weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

feat: add support for dual stack clusters

Browse Source 
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
This commit is contained in:
Ludovic Ortega 2024-04-06 18:52:43 +02:00
parent b61de55abd
commit 55d546c111
No known key found for this signature in database
GPG Key ID: 87471466EB186A4C
3 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
deploy/charts/cert-manager/templates/service.yaml
View File

@ -19,6 +19,12 @@ metadata:
{{- end }}
spec:
type: ClusterIP
{{- if .Values.serviceIpFamilyPolicy }}
ipFamilyPolicy: {{ .Values.serviceIpFamilyPolicy }}
{{- end }}
{{- if .Values.serviceIpFamilies }}
ipFamilies: {{ .Values.serviceIpFamilies | toYaml | nindent 2 }}
{{- end }}
ports:
- protocol: TCP
port: 9402

6
deploy/charts/cert-manager/templates/webhook-service.yaml
View File

@ -18,6 +18,12 @@ metadata:
{{- end }}
spec:
type: {{ .Values.webhook.serviceType }}
{{- if .Values.webhook.ipFamilyPolicy }}
ipFamilyPolicy: {{ .Values.webhook.ipFamilyPolicy }}
{{- end }}
{{- if .Values.webhook.ipFamilies }}
ipFamilies: {{ .Values.webhook.ipFamilies | toYaml | nindent 2 }}
{{- end }}
{{- with .Values.webhook.loadBalancerIP }}
loadBalancerIP: {{ . }}
{{- end }}

14
deploy/charts/cert-manager/values.yaml
View File

@ -309,6 +309,14 @@ podLabels: {}
# +docs:property
# serviceLabels: {}
# Optional set the ip family policy to the controller Service to configure dual-stack see [Configure dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services).
# +docs:property
# serviceIpFamilyPolicy: ""
# Optional sets the families to the controller Service that should be supported and the order in which they should be applied to ClusterIP as well. Can be IPv4 and/or IPv6.
# +docs:property
# serviceIpFamilies: []
# Optional DNS settings. These are useful if you have a public and private DNS zone for
# the same domain on Route 53. The following is an example of ensuring
# cert-manager can access an ingress or DNS TXT records at all times.
@ -759,6 +767,12 @@ webhook:
# Optional additional labels to add to the Webhook Service.
serviceLabels: {}
# Optional set the ip family policy to the Webhook Service to configure dual-stack see [Configure dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services).
ipFamilyPolicy: ""
# Optional sets the families to the Webhook Service that should be supported and the order in which they should be applied to ClusterIP as well. Can be IPv4 and/or IPv6.
ipFamilies: []
image:
# The container registry to pull the webhook image from.
# +docs:property