84 lines
2.8 KiB
YAML
84 lines
2.8 KiB
YAML
|
{{- $enabled := .Values.proxy.https.enabled -}}
|
||
|
|
{{- $autoHTTPS := and $enabled (and (eq .Values.proxy.https.type "letsencrypt") .Values.proxy.https.hosts) -}}
|
||
|
|
{{- $manualHTTPS := and $enabled (eq .Values.proxy.https.type "manual") -}}
|
||
|
|
{{- $manualHTTPSwithsecret := and $enabled (eq .Values.proxy.https.type "secret") -}}
|
||
|
|
{{- $offloadHTTPS := and $enabled (eq .Values.proxy.https.type "offload") -}}
|
||
|
|
{{- $valid := or $autoHTTPS (or $manualHTTPS (or $manualHTTPSwithsecret $offloadHTTPS)) -}}
|
||
|
|
{{- $HTTPS := and $enabled $valid -}}
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Service
|
||
|
|
metadata:
|
||
|
|
name: {{ include "jupyterhub.proxy-api.fullname" . }}
|
||
|
|
labels:
|
||
|
|
{{- $_ := merge (dict "componentSuffix" "-api") . }}
|
||
|
|
{{- include "jupyterhub.labels" $_ | nindent 4 }}
|
||
|
|
spec:
|
||
|
|
selector:
|
||
|
|
{{- include "jupyterhub.matchLabels" . | nindent 4 }}
|
||
|
|
ports:
|
||
|
|
- port: 8001
|
||
|
|
targetPort: api
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Service
|
||
|
|
metadata:
|
||
|
|
name: {{ include "jupyterhub.proxy-public.fullname" . }}
|
||
|
|
labels:
|
||
|
|
{{- $_ := merge (dict "componentSuffix" "-public") . }}
|
||
|
|
{{- include "jupyterhub.labels" $_ | nindent 4 }}
|
||
|
|
{{- with .Values.proxy.service.labels }}
|
||
|
|
{{- . | toYaml | nindent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.service.annotations }}
|
||
|
|
annotations:
|
||
|
|
{{- . | toYaml | nindent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
spec:
|
||
|
|
selector:
|
||
|
|
# This service will target the autohttps pod if autohttps is configured, and
|
||
|
|
# the proxy pod if not. When autohttps is configured, the service proxy-http
|
||
|
|
# will be around to target the proxy pod directly.
|
||
|
|
{{- if $autoHTTPS }}
|
||
|
|
{{- $_ := merge (dict "componentLabel" "autohttps") . -}}
|
||
|
|
{{- include "jupyterhub.matchLabels" $_ | nindent 4 }}
|
||
|
|
{{- else }}
|
||
|
|
{{- include "jupyterhub.matchLabels" . | nindent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
ports:
|
||
|
|
{{- if $HTTPS }}
|
||
|
|
- name: https
|
||
|
|
port: 443
|
||
|
|
# When HTTPS termination is handled outside our helm chart, pass traffic
|
||
|
|
# coming in via this Service's port 443 to targeted pod's port meant for
|
||
|
|
# HTTP traffic.
|
||
|
|
{{- if $offloadHTTPS }}
|
||
|
|
targetPort: http
|
||
|
|
{{- else }}
|
||
|
|
targetPort: https
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.service.nodePorts.https }}
|
||
|
|
nodePort: {{ . }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if ne .Values.proxy.service.disableHttpPort true }}
|
||
|
|
- name: http
|
||
|
|
port: 80
|
||
|
|
targetPort: http
|
||
|
|
{{- with .Values.proxy.service.nodePorts.http }}
|
||
|
|
nodePort: {{ . }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.service.extraPorts }}
|
||
|
|
{{- . | toYaml | nindent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
type: {{ .Values.proxy.service.type }}
|
||
|
|
{{- with .Values.proxy.service.loadBalancerIP }}
|
||
|
|
loadBalancerIP: {{ . }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if eq .Values.proxy.service.type "LoadBalancer" }}
|
||
|
|
{{- with .Values.proxy.service.loadBalancerSourceRanges }}
|
||
|
|
loadBalancerSourceRanges:
|
||
|
|
{{- . | toYaml | nindent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|