Merge branch 'main' of ssh://gt.hexor.cy:30022/ab/homelab

k8s/apps/pasarguard/deployment.yaml

@@ -29,14 +29,38 @@ spec:
             - secretRef:
                 name: pasarguard-secrets
           env:
-            - name: UVICORN_HOST 
+            - name: UVICORN_HOST
               value: "0.0.0.0"
-            - name: UVICORN_PORT 
+            - name: UVICORN_PORT
               value: "8000"
+            - name: UVICORN_SSL_CERTFILE
+              value: "/etc/ssl/certs/tls.crt"
+            - name: UVICORN_SSL_KEYFILE
+              value: "/etc/ssl/private/tls.key"
           ports:
             - name: http
               containerPort: 8000
               protocol: TCP
+          volumeMounts:
+            - name: tls-certs
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: tls-keys
+              mountPath: /etc/ssl/private
+              readOnly: true
+      volumes:
+        - name: tls-certs
+          secret:
+            secretName: pasarguard-tls
+            items:
+              - key: tls.crt
+                path: tls.crt
+        - name: tls-keys
+          secret:
+            secretName: pasarguard-tls
+            items:
+              - key: tls.key
+                path: tls.key
 ---
 apiVersion: v1
 kind: Service

k8s/apps/pasarguard/kustomization.yaml

@@ -6,5 +6,6 @@ resources:
   - ./external-secrets.yaml
   - ./deployment.yaml
   - ./daemonset.yaml
+  - ./certificate.yaml