Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
k8s-ingress
Project
Project
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
3
Merge Requests
3
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Commits
Issue Boards
Open sidebar
uplex-varnish
k8s-ingress
Commits
1753a084
Commit
1753a084
authored
Apr 30, 2020
by
Geoff Simmons
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update the "cluster-wide and namespace-wide" Ingress example.
parent
b2d1b90d
Changes
14
Show whitespace changes
Inline
Side-by-side
Showing
14 changed files
with
182 additions
and
14 deletions
+182
-14
adm-secret-coffee.yaml
.../architectures/cluster-and-ns-wide/adm-secret-coffee.yaml
+1
-0
adm-secret-system.yaml
.../architectures/cluster-and-ns-wide/adm-secret-system.yaml
+1
-0
admin-svc-coffee.yaml
...s/architectures/cluster-and-ns-wide/admin-svc-coffee.yaml
+28
-0
admin-svc-system.yaml
...s/architectures/cluster-and-ns-wide/admin-svc-system.yaml
+28
-0
deploy.sh
examples/architectures/cluster-and-ns-wide/deploy.sh
+8
-0
nodeport-coffee.yaml
...es/architectures/cluster-and-ns-wide/nodeport-coffee.yaml
+4
-4
nodeport-system.yaml
...es/architectures/cluster-and-ns-wide/nodeport-system.yaml
+4
-4
other-ingress.yaml
...ples/architectures/cluster-and-ns-wide/other-ingress.yaml
+1
-1
tea-ingress.yaml
examples/architectures/cluster-and-ns-wide/tea-ingress.yaml
+1
-1
tls-cert-secret-coffee.yaml
...itectures/cluster-and-ns-wide/tls-cert-secret-coffee.yaml
+8
-0
tls-cert-secret-system.yaml
...itectures/cluster-and-ns-wide/tls-cert-secret-system.yaml
+8
-0
undeploy.sh
examples/architectures/cluster-and-ns-wide/undeploy.sh
+8
-0
varnish-coffee.yaml
...les/architectures/cluster-and-ns-wide/varnish-coffee.yaml
+41
-2
varnish-system.yaml
...les/architectures/cluster-and-ns-wide/varnish-system.yaml
+41
-2
No files found.
examples/architectures/cluster-and-ns-wide/adm-secret-coffee.yaml
View file @
1753a084
...
...
@@ -8,3 +8,4 @@ metadata:
type
:
Opaque
data
:
admin
:
ByIQphD6z6UY3nEXAVS+AlrQUXgzg2dcT1Zd1rG1l4M=
dataplaneapi
:
MmIxNTM3NDMtN2ViMS00ODI0LWE5ZmQtYmU5ODM2Mjc3Zjc3
examples/architectures/cluster-and-ns-wide/adm-secret-system.yaml
View file @
1753a084
...
...
@@ -8,3 +8,4 @@ metadata:
type
:
Opaque
data
:
admin
:
f/y/Vt0O7rnL3m5LM2upu/ImjA6paITHmvYYEQ1Qrfg=
dataplaneapi
:
N2JkMWI5MzUtM2I5YS00NzgyLWI2MjMtOTE5NDE2YzNjMjQ5
examples/architectures/cluster-and-ns-wide/admin-svc-coffee.yaml
0 → 100644
View file @
1753a084
apiVersion
:
v1
kind
:
Service
metadata
:
name
:
varnish-ingress-admin
namespace
:
cafe
labels
:
app
:
varnish-ingress
spec
:
clusterIP
:
None
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
5555
targetPort
:
5555
protocol
:
TCP
name
:
dataplane
-
port
:
5556
targetPort
:
5556
protocol
:
TCP
name
:
faccess
-
port
:
9443
targetPort
:
9443
protocol
:
TCP
name
:
stats
selector
:
app
:
varnish-ingress
examples/architectures/cluster-and-ns-wide/admin-svc-system.yaml
0 → 100644
View file @
1753a084
apiVersion
:
v1
kind
:
Service
metadata
:
name
:
varnish-ingress-admin
namespace
:
kube-system
labels
:
app
:
varnish-ingress
spec
:
clusterIP
:
None
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
5555
targetPort
:
5555
protocol
:
TCP
name
:
dataplane
-
port
:
5556
targetPort
:
5556
protocol
:
TCP
name
:
faccess
-
port
:
9443
targetPort
:
9443
protocol
:
TCP
name
:
stats
selector
:
app
:
varnish-ingress
examples/architectures/cluster-and-ns-wide/deploy.sh
View file @
1753a084
...
...
@@ -10,12 +10,20 @@ kubectl apply -f other.yaml
kubectl apply
-f
adm-secret-system.yaml
kubectl apply
-f
tls-cert-secret-system.yaml
kubectl apply
-f
admin-svc-system.yaml
kubectl apply
-f
nodeport-system.yaml
kubectl apply
-f
varnish-system.yaml
kubectl apply
-f
tls-cert-secret-coffee.yaml
kubectl apply
-f
adm-secret-coffee.yaml
kubectl apply
-f
admin-svc-coffee.yaml
kubectl apply
-f
nodeport-coffee.yaml
kubectl apply
-f
varnish-coffee.yaml
...
...
examples/architectures/cluster-and-ns-wide/nodeport-coffee.yaml
View file @
1753a084
...
...
@@ -10,14 +10,14 @@ metadata:
spec
:
type
:
NodePort
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
80
targetPort
:
80
protocol
:
TCP
name
:
http
-
port
:
443
targetPort
:
443
protocol
:
TCP
name
:
tls
selector
:
app
:
varnish-ingress
publishNotReadyAddresses
:
true
examples/architectures/cluster-and-ns-wide/nodeport-system.yaml
View file @
1753a084
...
...
@@ -10,14 +10,14 @@ metadata:
spec
:
type
:
NodePort
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
80
targetPort
:
80
protocol
:
TCP
name
:
http
-
port
:
443
targetPort
:
443
protocol
:
TCP
name
:
tls
selector
:
app
:
varnish-ingress
publishNotReadyAddresses
:
true
examples/architectures/cluster-and-ns-wide/other-ingress.yaml
View file @
1753a084
...
...
@@ -5,7 +5,7 @@ metadata:
namespace
:
other
annotations
:
kubernetes.io/ingress.class
:
"
varnish"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress
-admin
"
spec
:
backend
:
serviceName
:
other-svc
...
...
examples/architectures/cluster-and-ns-wide/tea-ingress.yaml
View file @
1753a084
...
...
@@ -5,7 +5,7 @@ metadata:
namespace
:
cafe
annotations
:
kubernetes.io/ingress.class
:
"
varnish"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress
-admin
"
spec
:
rules
:
-
host
:
tea.example.com
...
...
examples/architectures/cluster-and-ns-wide/tls-cert-secret-coffee.yaml
0 → 100644
View file @
1753a084
apiVersion
:
v1
kind
:
Secret
metadata
:
name
:
tls-cert
namespace
:
cafe
labels
:
app
:
varnish-ingress
type
:
Opaque
examples/architectures/cluster-and-ns-wide/tls-cert-secret-system.yaml
0 → 100644
View file @
1753a084
apiVersion
:
v1
kind
:
Secret
metadata
:
name
:
tls-cert
namespace
:
kube-system
labels
:
app
:
varnish-ingress
type
:
Opaque
examples/architectures/cluster-and-ns-wide/undeploy.sh
View file @
1753a084
...
...
@@ -10,8 +10,12 @@ kubectl delete -f varnish-coffee.yaml
kubectl delete
-f
nodeport-coffee.yaml
kubectl delete
-f
admin-svc-coffee.yaml
kubectl delete
-f
adm-secret-coffee.yaml
kubectl delete
-f
tls-cert-secret-coffee.yaml
kubectl delete
-f
varnish-system.yaml
kubectl
wait
--timeout
=
2m pod
-l
app
=
varnish-ingress
-n
kube-system
\
...
...
@@ -19,6 +23,10 @@ kubectl wait --timeout=2m pod -l app=varnish-ingress -n kube-system \
kubectl delete
-f
nodeport-system.yaml
kubectl delete
-f
admin-svc-system.yaml
kubectl delete
-f
tls-cert-secret-system.yaml
kubectl delete
-f
adm-secret-system.yaml
kubectl delete
-f
other.yaml
...
...
examples/architectures/cluster-and-ns-wide/varnish-coffee.yaml
View file @
1753a084
...
...
