|
2415
|
1 apiVersion: v1
|
|
|
2 kind: Service
|
|
|
3 metadata:
|
|
|
4 name: light9
|
|
|
5 spec:
|
|
|
6 ports:
|
|
|
7 - protocol: TCP
|
|
|
8 port: 8200
|
|
|
9 targetPort: 8200
|
|
|
10 type: ExternalName
|
|
|
11 externalName: dash5
|
|
|
12 ---
|
|
|
13 apiVersion: networking.k8s.io/v1
|
|
|
14 kind: Ingress
|
|
|
15 metadata:
|
|
|
16 name: light9
|
|
|
17 annotations:
|
|
|
18 cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
|
19 ingress.pomerium.io/pass_identity_headers: "true"
|
|
|
20 ingress.pomerium.io/preserve_host_header: "true"
|
|
|
21 ingress.pomerium.io/allow_websockets: "true"
|
|
|
22 ingress.pomerium.io/allow_public_unauthenticated_access: "false"
|
|
|
23 ingress.pomerium.io/policy: |
|
|
|
24 allow:
|
|
|
25 or:
|
|
|
26 - { email: { is: "drewpca@gmail.com" }}
|
|
|
27 - { email: { is: "kelsimp@gmail.com" }}
|
|
|
28 - { email: { is: "david.mcclosky@gmail.com" }}
|
|
|
29 spec:
|
|
|
30 ingressClassName: pomerium
|
|
|
31 rules:
|
|
|
32 - host: "light9.bigasterisk.com"
|
|
|
33 http:
|
|
|
34 paths:
|
|
|
35 - { pathType: Prefix, path: "/", backend: { service: { name: light9, port: { number: 8200 } } } }
|
|
|
36 tls:
|
|
|
37 - hosts: [light9.bigasterisk.com]
|
|
|
38 secretName: light9.bigasterisk.com-tls
|
