Created
May 17, 2019 11:52
-
-
Save strigazi/2fd6a4f139b146f11d50f93811de490c to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
# Source: nginx-ingress/templates/controller-configmap.yaml | |
apiVersion: v1 | |
kind: ConfigMap | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
component: "controller" | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress-controller | |
data: | |
enable-vts-status: "false" | |
--- | |
# Source: nginx-ingress/templates/tcp-configmap.yaml | |
apiVersion: v1 | |
kind: ConfigMap | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
component: "controller" | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress-tcp | |
data: | |
"9500": default/go-server:9500 | |
--- | |
# Source: nginx-ingress/templates/serviceaccount.yaml | |
apiVersion: v1 | |
kind: ServiceAccount | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress | |
--- | |
# Source: nginx-ingress/templates/clusterrole.yaml | |
apiVersion: rbac.authorization.k8s.io/v1beta1 | |
kind: ClusterRole | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress | |
rules: | |
- apiGroups: | |
- "" | |
resources: | |
- configmaps | |
- endpoints | |
- nodes | |
- pods | |
- secrets | |
verbs: | |
- list | |
- watch | |
- apiGroups: | |
- "" | |
resources: | |
- nodes | |
verbs: | |
- get | |
- apiGroups: | |
- "" | |
resources: | |
- services | |
verbs: | |
- get | |
- list | |
- update | |
- watch | |
- apiGroups: | |
- extensions | |
resources: | |
- ingresses | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- "" | |
resources: | |
- events | |
verbs: | |
- create | |
- patch | |
- apiGroups: | |
- extensions | |
resources: | |
- ingresses/status | |
verbs: | |
- update | |
--- | |
# Source: nginx-ingress/templates/clusterrolebinding.yaml | |
apiVersion: rbac.authorization.k8s.io/v1beta1 | |
kind: ClusterRoleBinding | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress | |
roleRef: | |
apiGroup: rbac.authorization.k8s.io | |
kind: ClusterRole | |
name: release-name-nginx-ingress | |
subjects: | |
- kind: ServiceAccount | |
name: release-name-nginx-ingress | |
namespace: default | |
--- | |
# Source: nginx-ingress/templates/role.yaml | |
apiVersion: rbac.authorization.k8s.io/v1beta1 | |
kind: Role | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress | |
rules: | |
- apiGroups: | |
- "" | |
resources: | |
- namespaces | |
verbs: | |
- get | |
- apiGroups: | |
- "" | |
resources: | |
- configmaps | |
- pods | |
- secrets | |
- endpoints | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- "" | |
resources: | |
- services | |
verbs: | |
- get | |
- list | |
- update | |
- watch | |
- apiGroups: | |
- extensions | |
resources: | |
- ingresses | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- extensions | |
resources: | |
- ingresses/status | |
verbs: | |
- update | |
- apiGroups: | |
- "" | |
resources: | |
- configmaps | |
resourceNames: | |
- ingress-controller-leader-nginx | |
verbs: | |
- get | |
- update | |
- apiGroups: | |
- "" | |
resources: | |
- configmaps | |
verbs: | |
- create | |
- apiGroups: | |
- "" | |
resources: | |
- endpoints | |
verbs: | |
- create | |
- get | |
- update | |
- apiGroups: | |
- "" | |
resources: | |
- events | |
verbs: | |
- create | |
- patch | |
--- | |
# Source: nginx-ingress/templates/rolebinding.yaml | |
apiVersion: rbac.authorization.k8s.io/v1beta1 | |
kind: RoleBinding | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress | |
roleRef: | |
apiGroup: rbac.authorization.k8s.io | |
kind: Role | |
name: release-name-nginx-ingress | |
subjects: | |
- kind: ServiceAccount | |
name: release-name-nginx-ingress | |
namespace: default | |
--- | |
# Source: nginx-ingress/templates/controller-service.yaml | |
apiVersion: v1 | |
kind: Service | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
component: "controller" | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress-controller | |
spec: | |
clusterIP: "" | |
ports: | |
- name: http | |
port: 80 | |
protocol: TCP | |
targetPort: http | |
- name: https | |
port: 443 | |
protocol: TCP | |
targetPort: https | |
- name: "9500-tcp" | |
port: 9500 | |
protocol: TCP | |
targetPort: "9500-tcp" | |
selector: | |
app: nginx-ingress | |
component: "controller" | |
release: release-name | |
type: "ClusterIP" | |
--- | |
# Source: nginx-ingress/templates/default-backend-service.yaml | |
apiVersion: v1 | |
kind: Service | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
component: "default-backend" | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress-default-backend | |
