update ingress controller

This commit is contained in:
2025-08-07 11:53:46 -05:00
parent a493cb75f9
commit 0f27698fef
2 changed files with 254 additions and 75 deletions

View File

@@ -0,0 +1,100 @@
---
kind: NginxIngress
apiVersion: charts.nginx.org/v1alpha1
metadata:
name: nginx
namespace: nginx-ingress
spec:
routeSelector:
matchLabels:
type: nginx
controller:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
app.kubernetes.io/instance: nginx
app.kubernetes.io/name: nginx
topologyKey: kubernetes.io/hostname
config:
entries:
http-snippets: proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=static-cache:10m
max_size=10g inactive=60m use_temp_path=off;
log-format-escaping: json
log-format: |-
{
"msec": "$msec",
"connection": "$connection",
"connection_requests": "$connection_requests",
"pid": "$pid",
"request_id": "$request_id",
"request_length": "$request_length",
"remote_addr": "$remote_addr",
"remote_user": "$remote_user",
"remote_port": "$remote_port",
"time_local": "$time_local",
"time_iso8601": "$time_iso8601",
"request": "$request",
"request_uri": "$request_uri",
"args": "$args",
"status": "$status",
"body_bytes_sent": "$body_bytes_sent",
"bytes_sent": "$bytes_sent",
"http_referer": "$http_referer",
"http_user_agent": "$http_user_agent",
"http_x_forwarded_for": "$http_x_forwarded_for",
"http_host": "$http_host",
"server_name": "$server_name",
"request_time": "$request_time",
"upstream": "$upstream_addr",
"upstream_connect_time": "$upstream_connect_time",
"upstream_header_time": "$upstream_header_time",
"upstream_response_time": "$upstream_response_time",
"upstream_response_length": "$upstream_response_length",
"upstream_cache_status": "$upstream_cache_status",
"ssl_protocol": "$ssl_protocol",
"ssl_cipher": "$ssl_cipher",
"scheme": "$scheme",
"request_method": "$request_method",
"server_protocol": "$server_protocol",
"pipe": "$pipe",
"gzip_ratio": "$gzip_ratio",
"http_cf_ray": "$http_cf_ray"
}
enableCustomResources: true
enableTLSPassthrough: true
enableSnippets: true
image:
pullPolicy: IfNotPresent
repository: nginx/nginx-ingress
tag: 5.1.0-ubi
ingressClass:
create: true
name: nginx
setAsDefaultIngress: false
initContainerResources:
requests:
cpu: 100m
memory: 128Mi
replicaCount: 2
reportIngressStatus:
annotations: {}
enable: true
enableLeaderElection: true
ingressLink: ''
leaderElectionLockName: nginx-ingress-leader
service:
externalTrafficPolicy: Local
loadBalancerIP: 10.1.82.0
prometheus:
create: true
serviceMonitor:
create: true
volumes:
- name: nginx-cache
persistentVolumeClaim:
claimName: nginx-cache
volumeMounts:
- name: nginx-cache
mountPath: /var/cache/nginx

View File

@@ -1,96 +1,175 @@
---
kind: NginxIngress
apiVersion: charts.nginx.org/v1alpha1 apiVersion: charts.nginx.org/v1alpha1
kind: NginxIngress
metadata: metadata:
name: nginx name: nginxingress-sample
namespace: nginx-ingress namespace: openshift-operators
spec: spec:
routeSelector:
matchLabels:
type: nginx
controller: controller:
affinity: affinity: {}
podAntiAffinity: annotations: {}
requiredDuringSchedulingIgnoredDuringExecution: appprotect:
- labelSelector: enable: false
matchLabels: appprotectdos:
app.kubernetes.io/instance: nginx debug: false
app.kubernetes.io/name: nginx enable: false
topologyKey: kubernetes.io/hostname maxDaemons: 0
maxWorkers: 0
memory: 0
autoscaling:
annotations: {}
behavior: {}
enabled: false
maxReplicas: 3
minReplicas: 1
targetCPUUtilizationPercentage: 50
targetMemoryUtilizationPercentage: 50
config: config:
entries: annotations: {}
http-snippets: proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=static-cache:10m entries: {}
max_size=10g inactive=60m use_temp_path=off; containerPort:
log-format-escaping: json http: 80
log-format: |- https: 443
{ customConfigMap: ''
"msec": "$msec", customPorts: []
"connection": "$connection", defaultHTTPListenerPort: 80
"connection_requests": "$connection_requests", defaultHTTPSListenerPort: 443
"pid": "$pid", defaultTLS:
"request_id": "$request_id", cert: ''
"request_length": "$request_length", key: ''
"remote_addr": "$remote_addr", secret: ''
"remote_user": "$remote_user", disableIPV6: false
"remote_port": "$remote_port", dnsPolicy: ClusterFirst
"time_local": "$time_local", enableCertManager: false
"time_iso8601": "$time_iso8601",
"request": "$request",
"request_uri": "$request_uri",
"args": "$args",
"status": "$status",
"body_bytes_sent": "$body_bytes_sent",
"bytes_sent": "$bytes_sent",
"http_referer": "$http_referer",
"http_user_agent": "$http_user_agent",
"http_x_forwarded_for": "$http_x_forwarded_for",
"http_host": "$http_host",
"server_name": "$server_name",
"request_time": "$request_time",
"upstream": "$upstream_addr",
"upstream_connect_time": "$upstream_connect_time",
"upstream_header_time": "$upstream_header_time",
"upstream_response_time": "$upstream_response_time",
"upstream_response_length": "$upstream_response_length",
"upstream_cache_status": "$upstream_cache_status",
"ssl_protocol": "$ssl_protocol",
"ssl_cipher": "$ssl_cipher",
"scheme": "$scheme",
"request_method": "$request_method",
"server_protocol": "$server_protocol",
"pipe": "$pipe",
"gzip_ratio": "$gzip_ratio",
"http_cf_ray": "$http_cf_ray"
}
enableCustomResources: true enableCustomResources: true
enableTLSPassthrough: true enableExternalDNS: false
enableSnippets: true enableLatencyMetrics: false
enableOIDC: false
enableSSLDynamicReload: true
enableSnippets: false
enableTLSPassthrough: false
env: []
extraContainers: []
globalConfiguration:
create: false
spec: {}
healthStatus: false
healthStatusURI: /nginx-health
hostNetwork: false
hostPort:
enable: false
http: 80
https: 443
image: image:
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
repository: nginx/nginx-ingress repository: nginx/nginx-ingress
tag: 3.7.0-ubi tag: 5.1.0-ubi
ingressClass: ingressClass:
create: true create: true
name: nginx name: nginx
setAsDefaultIngress: false setAsDefaultIngress: false
replicaCount: 2 initContainerResources:
requests:
cpu: 100m
memory: 128Mi
initContainers: []
lifecycle: {}
logFormat: glog
logLevel: info
mgmt:
licenseTokenSecretName: license-token
minReadySeconds: 0
name: controller
nginxDebug: false
nginxReloadTimeout: 60000
nginxStatus:
allowCidrs: 127.0.0.1
enable: true
port: 8080
nginxplus: false
pod:
annotations: {}
extraLabels: {}
podDisruptionBudget:
annotations: {}
enabled: false
readOnlyRootFilesystem: false
readyStatus:
enable: true
initialDelaySeconds: 0
port: 8081
replicaCount: 1
reportIngressStatus: reportIngressStatus:
annotations: {} annotations: {}
enable: true enable: true
enableLeaderElection: true enableLeaderElection: true
ingressLink: '' ingressLink: ''
leaderElectionLockName: ingress-leader leaderElectionLockName: nginx-ingress-leader
resources:
requests:
cpu: 100m
memory: 128Mi
selectorLabels: {}
service: service:
annotations: {}
clusterIP: ''
create: true
customPorts: []
externalIPs: []
externalTrafficPolicy: Local externalTrafficPolicy: Local
loadBalancerIP: 10.1.82.2 extraLabels: {}
httpPort:
enable: true
port: 80
targetPort: 80
httpsPort:
enable: true
port: 443
targetPort: 443
loadBalancerIP: ''
loadBalancerSourceRanges: []
type: LoadBalancer
serviceAccount:
annotations: {}
imagePullSecretName: ''
imagePullSecretsNames: []
shareProcessNamespace: false
strategy: {}
terminationGracePeriodSeconds: 30
tlsPassthroughPort: 443
tolerations: []
volumeMounts: []
volumes: []
watchNamespace: ''
watchNamespaceLabel: ''
watchSecretNamespace: ''
wildcardTLS:
cert: ''
key: ''
secret: ''
kind: deployment
nginxServiceMesh:
enable: false
enableEgress: false
prometheus: prometheus:
create: true create: true
port: 9113
scheme: http
secret: ''
service:
create: false
labels:
service: nginx-ingress-prometheus-service
serviceMonitor: serviceMonitor:
create: false
endpoints:
- port: prometheus
labels: {}
selectorMatchLabels:
service: nginx-ingress-prometheus-service
rbac:
create: true create: true
volumes: serviceInsight:
- name: nginx-cache create: false
persistentVolumeClaim: port: 9114
claimName: nginx-cache scheme: http
volumeMounts: secret: ''
- name: nginx-cache
mountPath: /var/cache/nginx