forked from luksa/kubernetes-in-action-2nd-edition
-
Notifications
You must be signed in to change notification settings - Fork 0
/
kiada-ssl.kiada-test2-namespace.yaml
129 lines (129 loc) · 10.7 KB
/
kiada-ssl.kiada-test2-namespace.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
apiVersion: v1
kind: Pod
metadata:
name: kiada-ssl
namespace: kiada-test2
spec:
volumes:
- name: etc-envoy
projected:
sources:
- configMap:
name: kiada-envoy-config
- secret:
name: kiada-tls
items:
- key: tls.crt
path: example-com.crt
- key: tls.key
path: example-com.key
mode: 0600
containers:
- name: kiada
image: luksa/kiada:0.4
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
- name: NODE_NAME
valueFrom:
fieldRef:
fieldPath: spec.nodeName
- name: NODE_IP
valueFrom:
fieldRef:
fieldPath: status.hostIP
ports:
- name: http
containerPort: 8080
- name: envoy
image: envoyproxy/envoy:v1.14.1
volumeMounts:
- name: etc-envoy
mountPath: /etc/envoy
readOnly: true
ports:
- name: https
containerPort: 8443
- name: admin
containerPort: 9901
---
apiVersion: v1
kind: ConfigMap
metadata:
name: kiada-envoy-config
namespace: kiada-test2
binaryData:
dummy.bin: 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
data:
envoy.yaml: |
admin:
access_log_path: /tmp/envoy.admin.log
address:
socket_address:
protocol: TCP
address: 0.0.0.0
port_value: 9901
static_resources:
listeners:
- name: listener_0
address:
socket_address:
address: 0.0.0.0
port_value: 8443
filter_chains:
- transport_socket:
name: envoy.transport_sockets.tls
typed_config:
"@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
common_tls_context:
tls_certificates:
- certificate_chain:
filename: "/etc/envoy/example-com.crt"
private_key:
filename: "/etc/envoy/example-com.key"
filters:
- name: envoy.filters.network.http_connection_manager
typed_config:
"@type": type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager
stat_prefix: ingress_http
route_config:
name: local_route
virtual_hosts:
- name: local_service
domains: ["*"]
routes:
- match:
prefix: "/"
route:
cluster: service_kiada_localhost
http_filters:
- name: envoy.filters.http.router
clusters:
- name: service_kiada_localhost
connect_timeout: 0.25s
type: STATIC
load_assignment:
cluster_name: service_kiada_localhost
endpoints:
- lb_endpoints:
- endpoint:
address:
socket_address:
address: 127.0.0.1
port_value: 8080
---
apiVersion: v1
kind: Secret
metadata:
name: kiada-tls
namespace: kiada-test2
type: kubernetes.io/tls
data:
tls.crt: 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
tls.key: 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