Commit beb79350 authored by Geoff Simmons's avatar Geoff Simmons

Update the namespace example to work with new deployments for TLS.

parent 90be6f46
......@@ -8,3 +8,4 @@ metadata:
type: Opaque
data:
admin: XGASQn0dd/oEsWh5WMXUpmKAKNZYnQGsHSmO/nHkv1w=
dataplaneapi: RnJldkhva0JpbAo=
......@@ -6,6 +6,8 @@ kubectl apply -f rbac.yaml
kubectl apply -f adm-secret.yaml
kubectl apply -f tls-cert-secret.yaml
kubectl apply -f varnish.yaml
kubectl apply -f nodeport.yaml
......
apiVersion: v1
kind: Secret
metadata:
namespace: varnish-ingress
name: tls-cert
labels:
app: varnish-ingress
type: Opaque
......@@ -10,6 +10,8 @@ kubectl delete -f nodeport.yaml
kubectl delete -f varnish.yaml
kubectl delete -f tls-cert-secret.yaml
kubectl delete -f adm-secret.yaml
kubectl delete -f rbac.yaml
......
......@@ -13,6 +13,8 @@ spec:
labels:
app: varnish-ingress
spec:
securityContext:
fsGroup: 998
containers:
- image: varnish-ingress/varnish
imagePullPolicy: IfNotPresent
......@@ -22,14 +24,14 @@ spec:
containerPort: 80
- name: k8s
containerPort: 8080
- name: varnishadm
containerPort: 6081
volumeMounts:
- name: adm-secret
mountPath: "/var/run/varnish"
readOnly: true
- name: varnish-home
mountPath: "/var/run/varnish-home"
- name: offload
mountPath: "/var/run/offload"
livenessProbe:
exec:
command:
......@@ -44,6 +46,39 @@ spec:
args:
- -n
- /var/run/varnish-home
- image: varnish-ingress/haproxy
imagePullPolicy: IfNotPresent
name: varnish-ingress-offloader
ports:
- name: tls
containerPort: 443
- name: k8s
containerPort: 8443
- name: dataplane
containerPort: 5555
volumeMounts:
- name: tls-cert
mountPath: "/etc/ssl/private"
readOnly: true
- name: offload
mountPath: "/var/run/offload"
env:
- name: SECRET_DATAPLANEAPI
valueFrom:
secretKeyRef:
name: adm-secret
key: dataplaneapi
livenessProbe:
exec:
command:
- /usr/bin/pgrep
- -P
- "0"
- haproxy
readinessProbe:
httpGet:
path: /healthz
port: k8s
volumes:
- name: adm-secret
secret:
......@@ -51,6 +86,12 @@ spec:
items:
- key: admin
path: _.secret
- name: tls-cert
secret:
secretName: tls-cert
defaultMode: 0440
- name: varnish-home
emptyDir:
medium: "Memory"
- name: offload
emptyDir: {}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment