From 3cae5e3b6d81d98b1f4fa9bf25c650e36b7447b5 Mon Sep 17 00:00:00 2001 From: Steven Polley Date: Fri, 22 Dec 2023 19:54:51 -0700 Subject: [PATCH] Add ingress-nginx-controller --- 08-ingress-nginx-controller/README.md | 54 +++++++++++++++++++++++++ 08-ingress-nginx-controller/values.yaml | 12 ++++++ 2 files changed, 66 insertions(+) create mode 100644 08-ingress-nginx-controller/README.md create mode 100644 08-ingress-nginx-controller/values.yaml diff --git a/08-ingress-nginx-controller/README.md b/08-ingress-nginx-controller/README.md new file mode 100644 index 0000000..5860bf0 --- /dev/null +++ b/08-ingress-nginx-controller/README.md @@ -0,0 +1,54 @@ +# 08-Ingress-Nginx-Controller + +```bash +helm upgrade --install ingress-nginx ingress-nginx --repo https://kubernetes.github.io/ingress-nginx --namespace ingress-nginx --create-namespace -f values.yaml + +``` + +Example usage: + +```yaml +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: ingress-myservicea +spec: + ingressClassName: nginx + rules: + - host: myservicea.foo.org + http: + paths: + - path: / + backend: + serviceName: myservicea + servicePort: 8080 +--- +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: ingress-myserviceb +spec: + ingressClassName: nginx + rules: + - host: myserviceb.foo.org + http: + paths: + - path: / + backend: + serviceName: myserviceb + servicePort: 8443 + tls: + - hosts: + - myserviceb.foo.org + secretName: example-tls +--- +# A secret must also be provided, likely by a cert-manager of some kind +apiVersion: v1 +kind: Secret +metadata: + name: example-tls +data: + tls.crt: + tls.key: +type: kubernetes.io/tls +``` \ No newline at end of file diff --git a/08-ingress-nginx-controller/values.yaml b/08-ingress-nginx-controller/values.yaml new file mode 100644 index 0000000..87c3d67 --- /dev/null +++ b/08-ingress-nginx-controller/values.yaml @@ -0,0 +1,12 @@ +## nginx configuration +## Ref: https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/index.md + +controller: + service: + externalIPs: + - "10.69.69.51" + nodePorts: + # -- Node port allocated for the external HTTP listener. If left empty, the service controller allocates one from the configured node port range. + http: "31451" + # -- Node port allocated for the external HTTPS listener. If left empty, the service controller allocates one from the configured node port range. + https: "31207" \ No newline at end of file