|
6
|
1 apiVersion: networking.k8s.io/v1
|
|
|
2 kind: Ingress
|
|
|
3 metadata:
|
|
|
4 name: racc-console
|
|
|
5 annotations:
|
|
|
6 cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
|
7 ingress.pomerium.io/allow_public_unauthenticated_access: "false"
|
|
|
8 ingress.pomerium.io/pass_identity_headers: "true"
|
|
|
9 ingress.pomerium.io/preserve_host_header: "true"
|
|
|
10 ingress.pomerium.io/policy: |
|
|
|
11 allow:
|
|
|
12 or:
|
|
|
13 - { email: { is: "drewpca@gmail.com" }}
|
|
|
14 - { email: { is: "kelsimp@gmail.com" }}
|
|
|
15 ingress.pomerium.io/allow_websockets: "true"
|
|
|
16 spec:
|
|
|
17 ingressClassName: pomerium
|
|
|
18 rules:
|
|
|
19 - host: "bigasterisk.com"
|
|
|
20 http:
|
|
|
21 paths:
|
|
|
22 - {pathType: Prefix, path: /racc/console/api/, backend: { service: { name: racc-console, port: { name: py } } }}
|
|
|
23 - {pathType: Prefix, path: /racc/console/metrics, backend: { service: { name: racc-console, port: { name: py } } }}
|
|
|
24 - {pathType: Prefix, path: /racc/console/, backend: { service: { name: racc-console, port: { name: vite } } }}
|
|
|
25 tls:
|
|
|
26 - hosts: [bigasterisk.com]
|
|
|
27 secretName: bigasterisk.com-tls
|
