Copy ingress cert

Signed-off-by: Arnob kumar saha <arnob@appscode.com>

Author: ArnobKumarSaha

charts/ace-installer/resourcetemplates/helmreleases/ace/ace.yaml

@@ -36,7 +36,7 @@ spec:
     namespace: {{ $.Release.Namespace }}
   {{- if and (dig "catalog-manager" "enabled" false $.Values.helm.releases) (dig "service-gateway-presets" "enabled" false $.Values.helm.releases) }}
   - name: ace
-    namespace: ace-gw
+    namespace: ace
   {{- end }}
   chart:
     spec:

charts/ace/templates/gateway/cert-secret-ingress.yaml

@@ -0,0 +1,17 @@
+{{ if and (index .Values "gateway" "enabled") (index .Values "ingress-nginx" "enabled") }}
+
+{{- $secretName := printf "%s-cert" (include "ace.fullname" .) }}
+{{- $existing := lookup "v1" "Secret" .Release.Namespace $secretName }}
+{{- if $existing }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "ace.fullname" . }}-ingress-cert
+  namespace: {{ .Release.Namespace }}
+type: kubernetes.io/tls
+data:
+  tls.crt: {{ index $existing.data "tls.crt" }}
+  tls.key: {{ index $existing.data "tls.key" }}
+{{- end }}
+
+{{- end }}

charts/ace/templates/gateway/gateway.yaml

@@ -25,6 +25,10 @@ spec:
         kind: Secret
         name: {{ include "ace.fullname" . }}-gw-cert
         namespace: {{ .Release.Namespace }}
+      - group: ""
+        kind: Secret
+        name: {{ include "ace.fullname" . }}-ingress-cert
+        namespace: {{ .Release.Namespace }}
     allowedRoutes:
       namespaces:
         from: Same

charts/service-gateway-presets/README.md

@@ -74,7 +74,7 @@ The following table lists the configurable parameters of the `service-gateway-pr
 | gateway.gateway-converter.enabled                  |                                                                | <code>false</code>                                                                                                                                                                                                |
 | gateway.config.envoyGateway.gateway.controllerName |                                                                | <code>gateway.voyagermesh.com/ace</code>                                                                                                                                                                          |
 | gateway.config.envoyGateway.extensionApis          |                                                                | <code>{}</code>                                                                                                                                                                                                   |
-| gateway.deployment.priorityClassName               |                                                                | <code>system-cluster-critical</code>                                                                                                                                                                              |
+| gateway.deployment.priorityClassName               |                                                                | <code>""</code>                                                                                                                                                                                                   |
 | gateway.deployment.annotations                     |                                                                | <code>{}</code>                                                                                                                                                                                                   |
 | gateway.hpa.enabled                                |                                                                | <code>false</code>                                                                                                                                                                                                |
 | gateway.hpa.behavior                               |                                                                | <code>{}</code>                                                                                                                                                                                                   |

charts/service-gateway-presets/values.yaml

@@ -72,7 +72,7 @@ gateway:
         controllerName: gateway.voyagermesh.com/ace
       extensionApis: {}
   deployment:
-    priorityClassName: system-cluster-critical
+    priorityClassName: ""
     annotations: {}
   hpa:
     enabled: false

charts/service-gateway/README.md

@@ -74,7 +74,7 @@ The following table lists the configurable parameters of the `service-gateway` c
 | gateway.gateway-converter.enabled                  |                                                                    | <code>false</code>                                                                                                                                                                                                |
 | gateway.config.envoyGateway.gateway.controllerName |                                                                    | <code>gateway.voyagermesh.com/ace</code>                                                                                                                                                                          |
 | gateway.config.envoyGateway.extensionApis          |                                                                    | <code>{}</code>                                                                                                                                                                                                   |
-| gateway.deployment.priorityClassName               |                                                                    | <code>system-cluster-critical</code>                                                                                                                                                                              |
+| gateway.deployment.priorityClassName               |                                                                    | <code>""</code>                                                                                                                                                                                                   |
 | gateway.deployment.annotations                     |                                                                    | <code>{}</code>                                                                                                                                                                                                   |
 | gateway.hpa.enabled                                |                                                                    | <code>false</code>                                                                                                                                                                                                |
 | gateway.hpa.behavior                               |                                                                    | <code>{}</code>                                                                                                                                                                                                   |

charts/service-gateway/templates/gateway-tls/certificate.yaml

@@ -1,6 +1,3 @@
-{{- $ing := lookup "networking.k8s.io/v1" "Ingress" "ace" "ace" -}}
-{{- $domain := include "gateway.domain" . -}}
-
 {{- if not (eq .Values.infra.tls.issuer "external") }}
 
 apiVersion: cert-manager.io/v1
@@ -22,10 +19,7 @@ spec:
   {{- if eq .Values.infra.hostType "domain" }}
   commonName: {{ include "gateway.domain" . }}
   dnsNames:
-    - {{ $domain }}
-    {{- if and $ing (hasPrefix "ace.ace." $domain) }}
-    - {{ trimPrefix "ace.ace." $domain }}
-    {{- end }}
+    - {{ include "gateway.domain" . }}
   {{- else }}
   ipAddresses:
     - "{{ .Values.infra.host }}"

charts/service-gateway/values.yaml

@@ -73,7 +73,7 @@ gateway:
         controllerName: gateway.voyagermesh.com/ace
       extensionApis: {}
   deployment:
-    priorityClassName: system-cluster-critical
+    priorityClassName: ""
     annotations: {}
   hpa:
     enabled: false