viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add vpn cli checks

Browse source
This commit is contained in:
viktorbarzin 2021-03-24 21:24:27 +00:00
parent aa7e3b6cb6
commit f52f85bf83
3 changed files with 21 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/kubernetes/kafka/main.tf
View file

@ -1,4 +1,5 @@
variable "tls_secret_name" {}
variable "client_certificate_secret_name" {}
module "tls_secret" {
source = "../setup_tls_secret"
@ -109,7 +110,10 @@ resource "kubernetes_ingress" "kafka-ui" {
name = "kafka-ui-ingress"
namespace = "kafka"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
"kubernetes.io/ingress.class" = "nginx"
"nginx.ingress.kubernetes.io/force-ssl-redirect" = "true"
"nginx.ingress.kubernetes.io/auth-tls-verify-client" = "on"
"nginx.ingress.kubernetes.io/auth-tls-secret" = var.client_certificate_secret_name
}
}

5
modules/kubernetes/main.tf
View file

@ -84,8 +84,9 @@ module "hackmd" {
# }
module "kafka" {
source = "./kafka"
tls_secret_name = var.tls_secret_name
source = "./kafka"
client_certificate_secret_name = var.client_certificate_secret_name
tls_secret_name = var.tls_secret_name
}
module "kms" {