From 27779370d8e91d9ccd1a67eff23b3de9c14a9011 Mon Sep 17 00:00:00 2001
From: Nicolas Boulard <36887674+NicolasBoulard@users.noreply.github.com>
Date: Fri, 21 Nov 2025 07:38:22 +0100
Subject: [PATCH] Add conditional TLS support for the Ingress in the Helm
 chart. #9345

---
 pkg/helm/README.md              | 1 +
 pkg/helm/templates/ingress.yaml | 6 ++++++
 pkg/helm/values.yaml            | 3 ++-
 3 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/pkg/helm/README.md b/pkg/helm/README.md
index e5bc5e6a3..4c7f3e074 100644
--- a/pkg/helm/README.md
+++ b/pkg/helm/README.md
@@ -39,3 +39,4 @@ The chart should dump its version and appVersion in the Chart.yaml file every re
 | `service.loadBalancerIP` | Load balancer IP (Only if service.type is LoadBalancer) | `""` |
 | `ingress.enabled` | Ingress resource creation | `false` |
 | `ingress.hostname` | Ingress resource hostname | `"pgadmin4.local"` |
+| `ingress.tlsSecret` | Ingress tls secret name | `""` |
diff --git a/pkg/helm/templates/ingress.yaml b/pkg/helm/templates/ingress.yaml
index b89df98b7..25216c107 100644
--- a/pkg/helm/templates/ingress.yaml
+++ b/pkg/helm/templates/ingress.yaml
@@ -21,4 +21,10 @@ spec:
               name: http
         path: /
         pathType: Prefix
+  {{- if .Values.ingress.tlsSecret }}
+  tls:
+  - hosts:
+    - {{ tpl .Values.ingress.hostname . }}
+    secretName: {{ .Values.ingress.tlsSecret }}
+  {{- end }}
 {{- end }}
\ No newline at end of file
diff --git a/pkg/helm/values.yaml b/pkg/helm/values.yaml
index 768663706..cf9aaf3c1 100644
--- a/pkg/helm/values.yaml
+++ b/pkg/helm/values.yaml
@@ -98,7 +98,8 @@ ingress:
   enabled: false
   hostname: pgadmin4.local
   annotations: {}
-
+  # If set, enables TLS configuration in the Ingress resource.
+  tlsSecret: ""
 startupProbe:
   enabled: false
   httpGet: