annotate ingress.yaml @ 11:baf886e01ed1

vscode & pdm setup
author drewp@bigasterisk.com
date Fri, 25 Nov 2022 20:57:38 -0800
parents fd73907cef40
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
7
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
1 apiVersion: networking.k8s.io/v1
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
2 kind: Ingress
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
3 metadata:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
4 name: collector
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
5 annotations:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
6 cert-manager.io/issuer: letsencrypt-prod
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
7 ingress.pomerium.io/allow_public_unauthenticated_access: "false"
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
8 ingress.pomerium.io/pass_identity_headers: "true"
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
9 ingress.pomerium.io/preserve_host_header: "true"
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
10 ingress.pomerium.io/policy: |
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
11 allow:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
12 or:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
13 - { email: { is: "drewpca@gmail.com" }}
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
14 - { email: { is: "kelsimp@gmail.com" }}
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
15 # ingress.pomerium.io/prefix_rewrite: "/collector/"
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
16 ingress.pomerium.io/allow_websockets: "true"
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
17 spec:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
18 ingressClassName: pomerium
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
19 rules:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
20 - host: "bigasterisk.com"
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
21 http:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
22 paths:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
23 - pathType: Prefix
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
24 path: /collector/
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
25 backend: { service: { name: collector, port: { number: 80 } } }
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
26 tls:
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
27 - hosts: [bigasterisk.com]
fd73907cef40 project upgrades: pdm, pnpm, vite, nginx router
drewp@bigasterisk.com
parents:
diff changeset
28 secretName: bigasterisk.com-tls