From 4292b862a30f7f78d7f0233668d5ec93a844ecbf Mon Sep 17 00:00:00 2001
From: Ricardo Rocha <rocha.porto@gmail.com>
Date: Thu, 14 Jun 2018 10:39:48 +0200
Subject: [PATCH] k8s_fedora: enable tls in traefik ingress

Add explicit entrypoints to the traefik controller configuration, with
the existing http but also adding a tls enable entrypoint on port 443.

Add corresponding ports to service and container definitions.

Story: 2002555
Task: 22117

Change-Id: I3413947276019b584db15a92f62a1a427ac26594
---
 .../templates/kubernetes/fragments/enable-ingress-traefik | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/magnum/drivers/common/templates/kubernetes/fragments/enable-ingress-traefik b/magnum/drivers/common/templates/kubernetes/fragments/enable-ingress-traefik
index 9d25d70136..49362b4b65 100644
--- a/magnum/drivers/common/templates/kubernetes/fragments/enable-ingress-traefik
+++ b/magnum/drivers/common/templates/kubernetes/fragments/enable-ingress-traefik
@@ -25,6 +25,9 @@ spec:
         - name: http
           containerPort: 80
           hostPort: 80
+        - name: https
+          containerPort: 443
+          hostPort: 443
         - name: admin
           containerPort: 8080
         securityContext:
@@ -33,6 +36,8 @@ spec:
         - --api
         - --logLevel=INFO
         - --kubernetes
+        - --entrypoints=Name:http Address::80
+        - --entrypoints=Name:https Address::443 TLS
       nodeSelector:
         role: ${INGRESS_CONTROLLER_ROLE}
 ---
@@ -48,6 +53,9 @@ spec:
     - name: http
       protocol: TCP
       port: 80
+    - name: https
+      protocol: TCP
+      port: 443
     - name: admin
       protocol: TCP
       port: 8080