diff --git a/charts/mok/Chart.yaml b/charts/mok/Chart.yaml index 6ac5765c8f0176239b558d2ec35ca0ddface46bc..d419a673b789fb6f78c5d7184d076ee99db74edb 100644 --- a/charts/mok/Chart.yaml +++ b/charts/mok/Chart.yaml @@ -3,7 +3,7 @@ name: mok description: | Mail on Kubernetes (MoK) is a project to deploy a functional mailserver that runs without a database server on Kubernetes, taking advantage of configmaps and secret. type: application -version: 0.6.3 +version: 0.7.0 sources: - https://de.postfix.org/ftpmirror/index.html - https://github.com/dovecot/core diff --git a/charts/mok/README.md b/charts/mok/README.md index 1d8f20db0712e1428dfa5b7c789424b52f89b288..5995695cde2471ebf25297aafb96d5281c519b1e 100644 --- a/charts/mok/README.md +++ b/charts/mok/README.md @@ -1,6 +1,6 @@ # mok -  +  Mail on Kubernetes (MoK) is a project to deploy a functional mailserver that runs without a database server on Kubernetes, taking advantage of configmaps and secret. @@ -79,6 +79,7 @@ Mail on Kubernetes (MoK) is a project to deploy a functional mailserver that run | postfix.securityContext.capabilities.add[6] | string | `"DAC_OVERRIDE"` | required to setup TLS and alike | | postfix.securityContext.capabilities.drop[0] | string | `"ALL"` | getting rid of all capabilities since we already have too many | | postfix.securityContext.runAsNonRoot | bool | `false` | | +| postfix.service.public.externalTrafficPolicy | string | `"Local"` | | | postfix.service.public.type | string | `"LoadBalancer"` | type of the public endpoint for smtp, submission, and submissions. **Note**: It's configured to share the IP with dovecot in case of metallb | | postfix.tls.secretName | string | `"nil"` | secret holding the TLS keys for postfix. **Required** | | postfix.tolerations | list | `[]` | | diff --git a/charts/mok/templates/postfix.yaml b/charts/mok/templates/postfix.yaml index ab3b7ae5b70d1910f9304e8ee62a7f4e182af847..00326b5fd7604a745aae9403f816fa281696f31b 100644 --- a/charts/mok/templates/postfix.yaml +++ b/charts/mok/templates/postfix.yaml @@ -27,6 +27,7 @@ spec: {{- include "mok.selectorLabels" . | nindent 4 }} app.kubernetes.io/component: postfix type: {{ .Values.postfix.service.public.type }} + externalTrafficPolicy: {{ .Values.postfix.service.externalTrafficPolicy }} --- apiVersion: apps/v1 kind: StatefulSet diff --git a/charts/mok/tests/__snapshot__/postfix_test.yaml.snap b/charts/mok/tests/__snapshot__/postfix_test.yaml.snap index 0a3b5cdefcce0a24c52d811d95cd323af7d947c6..07b48084be829b5e868ad0297b35aa95fc3ec697 100644 --- a/charts/mok/tests/__snapshot__/postfix_test.yaml.snap +++ b/charts/mok/tests/__snapshot__/postfix_test.yaml.snap @@ -13,6 +13,7 @@ should match snapshot: helm.sh/chart: mok-1.2.3 name: RELEASE-NAME-mok-postfix spec: + externalTrafficPolicy: null ports: - name: smtp port: 25 diff --git a/charts/mok/values.yaml b/charts/mok/values.yaml index 613a2b342d3f163cf10a7a21b22c89ab9ac7948f..4e19505b2904df98e7e4211ba2c684618f635bcf 100644 --- a/charts/mok/values.yaml +++ b/charts/mok/values.yaml @@ -91,6 +91,7 @@ postfix: public: # -- type of the public endpoint for smtp, submission, and submissions. **Note**: It's configured to share the IP with dovecot in case of metallb type: LoadBalancer + externalTrafficPolicy: Local tls: # -- secret holding the TLS keys for postfix. **Required**