From c0259368df8a949ee61c30f8c36a4207613307db Mon Sep 17 00:00:00 2001
From: Travis Groth <travisgroth@users.noreply.github.com>
Date: Sat, 28 Sep 2019 14:55:38 -0400
Subject: [PATCH] [stable/pomerium] Fix regression with NodePort type services
 (#17510)

Signed-off-by: Travis Groth <tgroth@gmail.com>
---
 stable/pomerium/Chart.yaml             | 2 +-
 stable/pomerium/templates/ingress.yaml | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/stable/pomerium/Chart.yaml b/stable/pomerium/Chart.yaml
index 8037c2bdf5..e38e3d9db1 100644
--- a/stable/pomerium/Chart.yaml
+++ b/stable/pomerium/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: pomerium
-version: 2.0.2
+version: 2.0.3
 appVersion: 0.3.1
 home: http://www.pomerium.io/
 icon: https://www.pomerium.io/logo.svg
diff --git a/stable/pomerium/templates/ingress.yaml b/stable/pomerium/templates/ingress.yaml
index 8c14134b1f..385a395254 100644
--- a/stable/pomerium/templates/ingress.yaml
+++ b/stable/pomerium/templates/ingress.yaml
@@ -27,6 +27,7 @@ spec:
             backend:
               serviceName: {{ template "pomerium.proxy.fullname" . }}
               servicePort: https
+{{- if not .Values.service.authorize.headless }}
     - host:  {{ printf "authorize.%s" .Values.config.rootDomain }}
       http:
         paths:
@@ -34,6 +35,7 @@ spec:
             backend:
               serviceName: {{ template "pomerium.authorize.fullname" . }}
               servicePort: https
+{{- end }}
     - host: {{ printf "authenticate.%s" .Values.config.rootDomain }}
       http:
         paths: