"site_url": lambda value, _: isinstance(value, str)
if value is not None
else True,
+ "cluster_issuer": lambda value, _: isinstance(value, str)
+ if value is not None
+ else True,
"ingress_whitelist_source_range": lambda value, _: _validate_ip_network(value),
"tls_secret_name": lambda value, _: isinstance(value, str)
if value is not None
return
ingress_whitelist_source_range = config["ingress_whitelist_source_range"]
+ cluster_issuer = config["cluster_issuer"]
annotations = {}
"nginx.ingress.kubernetes.io/whitelist-source-range"
] = ingress_whitelist_source_range
+ if cluster_issuer:
+ annotations["cert-manager.io/cluster-issuer"] = cluster_issuer
+
ingress_spec_tls = None
if parsed.scheme == "https":