[stable/kong] allow ot override TLS target port (#17182)

* [stable/kong] allow ot override TLS target port

This will allow to use AWS ELB with both 80 and 443 and with TLS
termination on the ELB.

fixes Kong/kubernetes-ingress-controller#292

Signed-off-by: Kevin Lefevre <lefevre.kevin@gmail.com>

* fix new line

Signed-off-by: Kevin Lefevre <lefevre.kevin@gmail.com>

* fix lint

Signed-off-by: Kevin Lefevre <lefevre.kevin@gmail.com>
This commit is contained in:
Kevin Lefevre
2019-10-01 09:13:34 -07:00
committed by Kubernetes Prow Robot
parent a5a91f71aa
commit 9dfc32a8d7
4 changed files with 6 additions and 2 deletions
+1 -1
View File
@@ -12,5 +12,5 @@ maintainers:
name: kong
sources:
- https://github.com/Kong/kong
version: 0.18.5
version: 0.19.0
appVersion: 1.3
+1
View File
@@ -88,6 +88,7 @@ and their default values.
| proxy.tls.servicePort | Service port to use for TLS | 8443 |
| proxy.tls.nodePort | Node port to use for TLS | 32443 |
| proxy.tls.hostPort | Host port to use for TLS | |
| proxy.tls.overrideServiceTargetPort| Override service port to use for TLS without touching Kong containerPort | |
| proxy.type | k8s service type. Options: NodePort, ClusterIP, LoadBalancer | `NodePort` |
| proxy.loadBalancerSourceRanges | Limit proxy access to CIDRs if set and service type is `LoadBalancer` | `[]` |
| proxy.loadBalancerIP | To reuse an existing ingress static IP for the admin service | |
@@ -41,7 +41,7 @@ spec:
{{- if or .Values.proxy.tls.enabled }}
- name: kong-proxy-tls
port: {{ .Values.proxy.tls.servicePort }}
targetPort: {{ .Values.proxy.tls.containerPort }}
targetPort: {{ .Values.proxy.tls.overrideServiceTargetPort | default .Values.proxy.tls.containerPort }}
{{- if (and (eq .Values.proxy.type "NodePort") (not (empty .Values.proxy.tls.nodePort))) }}
nodePort: {{ .Values.proxy.tls.nodePort }}
{{- end }}
+3
View File
@@ -65,6 +65,9 @@ proxy:
enabled: true
servicePort: 443
containerPort: 8443
# Set a target port for the TLS port in proxy service, useful when using TLS
# termination on an ELB.
# overrideServiceTargetPort: 8000
# Set a nodePort which is available if service type is NodePort
# nodePort: 32443