You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
53 lines
2.1 KiB
YAML
53 lines
2.1 KiB
YAML
---
|
|
|
|
k8s_ingress_helm__release_namespace: "ingress"
|
|
|
|
k8s_ingress_helm__release_values:
|
|
controller:
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/name
|
|
operator: In
|
|
values:
|
|
- ingress-nginx
|
|
topologyKey: app.kubernetes.io/name
|
|
replicaCount: 3
|
|
config:
|
|
# see https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap
|
|
compute-full-forwarded-for: "true"
|
|
ssl-ciphers: "EECDH+AESGCM:EDH+AESGCM"
|
|
ssl-protocols: "TLSv1.3"
|
|
ssl-redirect: false
|
|
use-forwarded-headers: "true"
|
|
use-proxy-protocol: "true"
|
|
large-client-header-buffers: "4 16k"
|
|
whitelist-source-range: "{{ ( ip_whitelist ) | join(',') }}"
|
|
service:
|
|
externalTrafficPolicy: Local
|
|
healthCheckNodePort: &healthchecknodeport 31066
|
|
nodePorts:
|
|
http: &httpnodeport 30473
|
|
https: 30474
|
|
annotations:
|
|
# see https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations
|
|
load-balancer.hetzner.cloud/type: "{{ hetzner_load_balancer_type }}"
|
|
load-balancer.hetzner.cloud/location: "{{ hetzner_location }}"
|
|
load-balancer.hetzner.cloud/name: "{{ stage_kube_load_balancer }}"
|
|
load-balancer.hetzner.cloud/hostname: "{{ stage_kube_load_balancer }}"
|
|
load-balancer.hetzner.cloud/disable-public-network: false
|
|
load-balancer.hetzner.cloud/disable-private-ingress: true
|
|
load-balancer.hetzner.cloud/use-private-ip: true
|
|
load-balancer.hetzner.cloud/uses-proxyprotocol: true
|
|
load-balancer.hetzner.cloud/health-check-interval: "3s"
|
|
load-balancer.hetzner.cloud/health-check-timeout: "1s"
|
|
load-balancer.hetzner.cloud/health-check-retries: 3
|
|
load-balancer.hetzner.cloud/health-check-protocol: "tcp"
|
|
load-balancer.hetzner.cloud/health-check-port: *httpnodeport
|
|
defaultBackend:
|
|
enabled: true
|
|
|
|
# TODO automate installation of nginx ingress grafana dashboard 9614
|