[stable/sonatype-nexus] Reorder host names in ingress (helm#11513)

Make `nexusHttpHost` the first in the list of TLS hosts. This is to ensure that the common name (as displayed in the browser) in the generated Let's Encrypt TLS certificate is the `nexusHttpHost`, while `nexusDockerHost` is added to subject alternative names. Signed-off-by: Sergei Ivanov <[email protected]>
agolo · Feb 20, 2019 · 5823251 · 5823251
1 parent fd2055e
commit 5823251
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/stable/sonatype-nexus/Chart.yaml b/stable/sonatype-nexus/Chart.yaml
@@ -1,5 +1,5 @@
 name: sonatype-nexus
-version: 1.16.1
+version: 1.16.2
 appVersion: 3.15.2-01
 description: Sonatype Nexus is an open source repository manager
 keywords:

diff --git a/stable/sonatype-nexus/templates/ingress.yaml b/stable/sonatype-nexus/templates/ingress.yaml
@@ -11,14 +11,14 @@ metadata:
     {{- end }}
 spec:
   rules:
-    - host: {{ .Values.nexusProxy.env.nexusDockerHost }}
+    - host: {{ .Values.nexusProxy.env.nexusHttpHost }}
       http:
         paths:
           - backend:
               serviceName: {{ template "nexus.fullname" . }}
               servicePort: {{ .Values.nexusProxy.port }}
             path: {{ .Values.ingress.path }}
-    - host: {{ .Values.nexusProxy.env.nexusHttpHost }}
+    - host: {{ .Values.nexusProxy.env.nexusDockerHost }}
       http:
         paths:
           - backend:
@@ -28,8 +28,8 @@ spec:
 {{- if .Values.ingress.tls.enabled }}
   tls:
     - hosts:
-        - {{ .Values.nexusProxy.env.nexusDockerHost }}
         - {{ .Values.nexusProxy.env.nexusHttpHost }}
+        - {{ .Values.nexusProxy.env.nexusDockerHost }}
       {{- if .Values.ingress.tls.secretName }}
       secretName: {{ .Values.ingress.tls.secretName | quote }}
       {{- end }}