Mattermost install-kubernetes TLS Ingress Controller

[macevil]

Mattermost install-kubernetes TLS Ingress Controller

[cpanato]

Thanks @macevil checking the code, the TLS is really missing, we can add that.
Are you willing to open a PR to add this missing item? otherwise, I can make it happen.
thanks

[macevil]

@cpanato so we try it :)

[cpanato]

cool @macevil any questions let me know

[DustinAlandzes]

I also got the operator running, with nginx-ingress but want to use HTTPS/SSL/TLS. Do I need to make an Ingress like @macevil has in the first post?

Have been trying to follow this to install cert-manager and use lets encrypt: https://cert-manager.io/docs/tutorials/acme/ingress/

Got it working with the example application, but I still see the Acme Co fake certificate when trying it with mattermost-operator. Maybe I'll try the helm chart instead.

My mattermost-installation.yaml looks like this:

apiVersion: mattermost.com/v1alpha1
kind: ClusterInstallation
metadata:
  name: mm-example-full
spec:
  size: 100users
  ingressName: example.20xx.tech
  ingressAnnotations:
    kubernetes.io/ingress.class: nginx
    cert-manager.io/issuer: "letsencrypt-staging"
  version: 5.14.0
  mattermostLicenseSecret: ""
  database:
    storageSize: 10Gi
  minio:
    storageSize: 10Gi
  elasticSearch:
    host: ""
    username: ""
    password: ""

[macevil]

Hey @DustinAlandzes,
your mattermost-installation.yaml is correct, but during Mattermost Operator Installation the Ingress tls spec is not generated yet.

You can take a look in your deployt Mattermost Ingress, this section will be missing and that's the reason why you still getting the Fake Cert.

  tls:
  - hosts:
    - chat.domain.dev
    secretName: chat-domain-dev-tls-cert

We fixed this with #97

[DustinAlandzes]

I see your fork/pr!

#113

https://github.com/macevil/mattermost-operator/commit/869a3eb202e336c980f8ea7e865a1294822030dd

I will try this when I get the chance! tyty