145 lines
4.2 KiB
Smarty
145 lines
4.2 KiB
Smarty
{{/*
|
|
Expand the name of the chart.
|
|
*/}}
|
|
{{- define "spire-server.name" -}}
|
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create a default fully qualified app name.
|
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
|
If release name contains chart name it will be used as a full name.
|
|
*/}}
|
|
{{- define "spire-server.fullname" -}}
|
|
{{- if .Values.fullnameOverride }}
|
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
|
{{- else }}
|
|
{{- $name := default .Chart.Name .Values.nameOverride }}
|
|
{{- if contains $name .Release.Name }}
|
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
|
{{- else }}
|
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Allow the release namespace to be overridden for multi-namespace deployments in combined charts
|
|
*/}}
|
|
{{- define "spire-server.namespace" -}}
|
|
{{- if .Values.namespaceOverride -}}
|
|
{{- .Values.namespaceOverride -}}
|
|
{{- else -}}
|
|
{{- .Release.Namespace -}}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Create chart name and version as used by the chart label.
|
|
*/}}
|
|
{{- define "spire-server.chart" -}}
|
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Common labels
|
|
*/}}
|
|
{{- define "spire-server.labels" -}}
|
|
helm.sh/chart: {{ include "spire-server.chart" . }}
|
|
{{ include "spire-server.selectorLabels" . }}
|
|
{{- if .Chart.AppVersion }}
|
|
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
|
{{- end }}
|
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Selector labels
|
|
*/}}
|
|
{{- define "spire-server.selectorLabels" -}}
|
|
app.kubernetes.io/name: {{ include "spire-server.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create the name of the service account to use
|
|
*/}}
|
|
{{- define "spire-server.serviceAccountName" -}}
|
|
{{- if .Values.serviceAccount.create }}
|
|
{{- default (include "spire-server.fullname" .) .Values.serviceAccount.name }}
|
|
{{- else }}
|
|
{{- default "default" .Values.serviceAccount.name }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{- define "spire-server.image" -}}
|
|
{{- if eq (substr 0 7 .image.version) "sha256:" -}}
|
|
{{- printf "%s/%s@%s" .image.registry .image.repository .image.version -}}
|
|
{{- else if .appVersion -}}
|
|
{{- printf "%s/%s:%s" .image.registry .image.repository (default .appVersion .image.version) -}}
|
|
{{- else if .image.version -}}
|
|
{{- printf "%s/%s:%s" .image.registry .image.repository .image.version -}}
|
|
{{- else -}}
|
|
{{- printf "%s/%s" .image.registry .image.repository -}}
|
|
{{- end -}}
|
|
{{- end }}
|
|
|
|
{{- define "spire-server.upstream-ca-secret" -}}
|
|
{{- $root := . }}
|
|
{{- with .Values.upstreamAuthority.disk -}}
|
|
{{- if eq (.secret.create | toString) "true" -}}
|
|
{{ include "spire-server.fullname" $root }}-upstream-ca
|
|
{{- else -}}
|
|
{{ default (include "spire-server.fullname" $root) .secret.name }}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
{{- end }}
|
|
|
|
{{- define "spire-controller-manager.fullname" -}}
|
|
{{ include "spire-server.fullname" . | trimSuffix "-server" }}-controller-manager
|
|
{{- end }}
|
|
|
|
{{- define "spire-k8s-workload-registrar.fullname" -}}
|
|
{{ include "spire-server.fullname" . | trimSuffix "-server" }}-k8s-workload-registrar
|
|
{{- end }}
|
|
|
|
{{- define "spire-server.serviceAccountAllowedList" }}
|
|
{{- if ne (len .Values.nodeAttestor.k8sPsat.serviceAccountAllowList) 0 }}
|
|
{{- .Values.nodeAttestor.k8sPsat.serviceAccountAllowList | toJson }}
|
|
{{- else }}
|
|
[{{ printf "%s:%s-agent" .Release.Namespace .Release.Name | quote }}]
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Tornjak specific section
|
|
*/}}
|
|
|
|
{{- define "spire-tornjak.fullname" -}}
|
|
{{ include "spire-server.fullname" . | trimSuffix "-server" }}-tornjak
|
|
{{- end }}
|
|
{{- define "spire-tornjak.config" -}}
|
|
{{ include "spire-tornjak.fullname" . }}-config
|
|
{{- end }}
|
|
{{- define "spire-tornjak.frontend" -}}
|
|
{{ include "spire-tornjak.fullname" . }}-fe
|
|
{{- end }}
|
|
{{- define "spire-tornjak.backend" -}}
|
|
{{ include "spire-tornjak.fullname" . }}-be
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create URL for accessing Tornjak Backend
|
|
*/}}
|
|
{{- define "tornjak.apiURL" -}}
|
|
{{- default .Values.tornjak.config.frontend.apiServerURL }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create URL for accessing Tornjak Frontend
|
|
*/}}
|
|
{{- define "tornjak.FrontendURL" -}}
|
|
{{- $feurl := print "http://localhost:3000" }}
|
|
{{- $feurl }}
|
|
{{- end }}
|