Created
July 17, 2024 12:55
-
-
Save martezr/d3ae638e9b15368700073c952e6c04a0 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: Namespace | |
| metadata: | |
| labels: | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| name: ingress-nginx | |
| --- | |
| apiVersion: v1 | |
| automountServiceAccountToken: true | |
| kind: ServiceAccount | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: v1 | |
| kind: ServiceAccount | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: Role | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx | |
| namespace: ingress-nginx | |
| rules: | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - namespaces | |
| verbs: | |
| - get | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - configmaps | |
| - pods | |
| - secrets | |
| - endpoints | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - services | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| - apiGroups: | |
| - networking.k8s.io | |
| resources: | |
| - ingresses | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| - apiGroups: | |
| - networking.k8s.io | |
| resources: | |
| - ingresses/status | |
| verbs: | |
| - update | |
| - apiGroups: | |
| - networking.k8s.io | |
| resources: | |
| - ingressclasses | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| - apiGroups: | |
| - "" | |
| resourceNames: | |
| - ingress-controller-leader | |
| resources: | |
| - configmaps | |
| verbs: | |
| - get | |
| - update | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - configmaps | |
| verbs: | |
| - create | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - events | |
| verbs: | |
| - create | |
| - patch | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: Role | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission | |
| namespace: ingress-nginx | |
| rules: | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - secrets | |
| verbs: | |
| - get | |
| - create | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: ClusterRole | |
| metadata: | |
| labels: | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx | |
| rules: | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - configmaps | |
| - endpoints | |
| - nodes | |
| - pods | |
| - secrets | |
| - namespaces | |
| verbs: | |
| - list | |
| - watch | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - nodes | |
| verbs: | |
| - get | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - services | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| - apiGroups: | |
| - networking.k8s.io | |
| resources: | |
| - ingresses | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| - apiGroups: | |
| - "" | |
| resources: | |
| - events | |
| verbs: | |
| - create | |
| - patch | |
| - apiGroups: | |
| - networking.k8s.io | |
| resources: | |
| - ingresses/status | |
| verbs: | |
| - update | |
| - apiGroups: | |
| - networking.k8s.io | |
| resources: | |
| - ingressclasses | |
| verbs: | |
| - get | |
| - list | |
| - watch | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: ClusterRole | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission | |
| rules: | |
| - apiGroups: | |
| - admissionregistration.k8s.io | |
| resources: | |
| - validatingwebhookconfigurations | |
| verbs: | |
| - get | |
| - update | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: RoleBinding | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx | |
| namespace: ingress-nginx | |
| roleRef: | |
| apiGroup: rbac.authorization.k8s.io | |
| kind: Role | |
| name: ingress-nginx | |
| subjects: | |
| - kind: ServiceAccount | |
| name: ingress-nginx | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: RoleBinding | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission | |
| namespace: ingress-nginx | |
| roleRef: | |
| apiGroup: rbac.authorization.k8s.io | |
| kind: Role | |
| name: ingress-nginx-admission | |
| subjects: | |
| - kind: ServiceAccount | |
| name: ingress-nginx-admission | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: ClusterRoleBinding | |
| metadata: | |
| labels: | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx | |
| roleRef: | |
| apiGroup: rbac.authorization.k8s.io | |
| kind: ClusterRole | |
| name: ingress-nginx | |
| subjects: | |
| - kind: ServiceAccount | |
| name: ingress-nginx | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: ClusterRoleBinding | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission | |
| roleRef: | |
| apiGroup: rbac.authorization.k8s.io | |
| kind: ClusterRole | |
| name: ingress-nginx-admission | |
| subjects: | |
| - kind: ServiceAccount | |
| name: ingress-nginx-admission | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: v1 | |
| data: | |
| allow-snippet-annotations: "true" | |
| kind: ConfigMap | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-controller | |
| namespace: ingress-nginx | |
| --- | |
| apiVersion: v1 | |
| kind: Service | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-controller | |
| namespace: ingress-nginx | |
| spec: | |
| ports: | |
| - appProtocol: http | |
| name: http | |
| port: 80 | |
| protocol: TCP | |
| targetPort: http | |
| - appProtocol: https | |
| name: https | |
| port: 443 | |
| protocol: TCP | |
| targetPort: https | |
| selector: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| type: NodePort | |
| --- | |
| apiVersion: v1 | |
| kind: Service | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-controller-admission | |
| namespace: ingress-nginx | |
| spec: | |
| ports: | |
| - appProtocol: https | |
| name: https-webhook | |
| port: 443 | |
| targetPort: webhook | |
| selector: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| type: ClusterIP | |
| --- | |
| apiVersion: apps/v1 | |
| kind: Deployment | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-controller | |
