Mercurial > code > home > repos > pomerium

annotate ingress-default.yaml @ 15:b0761c1022d9

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
ignore
author drewp@bigasterisk.com
date Sun, 09 Apr 2023 13:37:19 -0700
parents 90438c76732f
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
1 apiVersion: networking.k8s.io/v1
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
2 kind: Ingress
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
3 metadata:
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
4 name: default
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
5 annotations:
13
90438c76732f fix some clusterissuer types
drewp@bigasterisk.com
parents: 4
diff changeset
6 cert-manager.io/cluster-issuer: letsencrypt-prod
1
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
7 ingress.pomerium.io/allow_public_unauthenticated_access: "true"
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
8 ingress.pomerium.io/pass_identity_headers: "true"
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
9 ingress.pomerium.io/preserve_host_header: "true"
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
10 spec:
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
11 ingressClassName: pomerium
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
12 rules:
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
13 - host: "bigasterisk.com"
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
14 http:
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
15 paths:
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
16 - { pathType: Prefix, path: /, backend: { service: { name: nginx, port: { number: 11444 } } } }
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
17 tls:
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
18 - hosts: [bigasterisk.com]
9d3a9e524ad3 fuss with ns and stuff to get it working. forward all (over http) to nginx at first
drewp@bigasterisk.com
parents:
diff changeset
19 secretName: bigasterisk.com-tls