Skip to content

长亭雷池WAF开源LTS长期支持版自制HelmChart

Notifications You must be signed in to change notification settings

yaencn/safeline-lts-helmchart

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

SafeLine - TLS versions - HelmChart - Unofficial production

SafeLine Website   |   TLS Repository   |   Preview Repository   |   中文文档

----- Readme -----

Reminder:

This branch is the LTS (Long Term Support) stable version branch, and only contains LTS versions. To use the preview version, please visit the following GIT repository: https://github.com/yaencn/safeline-helmchart

Acceleration address of GIT warehouse in Chinese Mainland:

----- HelmChart Install -----

# add repo
helm repo add safeline-lts https://g-otkk6267-helm.pkg.coding.net/Charts/safeline-lts
# install sample
helm install safeline-lts --namespace safeline --set global.ingress.enabled=true --set global.ingress.hostname="waf.local"  safeline-lts/safeline-lts
# upgrade
helm -n safeline upgrade safeline-lts safeline-lts/safeline-lts
# fetch chart
helm fetch --version 7.1.1 safeline-lts/safeline-lts
# uninstall
helm -n safeline uninstall safeline-lts

----- Helm Build -----

# 检测helmchart-template是否有语法问题
cd safeline
helm template charts/ --output-dir ./result 
helm package ./safeline/charts/ -d ./assets/safeline

helm repo index --merge ./index.yaml --url assets assets/

rm -f ./index.yaml

mv ./assets/index.yaml ./index.yaml

cd ./assets/safeline/

helm coding-push safeline-lts-${app-version}.tgz safeline-lts

----- Installation Remind -----

Warning:

Any deployment resource in this HelmChart can only deploy one pod replica! If multiple pod replicas are run, the entire WAF service will encounter unknown errors.

----- Configuration Description -----

Add WAF console web interface to bind domain names through nginx-ingress. Specifically participate in the values.yaml file.

  # Set up the SafeLine WAF console to be accessed through a domain name.
  # For example: demowaf-ce.chaitin.cn
  global:
    ingress:
      # Whether to enable SafeLine WAF control for domain access.
      # It is not enabled by default
      enabled: true
      hostname: waf.local
      ingressClassName: nginx
      pathType: ImplementationSpecific
      path: /
      tls:
        # Whether to load the Secret of the HTTPS domain name certificate outside HelmChart. 
        #If yes, please fill in the Secret name. By default, it is not filled in and the domain name only enables http access.
        # If you fill in the following items, please create the corresponding Secret before running the HelmChart.
        secretName: "waf-xxx-com-tls"

Releases

No releases published

Packages

No packages published

Languages