `cert-manager`)
+        issuerGroup: cert-manager.io
+      # -- certificate path
+      certPath: /tmp/serving-cert/crt.pem
+      # -- certificate key path
+      keyPath: /tmp/serving-cert/key.pem
     mongo:
       # -- Mongo DSN connection string
       dsn: "mongodb://testkube-enterprise-mongodb:27017"

diff --git a/charts/testkube-logs-service/templates/deployment.yaml b/charts/testkube-logs-service/templates/deployment.yaml
@@ -132,6 +132,17 @@ spec:
           {{- end }}
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
+          {{- if or .Values.api.tls.serveHTTPS }}
+          volumeMounts:
+            - mountPath: /tmp/serving-cert/crt.pem
+              readOnly: true
+              name: serving-cert
+              subPath: tls.crt
+            - mountPath: /tmp/serving-cert/key.pem
+              readOnly: true
+              name: serving-cert
+              subPath: tls.key
+          {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}
@@ -144,3 +155,10 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- if .Values.api.tls.serveHTTPS }}
+      volumes:
+        - name: serving-cert
+          secret:
+            secretName: {{ .Values.api.tls.tlsSecret }}
+      {{- end }}
+