ingress: TLS via cert-manager (letsencrypt-prod) for onelab.k8s.selair.it

Made-with: Cursor

gitops/charts/onelab/templates/ingress.yaml

@@ -7,6 +7,9 @@ metadata:
     {{- include "onelab.labels" . | nindent 4 }}
   annotations:
     argocd.argoproj.io/sync-wave: {{ .Values.syncWaves.apps | quote }}
+    {{- if .Values.ingress.certManager.clusterIssuer }}
+    cert-manager.io/cluster-issuer: {{ .Values.ingress.certManager.clusterIssuer | quote }}
+    {{- end }}
     {{- with .Values.ingress.annotations }}
     {{- toYaml . | nindent 4 }}
     {{- end }}

gitops/charts/onelab/values.yaml

@@ -97,6 +97,9 @@ ingress:
   annotations: {}
   tls: false
   tlsSecretName: ""
+  certManager:
+    # When set, adds cert-manager.io/cluster-issuer annotation (TLS secret is created automatically).
+    clusterIssuer: ""
 
 # Replica counts (api.apidevice etc. override defaults in templates/workloads.yaml via this map)
 replicas: