ingress forward both 80 and 443 ports to tenant clusters (#235)
We need to separate HTTP and HTTPS traffic and send them into tenant clusters. Currently traffic was sending only on HTTPS port, this PR enables HTTP traffic forwarding. Nginx ingress does not support setting correct upstream according to type of traffic (http or https) There are set of issues in upstream. - https://github.com/kubernetes/ingress-nginx/issues/1655 - https://github.com/kubernetes/ingress-nginx/issues/9061 - https://github.com/kubernetes/ingress-nginx/issues/11334 Good to know that we found reliable workaround fixes: https://github.com/aenix-io/cozystack/issues/209#issuecomment-2215021489
This commit is contained in:
parent
4c5a37d75b
commit
32f22adb26
1 changed files with 15 additions and 0 deletions
|
|
@ -9,6 +9,14 @@ metadata:
|
|||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "AUTO_HTTP"
|
||||
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||||
set $proxy_upstream_name "{{ .Release.Namespace }}-{{ .Release.Name }}-ingress-nginx-80";
|
||||
if ($scheme = https) {
|
||||
set $proxy_upstream_name "{{ .Release.Namespace }}-{{ .Release.Name }}-ingress-nginx-443";
|
||||
set $service_port 443;
|
||||
}
|
||||
set $proxy_host $proxy_upstream_name;
|
||||
spec:
|
||||
ingressClassName: "{{ $ingress }}"
|
||||
rules:
|
||||
|
|
@ -16,6 +24,13 @@ spec:
|
|||
- host: {{ . | quote }}
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
backend:
|
||||
service:
|
||||
name: {{ $.Release.Name }}-ingress-nginx
|
||||
port:
|
||||
number: 80
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
backend:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue