mirror of
https://github.com/outbackdingo/cozystack.git
synced 2026-01-27 18:18:41 +00:00
ingress forward both 80 and 443 ports to tenant clusters (#235)
We need to separate HTTP and HTTPS traffic and send them into tenant clusters. Currently traffic was sending only on HTTPS port, this PR enables HTTP traffic forwarding. Nginx ingress does not support setting correct upstream according to type of traffic (http or https) There are set of issues in upstream. - https://github.com/kubernetes/ingress-nginx/issues/1655 - https://github.com/kubernetes/ingress-nginx/issues/9061 - https://github.com/kubernetes/ingress-nginx/issues/11334 Good to know that we found reliable workaround fixes: https://github.com/aenix-io/cozystack/issues/209#issuecomment-2215021489
This commit is contained in:
@@ -9,6 +9,14 @@ metadata:
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "AUTO_HTTP"
|
||||
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||||
set $proxy_upstream_name "{{ .Release.Namespace }}-{{ .Release.Name }}-ingress-nginx-80";
|
||||
if ($scheme = https) {
|
||||
set $proxy_upstream_name "{{ .Release.Namespace }}-{{ .Release.Name }}-ingress-nginx-443";
|
||||
set $service_port 443;
|
||||
}
|
||||
set $proxy_host $proxy_upstream_name;
|
||||
spec:
|
||||
ingressClassName: "{{ $ingress }}"
|
||||
rules:
|
||||
@@ -16,6 +24,13 @@ spec:
|
||||
- host: {{ . | quote }}
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
backend:
|
||||
service:
|
||||
name: {{ $.Release.Name }}-ingress-nginx
|
||||
port:
|
||||
number: 80
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
backend:
|
||||
|
||||
Reference in New Issue
Block a user