GHP publish

roles/opendkim/defaults/main.yaml

@@ -0,0 +1,45 @@
+opendkim_default_values:
+  replicaCount: 1
+  persistence:
+    enabled: false
+    existingClaim: mailboxes
+  opendkim:
+    image:
+      repository: "{{ docker_registry }}/opendkim"
+      tag: latest
+      pullPolicy: Always
+    configmaps:
+      opendkim: |
+        PidFile	/var/run/opendkim/opendkim.pid
+        Mode sv
+        Syslog yes
+        SyslogSuccess yes
+        LogWhy yes
+        UserID opendkim:opendkim
+        Socket inet:8891
+        Umask 002
+        SendReports yes
+        SoftwareHeader yes
+        Canonicalization relaxed/relaxed
+        Domain {{ domain }}
+        Selector default
+        MinimumKeyBits 1024
+        KeyTable refile:/etc/opendkim/KeyTable
+        SigningTable refile:/etc/opendkim/SigningTable
+        ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
+        InternalHosts	refile:/etc/opendkim/TrustedHosts
+        OversignHeaders	From
+      keytable: |
+        default._domainkey.{{ domain }} {{ domain }}:default:/etc/opendkim/keys/default.private
+      signingtable: |
+        *@{{ domain }} default._domainkey.{{ domain }}
+      trustedhosts: |
+        127.0.0.1
+        ::1
+        *.{{ domain }}
+      default-private: |
+        {{ dkim_private_key_base64 | b64decode }}
+      default-public: |
+        {{ dkim_public_key_base64 | b64decode }}
+  service:
+    type: ClusterIP

roles/opendkim/tasks/main.yaml

@@ -0,0 +1,13 @@
+- set_fact:
+    opendkim_combined_values: "{{ opendkim_default_values | combine(opendkim_values, recursive=true) }}"
+
+- name: Deploy OpenDKIM
+  community.kubernetes.helm:
+    create_namespace: true
+    release_namespace: "{{ opendkim_namespace | default(mail_namespace) | default(namespace) }}"
+    release_name: "{{ opendkim_name | default('opendkim') }}"
+    chart_ref: "{{ opendkim_chart | default('ghp/opendkim') }}"
+    chart_version: "{{ opendkim_version | default(omit) }}"
+    release_values: "{{ opendkim_combined_values | from_yaml }}"
+    wait: true
+