f5a4071b71
Enhanced values.yaml with comprehensive documentation and better organization: Documentation improvements: - Added detailed inline comments for all API7 Gateway configuration sections - Documented Ingress routing behavior (gateway vs direct service routing) - Explained Service Discovery benefits and requirements - Added detailed plugin configuration documentation (rate limiting, CORS, auth) - Included usage examples and production recommendations Configuration enhancements: - Added gateway.gatewayNamespace for better organization - Added TLS certificate configuration options (duration, renewBefore, algorithm, size) - Added ADC resource limits configuration - Improved CORS and rate limiting documentation with parameter explanations - Added consumer/authentication documentation Template updates: - Updated certificate.yaml to use configurable TLS parameters - Updated job-adc-sync.yaml to use configurable ADC resources The values.yaml now serves as comprehensive documentation for all API7 Gateway features and configuration options, making it easier for users to understand and customize their deployment. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
31 lines
1.1 KiB
YAML
31 lines
1.1 KiB
YAML
{{- if and .Values.api7.enabled .Values.api7.tls.enabled .Values.api7.tls.certManager.enabled }}
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: {{ include "api7ee.fullname" . }}-tls
|
|
labels:
|
|
{{- include "api7ee.labels" . | nindent 4 }}
|
|
spec:
|
|
secretName: {{ .Values.api7.tls.secretName | default (printf "%s-tls" (include "api7ee.fullname" .)) }}
|
|
issuerRef:
|
|
name: {{ .Values.api7.tls.certManager.issuer }}
|
|
kind: {{ .Values.api7.tls.certManager.issuerKind | default "ClusterIssuer" }}
|
|
commonName: {{ first .Values.api7.hosts }}
|
|
dnsNames:
|
|
{{- range .Values.api7.hosts }}
|
|
- {{ . | quote }}
|
|
{{- end }}
|
|
privateKey:
|
|
algorithm: {{ .Values.api7.tls.privateKey.algorithm | default "RSA" }}
|
|
encoding: PKCS1
|
|
size: {{ .Values.api7.tls.privateKey.size | default 2048 }}
|
|
rotationPolicy: {{ .Values.api7.tls.privateKey.rotationPolicy | default "Always" }}
|
|
usages:
|
|
- digital signature
|
|
- key encipherment
|
|
- server auth
|
|
- client auth
|
|
duration: {{ .Values.api7.tls.duration | default "2160h" }}
|
|
renewBefore: {{ .Values.api7.tls.renewBefore | default "720h" }}
|
|
{{- end }}
|