Update file kasm-ingress.yaml
This commit is contained in:
@@ -24,61 +24,92 @@ subsets:
|
|||||||
protocol: TCP
|
protocol: TCP
|
||||||
---
|
---
|
||||||
|
|
||||||
apiVersion: networking.k8s.io/v1
|
#apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
#kind: Ingress
|
||||||
|
#metadata:
|
||||||
|
# name: kasm-ingress
|
||||||
|
# annotations:
|
||||||
|
# kubernetes.io/ingress.class: traefik
|
||||||
|
# cert-manager.io/cluster-issuer: letsencrypt-production
|
||||||
|
# nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
||||||
|
# #nginx.ingress.kubernetes.io/proxy-body-size: 10M
|
||||||
|
# #nginx.ingress.kubernetes.io/proxy-read-timeout: "1800s"
|
||||||
|
# #nginx.ingress.kubernetes.io/proxy-send-timeout: "1800s"
|
||||||
|
# #nginx.ingress.kubernetes.io/proxy_connect_timeout: "1800s"
|
||||||
|
# nginx.ingress.kubernetes.io/server-snippets: |
|
||||||
|
# location / {
|
||||||
|
# # The following configurations must be configured when proxying to Kasm Workspaces
|
||||||
|
#
|
||||||
|
# # WebSocket Support
|
||||||
|
# proxy_set_header Upgrade $http_upgrade;
|
||||||
|
# proxy_set_header Connection "upgrade";
|
||||||
|
#
|
||||||
|
# # Host and X headers
|
||||||
|
# proxy_set_header Host $host;
|
||||||
|
# proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
# proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
#
|
||||||
|
# # Connectivity Options
|
||||||
|
# proxy_http_version 1.1;
|
||||||
|
# proxy_read_timeout 1800s;
|
||||||
|
# proxy_send_timeout 1800s;
|
||||||
|
# proxy_connect_timeout 1800s;
|
||||||
|
# proxy_buffering off;
|
||||||
|
#
|
||||||
|
# # Allow large requests to support file uploads to sessions
|
||||||
|
# client_max_body_size 10M;
|
||||||
|
#
|
||||||
|
# # Proxy to Kasm Workspaces running locally on 8443 using ssl
|
||||||
|
# proxy_pass https://192.168.20.110:8443 ;
|
||||||
|
# }
|
||||||
|
#
|
||||||
|
#
|
||||||
|
#spec:
|
||||||
|
# rules:
|
||||||
|
# - host: kasm.durp.info
|
||||||
|
# http:
|
||||||
|
# paths:
|
||||||
|
# - path: /
|
||||||
|
# pathType: Prefix
|
||||||
|
# backend:
|
||||||
|
# service:
|
||||||
|
# name: kasm
|
||||||
|
# port:
|
||||||
|
# number: 443
|
||||||
|
# tls:
|
||||||
|
# - hosts:
|
||||||
|
# - kasm.durp.info
|
||||||
|
# secretName: kasm-tls
|
||||||
|
|
||||||
|
apiVersion: traefik.containo.us/v1alpha1
|
||||||
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: kasm-ingress
|
name: kasm-ingress
|
||||||
annotations:
|
|
||||||
kubernetes.io/ingress.class: traefik
|
|
||||||
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
||||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
|
||||||
#nginx.ingress.kubernetes.io/proxy-body-size: 10M
|
|
||||||
#nginx.ingress.kubernetes.io/proxy-read-timeout: "1800s"
|
|
||||||
#nginx.ingress.kubernetes.io/proxy-send-timeout: "1800s"
|
|
||||||
#nginx.ingress.kubernetes.io/proxy_connect_timeout: "1800s"
|
|
||||||
nginx.ingress.kubernetes.io/server-snippets: |
|
|
||||||
location / {
|
|
||||||
# The following configurations must be configured when proxying to Kasm Workspaces
|
|
||||||
|
|
||||||
# WebSocket Support
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
|
|
||||||
# Host and X headers
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
|
|
||||||
# Connectivity Options
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_read_timeout 1800s;
|
|
||||||
proxy_send_timeout 1800s;
|
|
||||||
proxy_connect_timeout 1800s;
|
|
||||||
proxy_buffering off;
|
|
||||||
|
|
||||||
# Allow large requests to support file uploads to sessions
|
|
||||||
client_max_body_size 10M;
|
|
||||||
|
|
||||||
# Proxy to Kasm Workspaces running locally on 8443 using ssl
|
|
||||||
proxy_pass https://192.168.20.110:8443 ;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
spec:
|
spec:
|
||||||
rules:
|
entryPoints:
|
||||||
- host: kasm.durp.info
|
- websecure
|
||||||
http:
|
routes:
|
||||||
paths:
|
- match: Host(`kasm.durp.durp.info`) && PathPrefix(`/`)
|
||||||
- path: /
|
kind: Rule
|
||||||
pathType: Prefix
|
services:
|
||||||
backend:
|
- name: kasm
|
||||||
service:
|
port: 443
|
||||||
name: kasm
|
|
||||||
port:
|
|
||||||
number: 443
|
|
||||||
tls:
|
tls:
|
||||||
- hosts:
|
|
||||||
- kasm.durp.info
|
|
||||||
secretName: kasm-tls
|
secretName: kasm-tls
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
apiVersion: cert-manager.io/v1
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: kasm-tls
|
||||||
|
spec:
|
||||||
|
secretName: kasm-tls
|
||||||
|
issuerRef:
|
||||||
|
name: letsencrypt-production
|
||||||
|
kind: ClusterIssuer
|
||||||
|
commonName: "kasm.internal.durp.info"
|
||||||
|
dnsNames:
|
||||||
|
- "kasm.internal.durp.info"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user