feat(traefik): add support for custom default clustercertificate for helm.

(no scale GUI yet, feel free to add)

charts/enterprise/traefik/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 22.0.3
+version: 22.1.0
 annotations:
   truecharts.org/category: network
   truecharts.org/SCALE-support: "true"

charts/enterprise/traefik/templates/_tlsstore.tpl

@@ -0,0 +1,26 @@
+{{/* Define the tlsOptions */}}
+{{- define "traefik.tlsstore" -}}
+{{- if .Values.defaultCertificate }}
+---
+apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: default
+spec:
+  certificates:
+    - secretName: clusterissuer-templated-{{ tpl .Values.defaultCertificate $ }}
+  defaultCertificate:
+    secretName: clusterissuer-templated-{{ tpl .Values.defaultCertificate $ }}
+{{- end }}
+
+{{- range $name, $config := .Values.tlsStore }}
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: {{ $name }}
+spec:
+  {{- toYaml $config | nindent 2 }}
+{{- end }}
+{{- end }}

charts/enterprise/traefik/templates/common.yaml

@@ -7,6 +7,7 @@
 {{- $_ := set $.Values.workload.main.podSpec.containers.main "args" $mergedargs -}}
 
 {{- include "traefik.portalhook" . }}
+{{- include "traefik.tlsstore" . }}
 {{- include "traefik.tlsOptions" . }}
 {{- include "traefik.ingressRoute" . }}
 {{- include "traefik.ingressClass" . }}

charts/enterprise/traefik/values.yaml

@@ -134,6 +134,13 @@ globalArguments:
 additionalArguments:
   - "--serverstransport.insecureskipverify=true"
   - "--providers.kubernetesingress.allowexternalnameservices=true"
+
+# -- Default clusterCertificate generated by clusterissuer
+defaultCertificate: ""
+
+# -- Add custom DNSStore objects
+tlsStore: {}
+
 # -- TLS Options to be created as TLSOption CRDs
 # https://doc.traefik.io/tccr.io/truecharts/https/tls/#tls-options
 # Example: