annotate ingress.yaml @ 30:1fa90a903621

upgrade many deps
author drewp@bigasterisk.com
date Mon, 26 Aug 2024 22:33:02 -0700
parents 9e94454560de
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
9
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
1 apiVersion: networking.k8s.io/v1
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
2 kind: Ingress
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
3 metadata:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
4 name: video-ingest
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
5 annotations:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
6 cert-manager.io/cluster-issuer: letsencrypt-prod
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
7 ingress.pomerium.io/allow_public_unauthenticated_access: "false"
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
8 ingress.pomerium.io/pass_identity_headers: "true"
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
9 ingress.pomerium.io/preserve_host_header: "true"
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
10 ingress.pomerium.io/policy: |
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
11 allow:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
12 or:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
13 ingress.pomerium.io/allow_websockets: "true"
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
14 spec:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
15 ingressClassName: pomerium
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
16 rules:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
17 - host: "bigasterisk.com"
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
18 http:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
19 paths:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
20 - { pathType: Prefix, path: /video/ingest/, backend: { service: { name: video, port: { name: vite } } } }
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
21 - { pathType: Prefix, path: /video/api/ingest/, backend: { service: { name: video-files, port: { name: api } } } }
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
22 tls:
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
23 - hosts: [bigasterisk.com]
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
24 secretName: bigasterisk.com-tls
9e94454560de some vite cleanup and a test of the ingest/ page
drewp@bigasterisk.com
parents: 3
diff changeset
25 ---
3
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
26 apiVersion: networking.k8s.io/v1
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
27 kind: Ingress
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
28 metadata:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
29 name: video
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
30 annotations:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
31 cert-manager.io/cluster-issuer: letsencrypt-prod
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
32 ingress.pomerium.io/allow_public_unauthenticated_access: "false"
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
33 ingress.pomerium.io/pass_identity_headers: "true"
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
34 ingress.pomerium.io/preserve_host_header: "true"
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
35 ingress.pomerium.io/policy: |
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
36 allow:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
37 or:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
38 - { email: { is: "drewpca@gmail.com" }}
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
39 - { email: { is: "kelsimp@gmail.com" }}
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
40 ingress.pomerium.io/allow_websockets: "true"
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
41 spec:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
42 ingressClassName: pomerium
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
43 rules:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
44 - host: "bigasterisk.com"
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
45 http:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
46 paths:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
47 - { pathType: Prefix, path: /video/files/, backend: { service: { name: video-files, port: { name: files } } } }
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
48 - { pathType: Prefix, path: /video/api/, backend: { service: { name: video-files, port: { name: api } } } }
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
49 - { pathType: Prefix, path: /video/, backend: { service: { name: video, port: { name: vite } } } }
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
50 tls:
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
51 - hosts: [bigasterisk.com]
ee55ed10faec start py service deployment
drewp@bigasterisk.com
parents:
diff changeset
52 secretName: bigasterisk.com-tls