85 lines
2.1 KiB
YAML
85 lines
2.1 KiB
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: kasm
|
|
spec:
|
|
ports:
|
|
- name: app
|
|
port: 443
|
|
protocol: TCP
|
|
targetPort: 443
|
|
clusterIP: None
|
|
type: ClusterIP
|
|
---
|
|
apiVersion: v1
|
|
kind: Endpoints
|
|
metadata:
|
|
name: kasm
|
|
subsets:
|
|
- addresses:
|
|
- ip: 192.168.20.100
|
|
ports:
|
|
- name: app
|
|
port: 443
|
|
protocol: TCP
|
|
---
|
|
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: kasm-ingress
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
|
#nginx.ingress.kubernetes.io/proxy-body-size: 10M
|
|
#nginx.ingress.kubernetes.io/proxy-read-timeout: "1800s"
|
|
#nginx.ingress.kubernetes.io/proxy-send-timeout: "1800s"
|
|
#nginx.ingress.kubernetes.io/proxy_connect_timeout: "1800s"
|
|
nginx.ingress.kubernetes.io/server-snippets: |
|
|
location / {
|
|
# The following configurations must be configured when proxying to Kasm Workspaces
|
|
|
|
# WebSocket Support
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
|
|
# Host and X headers
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
# Connectivity Options
|
|
proxy_http_version 1.1;
|
|
proxy_read_timeout 1800s;
|
|
proxy_send_timeout 1800s;
|
|
proxy_connect_timeout 1800s;
|
|
proxy_buffering off;
|
|
|
|
# Allow large requests to support file uploads to sessions
|
|
client_max_body_size 10M;
|
|
|
|
# Proxy to Kasm Workspaces running locally on 8443 using ssl
|
|
proxy_pass https://192.168.20.110:8443 ;
|
|
}
|
|
|
|
|
|
spec:
|
|
rules:
|
|
- host: kasm.durp.info
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: kasm
|
|
port:
|
|
number: 443
|
|
tls:
|
|
- hosts:
|
|
- kasm.durp.info
|
|
secretName: kasm-tls
|
|
|