mirror of
https://github.com/dhall-lang/dhall-kubernetes.git
synced 2024-09-17 10:27:08 +03:00
058e24fb5f
Currently CI does not enforce that they stay in sync with the `1.17/` package, so I had to explicitly run the `generate.sh` script to update them. I will follow up with another change to automate this check.
80 lines
2.2 KiB
Plaintext
80 lines
2.2 KiB
Plaintext
let Prelude =
|
|
../Prelude.dhall sha256:10db3c919c25e9046833df897a8ffe2701dc390fa0893d958c3430524be5a43e
|
|
|
|
let map = Prelude.List.map
|
|
|
|
let kubernetes =
|
|
../package.dhall sha256:532e110f424ea8a9f960a13b2ca54779ddcac5d5aa531f86d82f41f8f18d7ef1
|
|
|
|
let Service = { name : Text, host : Text, version : Text }
|
|
|
|
let services = [ { name = "foo", host = "foo.example.com", version = "2.3" } ]
|
|
|
|
let makeTLS
|
|
: Service → kubernetes.IngressTLS.Type
|
|
= λ(service : Service) →
|
|
{ hosts = Some [ service.host ]
|
|
, secretName = Some "${service.name}-certificate"
|
|
}
|
|
|
|
let makeRule
|
|
: Service → kubernetes.IngressRule.Type
|
|
= λ(service : Service) →
|
|
{ host = Some service.host
|
|
, http = Some
|
|
{ paths =
|
|
[ { backend =
|
|
{ serviceName = service.name
|
|
, servicePort = kubernetes.IntOrString.Int +80
|
|
}
|
|
, path = None Text
|
|
}
|
|
]
|
|
}
|
|
}
|
|
|
|
let mkIngress
|
|
: List Service → kubernetes.Ingress.Type
|
|
= λ(inputServices : List Service) →
|
|
let annotations =
|
|
toMap
|
|
{ `kubernetes.io/ingress.class` = "nginx"
|
|
, `kubernetes.io/ingress.allow-http` = "false"
|
|
}
|
|
|
|
let defaultService =
|
|
{ name = "default"
|
|
, host = "default.example.com"
|
|
, version = " 1.0"
|
|
}
|
|
|
|
let ingressServices = inputServices # [ defaultService ]
|
|
|
|
let spec =
|
|
kubernetes.IngressSpec::{
|
|
, tls = Some
|
|
( map
|
|
Service
|
|
kubernetes.IngressTLS.Type
|
|
makeTLS
|
|
ingressServices
|
|
)
|
|
, rules = Some
|
|
( map
|
|
Service
|
|
kubernetes.IngressRule.Type
|
|
makeRule
|
|
ingressServices
|
|
)
|
|
}
|
|
|
|
in kubernetes.Ingress::{
|
|
, metadata = kubernetes.ObjectMeta::{
|
|
, name = Some "nginx"
|
|
, annotations = Some annotations
|
|
}
|
|
, spec = Some spec
|
|
}
|
|
|
|
in mkIngress services
|