@@ -13,6 +13,8 @@ spec:
labels
:
app
:
varnish-ingress
spec
:
securityContext
:
fsGroup
:
998
containers
:
-
image
:
varnish-ingress/varnish
imagePullPolicy
:
IfNotPresent
...
...
@@ -22,14 +24,14 @@ spec:
containerPort
:
80
-
name
:
k8s
containerPort
:
8080
-
name
:
varnishadm
containerPort
:
6081
volumeMounts
:
-
name
:
adm-secret
mountPath
:
"
/var/run/varnish"
readOnly
:
true
-
name
:
varnish-home
mountPath
:
"
/var/run/varnish-home"
-
name
:
offload
mountPath
:
"
/var/run/offload"
livenessProbe
:
exec
:
command
:
...
...
@@ -44,6 +46,37 @@ spec:
args
:
-
-n
-
/var/run/varnish-home
-
image
:
varnish-ingress/haproxy
imagePullPolicy
:
IfNotPresent
name
:
varnish-ingress-offloader
ports
:
-
name
:
tls
containerPort
:
443
-
name
:
k8s
containerPort
:
8443
volumeMounts
:
-
name
:
tls-cert
mountPath
:
"
/etc/ssl/private"
readOnly
:
true
-
name
:
offload
mountPath
:
"
/var/run/offload"
env
:
-
name
:
SECRET_DATAPLANEAPI
valueFrom
:
secretKeyRef
:
name
:
adm-secret
key
:
dataplaneapi
livenessProbe
:
exec
:
command
:
-
/usr/bin/pgrep
-
-P
-
"
0"
-
haproxy
readinessProbe
:
httpGet
:
path
:
/healthz
port
:
k8s
volumes
:
-
name
:
adm-secret
secret
:
...
...
@@ -51,6 +84,12 @@ spec:
items
:
-
key
:
admin
path
:
_.secret
-
name
:
tls-cert
secret
:
secretName
:
tls-cert
defaultMode
:
0440
-
name
:
varnish-home
emptyDir
:
medium
:
"
Memory"
-
name
:
offload
emptyDir
:
{}
examples/architectures/cluster-and-ns-wide/varnish-system.yaml
View file @
1753a084
...
...
@@ -13,6 +13,8 @@ spec:
labels
:
app
:
varnish-ingress
spec
:
securityContext
:
fsGroup
:
998
containers
:
-
image
:
varnish-ingress/varnish
imagePullPolicy
:
IfNotPresent
...
...
@@ -22,14 +24,14 @@ spec:
containerPort
:
80
-
name
:
k8s
containerPort
:
8080
-
name
:
varnishadm
containerPort
:
6081
volumeMounts
:
-
name
:
adm-secret
mountPath
:
"
/var/run/varnish"
readOnly
:
true
-
name
:
varnish-home
mountPath
:
"
/var/run/varnish-home"
-
name
:
offload
mountPath
:
"
/var/run/offload"
livenessProbe
:
exec
:
command
:
...
...
@@ -44,6 +46,37 @@ spec:
args
:
-
-n
-
/var/run/varnish-home
-
image
:
varnish-ingress/haproxy
imagePullPolicy
:
IfNotPresent
name
:
varnish-ingress-offloader
ports
:
-
name
:
tls
containerPort
:
443
-
name
:
k8s
containerPort
:
8443
volumeMounts
:
-
name
:
tls-cert
mountPath
:
"
/etc/ssl/private"
readOnly
:
true
-
name
:
offload
mountPath
:
"
/var/run/offload"
env
:
-
name
:
SECRET_DATAPLANEAPI
valueFrom
:
secretKeyRef
:
name
:
adm-secret
key
:
dataplaneapi
livenessProbe
:
exec
:
command
:
-
/usr/bin/pgrep
-
-P
-
"
0"
-
haproxy
readinessProbe
:
httpGet
:
path
:
/healthz
port
:
k8s
volumes
:
-
name
:
adm-secret
secret
:
...
...
@@ -51,6 +84,12 @@ spec:
items
:
-
key
:
admin
path
:
_.secret
-
name
:
tls-cert
secret
:
secretName
:
tls-cert
defaultMode
:
0440
-
name
:
varnish-home
emptyDir
:
medium
:
"
Memory"
-
name
:
offload
emptyDir
:
{}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment