Caddy K8s TLS

caddy-cfg.yaml

kind: ConfigMap
apiVersion: v1
metadata:
  name: caddy-config
  namespace: openfaas
  labels:
    app: caddy
data:
  Caddyfile: |
    sub.mydomain.com {
        proxy / gateway:8080 {
                transparent
            }

        errors stderr
        tls valid@email.address
    }

caddy-dep.yaml

apiVersion: apps/v1beta2
kind: Deployment
metadata:
  name: caddy
  namespace: openfaas
spec:
  replicas: 1
  selector:
    matchLabels:
      app: caddy
  template:
    metadata:
      labels:
        app: caddy
    spec:
      containers:
      - name: caddy
        image: stefanprodan/caddy:0.10.10
        imagePullPolicy: Always
        command: ["caddy", "-agree", "--conf", "/Caddyfile"]
        ports:
        - containerPort: 80
          protocol: TCP
        - containerPort: 443
          protocol: TCP
        resources:
          limits:
            memory: 128Mi
        volumeMounts:
        - mountPath: /Caddyfile
          name: caddy-config
          subPath: Caddyfile
      volumes:
        - name: caddy-config
          configMap:
            name: caddy-config
            items:
              - key: Caddyfile
                path: Caddyfile
                mode: 0644

caddy-lb.yaml

apiVersion: v1
kind: Service
metadata:
  name: caddy-lb
  namespace: openfaas
  labels:
    app: caddy
spec:
  type: LoadBalancer
  ports:
    - name: http
      port: 80
      targetPort: 80
      protocol: TCP
    - name: https
      port: 443
      targetPort: 443
      protocol: TCP
  selector:
    app: caddy