annotate service/powerEagle/ingress.yaml @ 1721:e30741ab51a7

add ingress
author drewp@bigasterisk.com
date Fri, 16 Jun 2023 17:23:54 -0700
parents
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1721
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
1 apiVersion: networking.k8s.io/v1
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
2 kind: Ingress
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
3 metadata:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
4 name: powereagle
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
5 annotations:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
6 cert-manager.io/cluster-issuer: letsencrypt-prod
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
7 ingress.pomerium.io/allow_public_unauthenticated_access: "false"
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
8 ingress.pomerium.io/pass_identity_headers: "true"
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
9 ingress.pomerium.io/preserve_host_header: "true"
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
10 ingress.pomerium.io/policy: |
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
11 allow:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
12 or:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
13 - { email: { is: "drewpca@gmail.com" }}
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
14 - { email: { is: "kelsimp@gmail.com" }}
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
15 ingress.pomerium.io/prefix_rewrite: "/"
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
16 ingress.pomerium.io/allow_websockets: "true"
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
17 spec:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
18 ingressClassName: pomerium
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
19 rules:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
20 - host: "bigasterisk.com"
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
21 http:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
22 paths:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
23 - pathType: Prefix
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
24 path: /powerEagle/
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
25 backend: { service: { name: power-eagle, port: { number: 80 } } }
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
26 tls:
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
27 - hosts: [bigasterisk.com]
e30741ab51a7 add ingress
drewp@bigasterisk.com
parents:
diff changeset
28 secretName: bigasterisk.com-tls