creating ssl secrets

kubernetes/ansible/bootstrap_minimal.yaml

@@ -17,3 +17,18 @@
     - name: Creating docker secrets
       shell: kubectl create secret docker-registry {{ imagepullsecrets }} --namespace {{ namespace }} --docker-server {{ vault_docker_registry_url }} --docker-username {{ vault_docker_registry_user }} --docker-password {{ vault_docker_registry_password }}
       when: imagepullsecrets|length > 0
+    - name: Creating domain sssl
+      shell: 
+        cmd: |
+          cat <<EOF | kubectl apply -f -
+          apiVersion: v1
+          kind: Secret
+          metadata:
+            name: ingress-cert
+            namespace: istio-system
+          type: kubernetes.io/tls
+          data:
+            ca.crt: ""
+            site.crt: "{{ core_vault_proxy_site_crt | b64encode }}"
+            site.key: "{{ core_vault_proxy_site_key | b64encode }}"
+          EOF

kubernetes/helm_charts/core/nginx-public-ingress/templates/deployment.yaml

@@ -18,6 +18,10 @@ spec:
       - name: {{ .Values.imagepullsecrets }}
       {{- end }}
       {{- if .Values.sunbird_portal_player_cdn_enabled }}
+      volumes:
+        - name: tls
+          secret:
+            secretName: ingress-cert
       containers:
       - name: name
         image: "{{ .Values.dockerhub }}/{{ .Values.repository }}:{{ .Values.image_tag }}"
@@ -25,6 +29,10 @@ spec:
           requests:
             cpu: 100m
             memory: 200Mi
+        volumeMounts:
+          - name: tls
+            mountPath: /run/secrets
+            readOnly: true
         ports:
         - containerPort: 80
           name: http