add frontedn with tls

dCache · Aug 28, 2024 · 87f5225 · 87f5225
1 parent f245edb
commit 87f5225
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 1 deletion.
diff --git a/templates/configmap.yaml b/templates/configmap.yaml
@@ -28,9 +28,18 @@ data:
 
   {{ if .Values.services.frontend.enabled }}
     [door-svc/frontend]
+    frontend.cell.name = Frontend
     frontend.authn.protocol=http
     frontend.net.port=3880
-    frontend.authz.anonymous-operations=FULL
+    frontend.authz.anonymous-operations=READONLY
+  {{- end }}
+
+  {{ if .Values.services.frontends.enabled }}
+    [door-svc/frontend]
+    frontend.cell.name = Frontend-S
+    frontend.authn.protocol=https
+    frontend.net.port=3881
+    frontend.authz.anonymous-operations=READONLY
   {{- end }}
 
   {{ if .Values.services.nfs.enabled }}

diff --git a/templates/door-svc.yaml b/templates/door-svc.yaml
@@ -77,6 +77,12 @@ spec:
       targetPort: 3880
     {{- end }}
 
+    {{ if .Values.services.frontends.enabled }}
+    - name: frontend-s-door
+      port: {{ $.Values.services.frontends.port }}
+      targetPort: 3881
+    {{- end }}
+
     - name: cell-tunnel
       port: {{ $.Values.cell.tunnel }}
       targetPort: 11111

diff --git a/values.yaml b/values.yaml
@@ -105,6 +105,9 @@ services:
     enabled: true
     port: 3880
 
+  frontends:
+    enabled: true
+    port: 3881
 
 mover:
   nfs: 32049