Add ingress

This commit is contained in:
Ruben Hensen
2025-03-01 16:37:09 +01:00
parent 68f053fca1
commit 20b9435ad2
2 changed files with 85 additions and 42 deletions
+42 -42
View File
@@ -1,43 +1,43 @@
apiVersion: networking.k8s.io/v1 # apiVersion: networking.k8s.io/v1
kind: Ingress # kind: Ingress
metadata: # metadata:
name: whisper-ingress # name: whisper-ingress
annotations: # annotations:
# nginx.ingress.kubernetes.io/rewrite-target: / # # nginx.ingress.kubernetes.io/rewrite-target: /
cert-manager.io/cluster-issuer: prod-cluster-issuer # cert-manager.io/cluster-issuer: prod-cluster-issuer
nginx.ingress.kubernetes.io/ssl-passthrough: "false" # nginx.ingress.kubernetes.io/ssl-passthrough: "false"
nginx.ingress.kubernetes.io/enable-cors: "true" # nginx.ingress.kubernetes.io/enable-cors: "true"
# type of authentication # # type of authentication
nginx.ingress.kubernetes.io/auth-type: basic # nginx.ingress.kubernetes.io/auth-type: basic
# name of the secret that contains the user/password definitions # # name of the secret that contains the user/password definitions
nginx.ingress.kubernetes.io/auth-secret: whisper-basic-auth # nginx.ingress.kubernetes.io/auth-secret: whisper-basic-auth
# message to display with an appropriate context why the authentication is required # # message to display with an appropriate context why the authentication is required
nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required ' # nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required '
nginx.ingress.kubernetes.io/proxy-body-size: "0" # nginx.ingress.kubernetes.io/proxy-body-size: "0"
# nginx.ingress.kubernetes.io/cors-allow-origin: "http://localhost:3000/" # # nginx.ingress.kubernetes.io/cors-allow-origin: "http://localhost:3000/"
# nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS, DELETE" # # nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS, DELETE"
# If you encounter a redirect loop or are getting a 307 response code # # If you encounter a redirect loop or are getting a 307 response code
# then you need to force the nginx ingress to connect to the backend using HTTPS. # # then you need to force the nginx ingress to connect to the backend using HTTPS.
# # #
# nginx.ingress.kubernetes.io/backend-protocol: "HTTP" # # nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
# namespace: ente-photos # # namespace: ente-photos
spec: # spec:
ingressClassName: nginx # ingressClassName: nginx
rules: # rules:
- host: alv.hensen.io # - host: alv.hensen.io
http: # http:
paths: # paths:
- path: / # - path: /
pathType: Prefix # pathType: Prefix
backend: # backend:
service: # service:
name: whishper # name: whishper
port: # port:
number: 8082 # number: 8082
# TLS configuration for HTTPS # # TLS configuration for HTTPS
tls: # tls:
# TLS secretName used on ClusterIssuer # # TLS secretName used on ClusterIssuer
- secretName: letsencrypt-prod # - secretName: letsencrypt-prod
hosts: # hosts:
- alv.hensen.io # - alv.hensen.io
+43
View File
@@ -0,0 +1,43 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: whisper-ingress
annotations:
# nginx.ingress.kubernetes.io/rewrite-target: /
cert-manager.io/cluster-issuer: prod-cluster-issuer
nginx.ingress.kubernetes.io/ssl-passthrough: "false"
nginx.ingress.kubernetes.io/enable-cors: "true"
# type of authentication
nginx.ingress.kubernetes.io/auth-type: basic
# name of the secret that contains the user/password definitions
nginx.ingress.kubernetes.io/auth-secret: whisper-basic-auth
# message to display with an appropriate context why the authentication is required
nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required '
nginx.ingress.kubernetes.io/proxy-body-size: "0"
# nginx.ingress.kubernetes.io/cors-allow-origin: "http://localhost:3000/"
# nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS, DELETE"
# If you encounter a redirect loop or are getting a 307 response code
# then you need to force the nginx ingress to connect to the backend using HTTPS.
#
# nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
# namespace: ente-photos
spec:
ingressClassName: nginx
rules:
- host: alv.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: app
port:
number: 7860
# TLS configuration for HTTPS
tls:
# TLS secretName used on ClusterIssuer
- secretName: letsencrypt-prod
hosts:
- alv.hensen.io