spec: | |
clusterIP: "" | |
ports: | |
- name: http | |
port: 80 | |
protocol: TCP | |
targetPort: http | |
selector: | |
app: nginx-ingress | |
component: "default-backend" | |
release: release-name | |
type: "ClusterIP" | |
--- | |
# Source: nginx-ingress/templates/controller-daemonset.yaml | |
apiVersion: extensions/v1beta1 | |
kind: DaemonSet | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
component: "controller" | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress-controller | |
spec: | |
revisionHistoryLimit: 10 | |
updateStrategy: | |
{} | |
minReadySeconds: 0 | |
template: | |
metadata: | |
annotations: | |
labels: | |
app: nginx-ingress | |
component: "controller" | |
release: release-name | |
spec: | |
dnsPolicy: ClusterFirst | |
containers: | |
- name: nginx-ingress-controller | |
image: "quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.23.0" | |
imagePullPolicy: "IfNotPresent" | |
args: | |
- /nginx-ingress-controller | |
- --default-backend-service=default/release-name-nginx-ingress-default-backend | |
- --election-id=ingress-controller-leader | |
- --ingress-class=nginx | |
- --configmap=default/release-name-nginx-ingress-controller | |
- --tcp-services-configmap=default/release-name-nginx-ingress-tcp | |
- --enable-ssl-passthrough | |
securityContext: | |
capabilities: | |
drop: | |
- ALL | |
add: | |
- NET_BIND_SERVICE | |
runAsUser: 33 | |
env: | |
- name: POD_NAME | |
valueFrom: | |
fieldRef: | |
fieldPath: metadata.name | |
- name: POD_NAMESPACE | |
valueFrom: | |
fieldRef: | |
fieldPath: metadata.namespace | |
livenessProbe: | |
httpGet: | |
path: /healthz | |
port: 10254 | |
scheme: HTTP | |
initialDelaySeconds: 10 | |
periodSeconds: 10 | |
timeoutSeconds: 1 | |
successThreshold: 1 | |
failureThreshold: 3 | |
ports: | |
- name: http | |
containerPort: 80 | |
protocol: TCP | |
hostPort: 80 | |
- name: https | |
containerPort: 443 | |
protocol: TCP | |
hostPort: 443 | |
- name: "9500-tcp" | |
containerPort: 9500 | |
protocol: TCP | |
readinessProbe: | |
httpGet: | |
path: /healthz | |
port: 10254 | |
scheme: HTTP | |
initialDelaySeconds: 10 | |
periodSeconds: 10 | |
timeoutSeconds: 1 | |
successThreshold: 1 | |
failureThreshold: 3 | |
resources: | |
limits: | |
cpu: 100m | |
memory: 64Mi | |
requests: | |
cpu: 100m | |
memory: 64Mi | |
hostNetwork: true | |
nodeSelector: | |
role: ingress | |
serviceAccountName: release-name-nginx-ingress | |
terminationGracePeriodSeconds: 60 | |
--- | |
# Source: nginx-ingress/templates/default-backend-deployment.yaml | |
apiVersion: extensions/v1beta1 | |
kind: Deployment | |
metadata: | |
labels: | |
app: nginx-ingress | |
chart: nginx-ingress-1.6.1 | |
component: "default-backend" | |
heritage: Tiller | |
release: release-name | |
name: release-name-nginx-ingress-default-backend | |
spec: | |
replicas: 1 | |
revisionHistoryLimit: 10 | |
template: | |
metadata: | |
labels: | |
app: nginx-ingress | |
component: "default-backend" | |
release: release-name | |
spec: | |
containers: | |
- name: nginx-ingress-default-backend | |
image: "k8s.gcr.io/defaultbackend:1.4" | |
imagePullPolicy: "IfNotPresent" | |
args: | |
livenessProbe: | |
httpGet: | |
path: /healthz | |
port: 8080 | |
scheme: HTTP | |
initialDelaySeconds: 30 | |
timeoutSeconds: 5 | |
ports: | |
- name: http | |
containerPort: 8080 | |
protocol: TCP | |
resources: | |
limits: | |
cpu: 10m | |
memory: 20Mi | |
requests: | |
cpu: 10m | |
memory: 20Mi | |
serviceAccountName: release-name-nginx-ingress | |
terminationGracePeriodSeconds: 60 | |
--- | |
# Source: nginx-ingress/templates/controller-deployment.yaml | |
--- | |
# Source: nginx-ingress/templates/controller-hpa.yaml | |
--- | |
# Source: nginx-ingress/templates/controller-metrics-service.yaml | |
--- | |
# Source: nginx-ingress/templates/controller-poddisruptionbudget.yaml | |
--- | |
# Source: nginx-ingress/templates/controller-servicemonitor.yaml | |
--- | |
# Source: nginx-ingress/templates/controller-stats-service.yaml | |
--- | |
# Source: nginx-ingress/templates/default-backend-poddisruptionbudget.yaml | |
--- | |
# Source: nginx-ingress/templates/headers-configmap.yaml | |
--- | |
# Source: nginx-ingress/templates/podsecuritypolicy.yaml | |
--- | |
# Source: nginx-ingress/templates/scoped-clusterrole.yaml | |
--- | |
# Source: nginx-ingress/templates/scoped-clusterrolebinding.yaml | |
--- | |
# Source: nginx-ingress/templates/udp-configmap.yaml | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment