Merge pull request #5001 from khawaga/kubernetes_ingress_tls

Kubernetes Ingress TLS support

Reviewed-by: https://github.com/apps/softwarefactory-project-zuul

installer/inventory

@@ -26,11 +26,14 @@ dockerhub_base=ansible
 # pg_cpu_limit=1000
 # pg_mem_limit=2
 
-# Kubernetes Ingress Annotations
-# You can use the variables below to pass annotations to Kubernetes Ingress
-# The example below shows an annotation to be used with Traefik but other Ingress controllers are also supported.
-#kubernetes_ingress_hostname=awx.example.org
-#kubernetes_ingress_annotations={'kubernetes.io/ingress.class': 'traefik', 'traefik.ingress.kubernetes.io/redirect-entry-point': 'https'}
+# Kubernetes Ingress Configuration
+# You can use the variables below to configure Kubernetes Ingress
+# Set hostname
+# kubernetes_ingress_hostname=awx.example.org
+# Add annotations. The example below shows an annotation to be used with Traefik but other Ingress controllers are also supported
+# kubernetes_ingress_annotations={'kubernetes.io/ingress.class': 'traefik', 'traefik.ingress.kubernetes.io/redirect-entry-point': 'https'}
+# Specify a secret for TLS termination
+# kubernetes_ingress_tls_secret=awx-cert
 
 # Kubernetes and Openshift Install Resource Requests
 # These are the request and limit values for a pod's container for task/web/rabbitmq/memcached/management.

installer/roles/kubernetes/templates/deployment.yml.j2

@@ -526,6 +526,12 @@ metadata:
 {% endfor %}
 
 spec:
+{% if kubernetes_ingress_tls_secret is defined %}
+  tls:
+  - hosts:
+    - {{ kubernetes_ingress_hostname }}
+    secretName: {{ kubernetes_ingress_tls_secret }}
+{% endif %}
   rules:
   - host: {{ kubernetes_ingress_hostname }}
     http: