Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
k8s-ingress
Project
Project
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
3
Merge Requests
3
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Commits
Issue Boards
Open sidebar
uplex-varnish
k8s-ingress
Commits
a098993d
Commit
a098993d
authored
Apr 30, 2020
by
Geoff Simmons
Committed by
Tim Leers
Jul 06, 2020
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update the "cluster-wide and namespace-wide" Ingress example.
parent
d2631764
Changes
14
Show whitespace changes
Inline
Side-by-side
Showing
14 changed files
with
182 additions
and
14 deletions
+182
-14
adm-secret-coffee.yaml
.../architectures/cluster-and-ns-wide/adm-secret-coffee.yaml
+1
-0
adm-secret-system.yaml
.../architectures/cluster-and-ns-wide/adm-secret-system.yaml
+1
-0
admin-svc-coffee.yaml
...s/architectures/cluster-and-ns-wide/admin-svc-coffee.yaml
+28
-0
admin-svc-system.yaml
...s/architectures/cluster-and-ns-wide/admin-svc-system.yaml
+28
-0
deploy.sh
examples/architectures/cluster-and-ns-wide/deploy.sh
+8
-0
nodeport-coffee.yaml
...es/architectures/cluster-and-ns-wide/nodeport-coffee.yaml
+4
-4
nodeport-system.yaml
...es/architectures/cluster-and-ns-wide/nodeport-system.yaml
+4
-4
other-ingress.yaml
...ples/architectures/cluster-and-ns-wide/other-ingress.yaml
+1
-1
tea-ingress.yaml
examples/architectures/cluster-and-ns-wide/tea-ingress.yaml
+1
-1
tls-cert-secret-coffee.yaml
...itectures/cluster-and-ns-wide/tls-cert-secret-coffee.yaml
+8
-0
tls-cert-secret-system.yaml
...itectures/cluster-and-ns-wide/tls-cert-secret-system.yaml
+8
-0
undeploy.sh
examples/architectures/cluster-and-ns-wide/undeploy.sh
+8
-0
varnish-coffee.yaml
...les/architectures/cluster-and-ns-wide/varnish-coffee.yaml
+41
-2
varnish-system.yaml
...les/architectures/cluster-and-ns-wide/varnish-system.yaml
+41
-2
No files found.
examples/architectures/cluster-and-ns-wide/adm-secret-coffee.yaml
View file @
a098993d
...
...
@@ -8,3 +8,4 @@ metadata:
type
:
Opaque
data
:
admin
:
ByIQphD6z6UY3nEXAVS+AlrQUXgzg2dcT1Zd1rG1l4M=
dataplaneapi
:
MmIxNTM3NDMtN2ViMS00ODI0LWE5ZmQtYmU5ODM2Mjc3Zjc3
examples/architectures/cluster-and-ns-wide/adm-secret-system.yaml
View file @
a098993d
...
...
@@ -8,3 +8,4 @@ metadata:
type
:
Opaque
data
:
admin
:
f/y/Vt0O7rnL3m5LM2upu/ImjA6paITHmvYYEQ1Qrfg=
dataplaneapi
:
N2JkMWI5MzUtM2I5YS00NzgyLWI2MjMtOTE5NDE2YzNjMjQ5
examples/architectures/cluster-and-ns-wide/admin-svc-coffee.yaml
0 → 100644
View file @
a098993d
apiVersion
:
v1
kind
:
Service
metadata
:
name
:
varnish-ingress-admin
namespace
:
cafe
labels
:
app
:
varnish-ingress
spec
:
clusterIP
:
None
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
5555
targetPort
:
5555
protocol
:
TCP
name
:
dataplane
-
port
:
5556
targetPort
:
5556
protocol
:
TCP
name
:
faccess
-
port
:
9443
targetPort
:
9443
protocol
:
TCP
name
:
stats
selector
:
app
:
varnish-ingress
examples/architectures/cluster-and-ns-wide/admin-svc-system.yaml
0 → 100644
View file @
a098993d
apiVersion
:
v1
kind
:
Service
metadata
:
name
:
varnish-ingress-admin
namespace
:
kube-system
labels
:
app
:
varnish-ingress
spec
:
clusterIP
:
None
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
5555
targetPort
:
5555
protocol
:
TCP
name
:
dataplane
-
port
:
5556
targetPort
:
5556
protocol
:
TCP
name
:
faccess
-
port
:
9443
targetPort
:
9443
protocol
:
TCP
name
:
stats
selector
:
app
:
varnish-ingress
examples/architectures/cluster-and-ns-wide/deploy.sh
View file @
a098993d
...
...
@@ -10,12 +10,20 @@ kubectl apply -f other.yaml
kubectl apply
-f
adm-secret-system.yaml
kubectl apply
-f
tls-cert-secret-system.yaml
kubectl apply
-f
admin-svc-system.yaml
kubectl apply
-f
nodeport-system.yaml
kubectl apply
-f
varnish-system.yaml
kubectl apply
-f
tls-cert-secret-coffee.yaml
kubectl apply
-f
adm-secret-coffee.yaml
kubectl apply
-f
admin-svc-coffee.yaml
kubectl apply
-f
nodeport-coffee.yaml
kubectl apply
-f
varnish-coffee.yaml
...
...
examples/architectures/cluster-and-ns-wide/nodeport-coffee.yaml
View file @
a098993d
...
...
@@ -10,14 +10,14 @@ metadata:
spec
:
type
:
NodePort
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
80
targetPort
:
80
protocol
:
TCP
name
:
http
-
port
:
443
targetPort
:
443
protocol
:
TCP
name
:
tls
selector
:
app
:
varnish-ingress
publishNotReadyAddresses
:
true
examples/architectures/cluster-and-ns-wide/nodeport-system.yaml
View file @
a098993d
...
...
@@ -10,14 +10,14 @@ metadata:
spec
:
type
:
NodePort
ports
:
-
port
:
6081
targetPort
:
6081
protocol
:
TCP
name
:
varnishadm
-
port
:
80
targetPort
:
80
protocol
:
TCP
name
:
http
-
port
:
443
targetPort
:
443
protocol
:
TCP
name
:
tls
selector
:
app
:
varnish-ingress
publishNotReadyAddresses
:
true
examples/architectures/cluster-and-ns-wide/other-ingress.yaml
View file @
a098993d
...
...
@@ -5,7 +5,7 @@ metadata:
namespace
:
other
annotations
:
kubernetes.io/ingress.class
:
"
varnish"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress
-admin
"
spec
:
backend
:
serviceName
:
other-svc
...
...
examples/architectures/cluster-and-ns-wide/tea-ingress.yaml
View file @
a098993d
...
...
@@ -5,7 +5,7 @@ metadata:
namespace
:
cafe
annotations
:
kubernetes.io/ingress.class
:
"
varnish"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress"
ingress.varnish-cache.org/varnish-svc
:
"
kube-system/varnish-ingress
-admin
"
spec
:
rules
:
-
host
:
tea.example.com
...
...
examples/architectures/cluster-and-ns-wide/tls-cert-secret-coffee.yaml
0 → 100644
View file @
a098993d
apiVersion
:
v1
kind
:
Secret
metadata
:
name
:
tls-cert
namespace
:
cafe
labels
:
app
:
varnish-ingress
type
:
Opaque
examples/architectures/cluster-and-ns-wide/tls-cert-secret-system.yaml
0 → 100644
View file @
a098993d
apiVersion
:
v1
kind
:
Secret
metadata
:
name
:
tls-cert
namespace
:
kube-system
labels
:
app
:
varnish-ingress
type
:
Opaque
examples/architectures/cluster-and-ns-wide/undeploy.sh
View file @
a098993d
...
...
@@ -10,8 +10,12 @@ kubectl delete -f varnish-coffee.yaml
kubectl delete
-f
nodeport-coffee.yaml
kubectl delete
-f
admin-svc-coffee.yaml
kubectl delete
-f
adm-secret-coffee.yaml
kubectl delete
-f
tls-cert-secret-coffee.yaml
kubectl delete
-f
varnish-system.yaml
kubectl
wait
--timeout
=
2m pod
-l
app
=
varnish-ingress
-n
kube-system
\
...
...
@@ -19,6 +23,10 @@ kubectl wait --timeout=2m pod -l app=varnish-ingress -n kube-system \
kubectl delete
-f
nodeport-system.yaml
kubectl delete
-f
admin-svc-system.yaml
kubectl delete
-f
tls-cert-secret-system.yaml
kubectl delete
-f
adm-secret-system.yaml
kubectl delete
-f
other.yaml
...
...
examples/architectures/cluster-and-ns-wide/varnish-coffee.yaml
View file @
a098993d
...
...
@@ -13,6 +13,8 @@ spec:
labels
:
app
:
varnish-ingress
spec
:
securityContext
:
fsGroup
:
998
containers
:
-
image
:
varnish-ingress/varnish
imagePullPolicy
:
IfNotPresent
...
...
@@ -22,14 +24,14 @@ spec:
containerPort
:
80
-
name
:
k8s
containerPort
:
8080
-
name
:
varnishadm
containerPort
:
6081
volumeMounts
:
-
name
:
adm-secret
mountPath
:
"
/var/run/varnish"
readOnly
:
true
-
name
:
varnish-home
mountPath
:
"
/var/run/varnish-home"
-
name
:
offload
mountPath
:
"
/var/run/offload"
livenessProbe
:
exec
:
command
:
...
...
@@ -44,6 +46,37 @@ spec:
args
:
-
-n
-
/var/run/varnish-home
-
image
:
varnish-ingress/haproxy
imagePullPolicy
:
IfNotPresent
name
:
varnish-ingress-offloader
ports
:
-
name
:
tls
containerPort
:
443
-
name
:
k8s
containerPort
:
8443
volumeMounts
:
-
name
:
tls-cert
mountPath
:
"
/etc/ssl/private"
readOnly
:
true
-
name
:
offload
mountPath
:
"
/var/run/offload"
env
:
-
name
:
SECRET_DATAPLANEAPI
valueFrom
:
secretKeyRef
:
name
:
adm-secret
key
:
dataplaneapi
livenessProbe
:
exec
:
command
:
-
/usr/bin/pgrep
-
-P
-
"
0"
-
haproxy
readinessProbe
:
httpGet
:
path
:
/healthz
port
:
k8s
volumes
:
-
name
:
adm-secret
secret
:
...
...
@@ -51,6 +84,12 @@ spec:
items
:
-
key
:
admin
path
:
_.secret
-
name
:
tls-cert
secret
:
secretName
:
tls-cert
defaultMode
:
0440
-
name
:
varnish-home
emptyDir
:
medium
:
"
Memory"
-
name
:
offload
emptyDir
:
{}
examples/architectures/cluster-and-ns-wide/varnish-system.yaml
View file @
a098993d
...
...
@@ -13,6 +13,8 @@ spec:
labels
:
app
:
varnish-ingress
spec
:
securityContext
:
fsGroup
:
998
containers
:
-
image
:
varnish-ingress/varnish
imagePullPolicy
:
IfNotPresent
...
...
@@ -22,14 +24,14 @@ spec:
containerPort
:
80
-
name
:
k8s
containerPort
:
8080
-
name
:
varnishadm
containerPort
:
6081
volumeMounts
:
-
name
:
adm-secret
mountPath
:
"
/var/run/varnish"
readOnly
:
true
-
name
:
varnish-home
mountPath
:
"
/var/run/varnish-home"
-
name
:
offload
mountPath
:
"
/var/run/offload"
livenessProbe
:
exec
:
command
:
...
...
@@ -44,6 +46,37 @@ spec:
args
:
-
-n
-
/var/run/varnish-home
-
image
:
varnish-ingress/haproxy
imagePullPolicy
:
IfNotPresent
name
:
varnish-ingress-offloader
ports
:
-
name
:
tls
containerPort
:
443
-
name
:
k8s
containerPort
:
8443
volumeMounts
:
-
name
:
tls-cert
mountPath
:
"
/etc/ssl/private"
readOnly
:
true
-
name
:
offload
mountPath
:
"
/var/run/offload"
env
:
-
name
:
SECRET_DATAPLANEAPI
valueFrom
:
secretKeyRef
:
name
:
adm-secret
key
:
dataplaneapi
livenessProbe
:
exec
:
command
:
-
/usr/bin/pgrep
-
-P
-
"
0"
-
haproxy
readinessProbe
:
httpGet
:
path
:
/healthz
port
:
k8s
volumes
:
-
name
:
adm-secret
secret
:
...
...
@@ -51,6 +84,12 @@ spec:
items
:
-
key
:
admin
path
:
_.secret
-
name
:
tls-cert
secret
:
secretName
:
tls-cert
defaultMode
:
0440
-
name
:
varnish-home
emptyDir
:
medium
:
"
Memory"
-
name
:
offload
emptyDir
:
{}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment