add frontedn with tls

Author: kofemann

templates/configmap.yaml

@@ -28,9 +28,18 @@ data:
 
   {{ if .Values.services.frontend.enabled }}
     [door-svc/frontend]
+    frontend.cell.name = Frontend
     frontend.authn.protocol=http
     frontend.net.port=3880
-    frontend.authz.anonymous-operations=FULL
+    frontend.authz.anonymous-operations=READONLY
+  {{- end }}
+
+  {{ if .Values.services.frontends.enabled }}
+    [door-svc/frontend]
+    frontend.cell.name = Frontend-S
+    frontend.authn.protocol=https
+    frontend.net.port=3881
+    frontend.authz.anonymous-operations=READONLY
   {{- end }}
 
   {{ if .Values.services.nfs.enabled }}

templates/door-svc.yaml

@@ -77,6 +77,12 @@ spec:
       targetPort: 3880
     {{- end }}
 
+    {{ if .Values.services.frontends.enabled }}
+    - name: frontend-s-door
+      port: {{ $.Values.services.frontends.port }}
+      targetPort: 3881
+    {{- end }}
+
     - name: cell-tunnel
       port: {{ $.Values.cell.tunnel }}
       targetPort: 11111

values.yaml

@@ -105,6 +105,9 @@ services:
     enabled: true
     port: 3880
 
+  frontends:
+    enabled: true
+    port: 3881
 
 mover:
   nfs: 32049