update TLS config on ingresses

2025-09-21 08:53:07 -04:00
parent 373b3fad7d
commit 3060d7fbb5
10 changed files with 29 additions and 10 deletions
--- a/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
+++ b/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
@@ -33,6 +33,8 @@ ingress:
  # Warning! The configuration is dependant on your current k8s API version capabilities (networking.k8s.io/v1)
  tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
    - secretName: xai-corp-production-tls
+      hosts:
+        - stash.xai-corp.net
  annotations:
    ingress.kubernetes.io/force-hsts: "true"
    ingress.kubernetes.io/hsts-max-age: "315360000"
--- a/ansible-5/roles/prod.k3s/files/stash/values.yaml
+++ b/ansible-5/roles/prod.k3s/files/stash/values.yaml
@@ -9,10 +9,13 @@ image:

 ingress:
  main:
-    enabled: false
+    enabled: true
    hosts:
      - host: stash.xai-corp.net
        paths:
          - path: /
    tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
      - secretName: xai-corp-production-tls
+        hosts:
+          - stash.xai-corp.net
+