ingress.yaml

kind: Service
apiVersion: v1
metadata:
  namespace: kube-system
  name: default-http-backend
  labels:
spec:
  ports:
  - port: 80
    targetPort: http
  selector:
    app: default-http-backend

---

kind: Deployment
apiVersion: extensions/v1beta1
metadata:
  namespace: kube-system
  name: default-http-backend
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: default-http-backend
    spec:
      terminationGracePeriodSeconds: 60
      containers:
      - name: default-http-backend
        image: gcr.io/google_containers/defaultbackend:1.0
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
            scheme: HTTP
          initialDelaySeconds: 30
          timeoutSeconds: 5
        resources:
          limits:
            cpu: 6m
            memory: 80Mi
          requests:
            cpu: 2m
            memory: 5Mi
        ports:
        - name: http
          containerPort: 8080
          protocol: TCP

---

kind: ConfigMap
apiVersion: v1
metadata:
  namespace: kube-system
  name: nginx
data:
  use-proxy-protocol: "false"
  hsts: "false"
  ssl-protocols: "TLSv1.1 TLSv1.2"
  use-http2: "true"
  proxy-body-size: 500m

---

kind: ConfigMap
apiVersion: v1
metadata:
  namespace: kube-system
  name: nginx-tcp-ingress-configmap
data:
  9022: "legacy/sftp-svc:sftp"

---

kind: Service
apiVersion: v1
metadata:
  namespace: kube-system
  name: nginx
spec:
  type: LoadBalancer
  selector:
    app: nginx
  ports:
  - name: http
    port: 80
    targetPort: http
    nodePort: 30080
  - name: https
    port: 443
    targetPort: https
    nodePort: 30443
  - name: sftp
    port: 9022
    targetPort: sftp
    nodePort: 30022
  externalIPs:
  - 52.57.1.1 # ip a
  - 52.29.1.1 # ip b

---

kind: DaemonSet
apiVersion: extensions/v1beta1
metadata:
  namespace: kube-system
  name: nginx
spec:
  template:
    metadata:
      labels:
        app: nginx
    spec:
      terminationGracePeriodSeconds: 60
      containers:
      - image: gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.11
        name: nginx
        imagePullPolicy: Always
        ports:
          - name: http
            containerPort: 80
            hostPort: 80 # required for direct access
            protocol: TCP
          - name: https
            containerPort: 443
            hostPort: 443 # required for direct access
            protocol: TCP
          - name: sftp
            containerPort: 9022
            hostPort: 9022
        livenessProbe:
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 30
          timeoutSeconds: 5
        resources:
          limits:
            cpu: 20m
            memory: 250Mi
          requests:
            cpu: 5m
            memory: 80Mi
        env:
          - name: POD_NAME
            valueFrom:
              fieldRef:
                fieldPath: metadata.name
          - name: POD_NAMESPACE
            valueFrom:
              fieldRef:
                fieldPath: metadata.namespace
        args:
        - /nginx-ingress-controller
        - --default-backend-service=$(POD_NAMESPACE)/default-http-backend
        - --tcp-services-configmap=$(POD_NAMESPACE)/nginx-tcp-ingress-configmap
        - --configmap=$(POD_NAMESPACE)/nginx
        - --publish-service=$(POD_NAMESPACE)/nginx