| namespace: ingress-nginx | |
| spec: | |
| minReadySeconds: 0 | |
| revisionHistoryLimit: 10 | |
| selector: | |
| matchLabels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| template: | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| spec: | |
| containers: | |
| - args: | |
| - /nginx-ingress-controller | |
| - --election-id=ingress-controller-leader | |
| - --controller-class=k8s.io/ingress-nginx | |
| - --ingress-class=nginx | |
| - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller | |
| - --validating-webhook=:8443 | |
| - --validating-webhook-certificate=/usr/local/certificates/cert | |
| - --validating-webhook-key=/usr/local/certificates/key | |
| env: | |
| - name: POD_NAME | |
| valueFrom: | |
| fieldRef: | |
| fieldPath: metadata.name | |
| - name: POD_NAMESPACE | |
| valueFrom: | |
| fieldRef: | |
| fieldPath: metadata.namespace | |
| - name: LD_PRELOAD | |
| value: /usr/local/lib/libmimalloc.so | |
| image: k8s.gcr.io/ingress-nginx/controller:v1.1.3@sha256:31f47c1e202b39fadecf822a9b76370bd4baed199a005b3e7d4d1455f4fd3fe2 | |
| imagePullPolicy: IfNotPresent | |
| lifecycle: | |
| preStop: | |
| exec: | |
| command: | |
| - /wait-shutdown | |
| livenessProbe: | |
| failureThreshold: 5 | |
| httpGet: | |
| path: /healthz | |
| port: 10254 | |
| scheme: HTTP | |
| initialDelaySeconds: 10 | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| name: controller | |
| ports: | |
| - containerPort: 80 | |
| name: http | |
| protocol: TCP | |
| - containerPort: 443 | |
| name: https | |
| protocol: TCP | |
| - containerPort: 8443 | |
| name: webhook | |
| protocol: TCP | |
| readinessProbe: | |
| failureThreshold: 3 | |
| httpGet: | |
| path: /healthz | |
| port: 10254 | |
| scheme: HTTP | |
| initialDelaySeconds: 10 | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| resources: | |
| requests: | |
| cpu: 100m | |
| memory: 90Mi | |
| securityContext: | |
| allowPrivilegeEscalation: true | |
| capabilities: | |
| add: | |
| - NET_BIND_SERVICE | |
| drop: | |
| - ALL | |
| runAsUser: 101 | |
| volumeMounts: | |
| - mountPath: /usr/local/certificates/ | |
| name: webhook-cert | |
| readOnly: true | |
| dnsPolicy: ClusterFirst | |
| nodeSelector: | |
| kubernetes.io/os: linux | |
| serviceAccountName: ingress-nginx | |
| hostNetwork: true | |
| terminationGracePeriodSeconds: 300 | |
| volumes: | |
| - name: webhook-cert | |
| secret: | |
| secretName: ingress-nginx-admission | |
| --- | |
| apiVersion: batch/v1 | |
| kind: Job | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission-create | |
| namespace: ingress-nginx | |
| spec: | |
| template: | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission-create | |
| spec: | |
| containers: | |
| - args: | |
| - create | |
| - --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc | |
| - --namespace=$(POD_NAMESPACE) | |
| - --secret-name=ingress-nginx-admission | |
| env: | |
| - name: POD_NAMESPACE | |
| valueFrom: | |
| fieldRef: | |
| fieldPath: metadata.namespace | |
| image: k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.1.1@sha256:64d8c73dca984af206adf9d6d7e46aa550362b1d7a01f3a0a91b20cc67868660 | |
| imagePullPolicy: IfNotPresent | |
| name: create | |
| securityContext: | |
| allowPrivilegeEscalation: false | |
| nodeSelector: | |
| kubernetes.io/os: linux | |
| restartPolicy: OnFailure | |
| securityContext: | |
| fsGroup: 2000 | |
| runAsNonRoot: true | |
| runAsUser: 2000 | |
| serviceAccountName: ingress-nginx-admission | |
| --- | |
| apiVersion: batch/v1 | |
| kind: Job | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission-patch | |
| namespace: ingress-nginx | |
| spec: | |
| template: | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission-patch | |
| spec: | |
| containers: | |
| - args: | |
| - patch | |
| - --webhook-name=ingress-nginx-admission | |
| - --namespace=$(POD_NAMESPACE) | |
| - --patch-mutating=false | |
| - --secret-name=ingress-nginx-admission | |
| - --patch-failure-policy=Fail | |
| env: | |
| - name: POD_NAMESPACE | |
| valueFrom: | |
| fieldRef: | |
| fieldPath: metadata.namespace | |
| image: k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.1.1@sha256:64d8c73dca984af206adf9d6d7e46aa550362b1d7a01f3a0a91b20cc67868660 | |
| imagePullPolicy: IfNotPresent | |
| name: patch | |
| securityContext: | |
| allowPrivilegeEscalation: false | |
| nodeSelector: | |
| kubernetes.io/os: linux | |
| restartPolicy: OnFailure | |
| securityContext: | |
| fsGroup: 2000 | |
| runAsNonRoot: true | |
| runAsUser: 2000 | |
| serviceAccountName: ingress-nginx-admission | |
| --- | |
| apiVersion: networking.k8s.io/v1 | |
| kind: IngressClass | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: controller | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: nginx | |
| spec: | |
| controller: k8s.io/ingress-nginx | |
| --- | |
| apiVersion: admissionregistration.k8s.io/v1 | |
| kind: ValidatingWebhookConfiguration | |
| metadata: | |
| labels: | |
| app.kubernetes.io/component: admission-webhook | |
| app.kubernetes.io/instance: ingress-nginx | |
| app.kubernetes.io/name: ingress-nginx | |
| app.kubernetes.io/part-of: ingress-nginx | |
| app.kubernetes.io/version: 1.1.3 | |
| name: ingress-nginx-admission | |
| webhooks: | |
| - admissionReviewVersions: | |
| - v1 | |
| clientConfig: | |
| service: | |
| name: ingress-nginx-controller-admission | |
| namespace: ingress-nginx | |
| path: /networking/v1/ingresses | |
| failurePolicy: Fail | |
| matchPolicy: Equivalent | |
| name: validate.nginx.ingress.kubernetes.io | |
| rules: | |
| - apiGroups: | |
| - networking.k8s.io | |
| apiVersions: | |
| - v1 | |
| operations: | |
| - CREATE | |
| - UPDATE | |
| resources: | |
| - ingresses | |
| sideEffects: None |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment