annotate ingress.yaml @ 0:12238bbe5b85 default tip

start
author drewp@bigasterisk.com
date Sun, 18 Sep 2022 23:24:56 -0700
parents
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
0
drewp@bigasterisk.com
parents:
diff changeset
1 apiVersion: networking.k8s.io/v1
drewp@bigasterisk.com
parents:
diff changeset
2 kind: Ingress
drewp@bigasterisk.com
parents:
diff changeset
3 metadata:
drewp@bigasterisk.com
parents:
diff changeset
4 name: projects
drewp@bigasterisk.com
parents:
diff changeset
5 annotations:
drewp@bigasterisk.com
parents:
diff changeset
6 cert-manager.io/issuer: letsencrypt-prod
drewp@bigasterisk.com
parents:
diff changeset
7 ingress.pomerium.io/allow_public_unauthenticated_access: "true"
drewp@bigasterisk.com
parents:
diff changeset
8 ingress.pomerium.io/pass_identity_headers: "true"
drewp@bigasterisk.com
parents:
diff changeset
9 ingress.pomerium.io/preserve_host_header: "true"
drewp@bigasterisk.com
parents:
diff changeset
10 spec:
drewp@bigasterisk.com
parents:
diff changeset
11 ingressClassName: pomerium
drewp@bigasterisk.com
parents:
diff changeset
12 rules:
drewp@bigasterisk.com
parents:
diff changeset
13 - host: "projects.bigasterisk.com"
drewp@bigasterisk.com
parents:
diff changeset
14 http:
drewp@bigasterisk.com
parents:
diff changeset
15 paths:
drewp@bigasterisk.com
parents:
diff changeset
16 - pathType: Prefix
drewp@bigasterisk.com
parents:
diff changeset
17 path: /
drewp@bigasterisk.com
parents:
diff changeset
18 backend: { service: { name: projects, port: { number: 80 } } }
drewp@bigasterisk.com
parents:
diff changeset
19 tls:
drewp@bigasterisk.com
parents:
diff changeset
20 - hosts: [projects.bigasterisk.com]
drewp@bigasterisk.com
parents:
diff changeset
21 secretName: projects.bigasterisk.com-tls