Skip to content

Instantly share code, notes, and snippets.

@strigazi
Created May 17, 2019 11:52
Show Gist options
  • Save strigazi/2fd6a4f139b146f11d50f93811de490c to your computer and use it in GitHub Desktop.
Save strigazi/2fd6a4f139b146f11d50f93811de490c to your computer and use it in GitHub Desktop.
---
# Source: nginx-ingress/templates/controller-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
component: "controller"
heritage: Tiller
release: release-name
name: release-name-nginx-ingress-controller
data:
enable-vts-status: "false"
---
# Source: nginx-ingress/templates/tcp-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
component: "controller"
heritage: Tiller
release: release-name
name: release-name-nginx-ingress-tcp
data:
"9500": default/go-server:9500
---
# Source: nginx-ingress/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
heritage: Tiller
release: release-name
name: release-name-nginx-ingress
---
# Source: nginx-ingress/templates/clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
heritage: Tiller
release: release-name
name: release-name-nginx-ingress
rules:
- apiGroups:
- ""
resources:
- configmaps
- endpoints
- nodes
- pods
- secrets
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- update
- watch
- apiGroups:
- extensions
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- extensions
resources:
- ingresses/status
verbs:
- update
---
# Source: nginx-ingress/templates/clusterrolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
heritage: Tiller
release: release-name
name: release-name-nginx-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: release-name-nginx-ingress
subjects:
- kind: ServiceAccount
name: release-name-nginx-ingress
namespace: default
---
# Source: nginx-ingress/templates/role.yaml
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: Role
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
heritage: Tiller
release: release-name
name: release-name-nginx-ingress
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resources:
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- update
- watch
- apiGroups:
- extensions
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- extensions
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- ""
resources:
- configmaps
resourceNames:
- ingress-controller-leader-nginx
verbs:
- get
- update
- apiGroups:
- ""
resources:
- configmaps
verbs:
- create
- apiGroups:
- ""
resources:
- endpoints
verbs:
- create
- get
- update
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
---
# Source: nginx-ingress/templates/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
heritage: Tiller
release: release-name
name: release-name-nginx-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: release-name-nginx-ingress
subjects:
- kind: ServiceAccount
name: release-name-nginx-ingress
namespace: default
---
# Source: nginx-ingress/templates/controller-service.yaml
apiVersion: v1
kind: Service
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
component: "controller"
heritage: Tiller
release: release-name
name: release-name-nginx-ingress-controller
spec:
clusterIP: ""
ports:
- name: http
port: 80
protocol: TCP
targetPort: http
- name: https
port: 443
protocol: TCP
targetPort: https
- name: "9500-tcp"
port: 9500
protocol: TCP
targetPort: "9500-tcp"
selector:
app: nginx-ingress
component: "controller"
release: release-name
type: "ClusterIP"
---
# Source: nginx-ingress/templates/default-backend-service.yaml
apiVersion: v1
kind: Service
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
component: "default-backend"
heritage: Tiller
release: release-name
name: release-name-nginx-ingress-default-backend
spec:
clusterIP: ""
ports:
- name: http
port: 80
protocol: TCP
targetPort: http
selector:
app: nginx-ingress
component: "default-backend"
release: release-name
type: "ClusterIP"
---
# Source: nginx-ingress/templates/controller-daemonset.yaml
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
component: "controller"
heritage: Tiller
release: release-name
name: release-name-nginx-ingress-controller
spec:
revisionHistoryLimit: 10
updateStrategy:
{}
minReadySeconds: 0
template:
metadata:
annotations:
labels:
app: nginx-ingress
component: "controller"
release: release-name
spec:
dnsPolicy: ClusterFirst
containers:
- name: nginx-ingress-controller
image: "quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.23.0"
imagePullPolicy: "IfNotPresent"
args:
- /nginx-ingress-controller
- --default-backend-service=default/release-name-nginx-ingress-default-backend
- --election-id=ingress-controller-leader
- --ingress-class=nginx
- --configmap=default/release-name-nginx-ingress-controller
- --tcp-services-configmap=default/release-name-nginx-ingress-tcp
- --enable-ssl-passthrough
securityContext:
capabilities:
drop:
- ALL
add:
- NET_BIND_SERVICE
runAsUser: 33
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
livenessProbe:
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 1
successThreshold: 1
failureThreshold: 3
ports:
- name: http
containerPort: 80
protocol: TCP
hostPort: 80
- name: https
containerPort: 443
protocol: TCP
hostPort: 443
- name: "9500-tcp"
containerPort: 9500
protocol: TCP
readinessProbe:
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 1
successThreshold: 1
failureThreshold: 3
resources:
limits:
cpu: 100m
memory: 64Mi
requests:
cpu: 100m
memory: 64Mi
hostNetwork: true
nodeSelector:
role: ingress
serviceAccountName: release-name-nginx-ingress
terminationGracePeriodSeconds: 60
---
# Source: nginx-ingress/templates/default-backend-deployment.yaml
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
labels:
app: nginx-ingress
chart: nginx-ingress-1.6.1
component: "default-backend"
heritage: Tiller
release: release-name
name: release-name-nginx-ingress-default-backend
spec:
replicas: 1
revisionHistoryLimit: 10
template:
metadata:
labels:
app: nginx-ingress
component: "default-backend"
release: release-name
spec:
containers:
- name: nginx-ingress-default-backend
image: "k8s.gcr.io/defaultbackend:1.4"
imagePullPolicy: "IfNotPresent"
args:
livenessProbe:
httpGet:
path: /healthz
port: 8080
scheme: HTTP
initialDelaySeconds: 30
timeoutSeconds: 5
ports:
- name: http
containerPort: 8080
protocol: TCP
resources:
limits:
cpu: 10m
memory: 20Mi
requests:
cpu: 10m
memory: 20Mi
serviceAccountName: release-name-nginx-ingress
terminationGracePeriodSeconds: 60
---
# Source: nginx-ingress/templates/controller-deployment.yaml
---
# Source: nginx-ingress/templates/controller-hpa.yaml
---
# Source: nginx-ingress/templates/controller-metrics-service.yaml
---
# Source: nginx-ingress/templates/controller-poddisruptionbudget.yaml
---
# Source: nginx-ingress/templates/controller-servicemonitor.yaml
---
# Source: nginx-ingress/templates/controller-stats-service.yaml
---
# Source: nginx-ingress/templates/default-backend-poddisruptionbudget.yaml
---
# Source: nginx-ingress/templates/headers-configmap.yaml
---
# Source: nginx-ingress/templates/podsecuritypolicy.yaml
---
# Source: nginx-ingress/templates/scoped-clusterrole.yaml
---
# Source: nginx-ingress/templates/scoped-clusterrolebinding.yaml
---
# Source: nginx-ingress/templates/udp-configmap.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment