helm: ingress для внешнего доступа

helm/templates/configmap.yaml

@@ -9,8 +9,10 @@ data:
       forward-headers-strategy: framework
 
     app:
+      api-key: ${API_KEY}
       jellyfin:
         url: {{ $.Values.app.jellyfin.url | quote }}
+        api-key: ${JELLYFIN_API_KEY}
       s3:
         url: {{ $.Values.app.s3.url | quote }}
         access-key: ${S3_ACCESS_KEY}

helm/templates/deployment.yaml

@@ -69,6 +69,16 @@ spec:
                   key: dbPassword
             - name: DB_URL
               value: "jdbc:postgresql://{{ $.Values.db.host }}:{{ $.Values.db.port }}/{{ $.Values.db.name }}"
+            - name: API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Release.Name }}-{{ $.Chart.Name }}-secret
+                  key: apiKey
+            - name: JELLYFIN_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Release.Name }}-{{ $.Chart.Name }}-secret
+                  key: jellyfinApiKey
             - name: S3_ACCESS_KEY
               valueFrom:
                 secretKeyRef:

helm/templates/ingress.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: "{{ $.Release.Name }}-{{ $.Chart.Name }}"
+  annotations: {}
+spec:
+  rules:
+    - host: {{.Values.ingress.host }}
+      http:
+        paths:
+          - backend:
+              service:
+                name: "{{ $.Release.Name }}-{{ $.Chart.Name }}"
+                port:
+                  number: {{ .Values.port }}
+            path: /
+            pathType: Prefix

helm/templates/secret.yaml

@@ -8,3 +8,5 @@ data:
   dbPassword: {{ (required "DB password не установлен" $.Values.db.password) | b64enc | quote }}
   accessKey: {{ (required "Accesskey не установлен" $.Values.app.s3.accessKey) | b64enc | quote }}
   secretKey: {{ (required "Secretkey не установлен" $.Values.app.s3.secretKey) | b64enc | quote }}
+  apiKey: {{ (required "ApiKey не установлен" $.Values.app.apiKey) | b64enc | quote }}
+  jellyfinApiKey: {{ (required "Jellyfin ApiKey не установлен" $.Values.app.jellyfin.apiKey) | b64enc | quote }}

helm/values.yaml

@@ -23,8 +23,10 @@ db:
   maxConnections: 10
 
 app:
+  apiKey: null
   jellyfin:
     url: null
+    apiKey: null
   s3:
     url: null
     accessKey: null
@@ -35,3 +37,5 @@ app:
 
 securityContext:
   privileged: false
+ingress:
+  host: null