Update helm templates to match new chart name
This commit is contained in:
parent
cfebfe4c99
commit
710f1f2601
41 changed files with 170 additions and 171 deletions
|
@ -19,3 +19,4 @@
|
||||||
.project
|
.project
|
||||||
.idea/
|
.idea/
|
||||||
*.tmproj
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
name: ingress-nginx
|
name: ingress-nginx
|
||||||
version: 1.32.0
|
version: 2.0.0
|
||||||
appVersion: 0.30.0
|
appVersion: 0.30.0
|
||||||
home: https://github.com/kubernetes/ingress-nginx
|
home: https://github.com/kubernetes/ingress-nginx
|
||||||
description: An nginx Ingress controller that uses ConfigMap to store the nginx configuration.
|
description: An nginx Ingress controller that uses ConfigMap to store the nginx configuration.
|
||||||
|
@ -12,7 +12,5 @@ sources:
|
||||||
- https://github.com/kubernetes/ingress-nginx
|
- https://github.com/kubernetes/ingress-nginx
|
||||||
maintainers:
|
maintainers:
|
||||||
- name: ChiefAlexander
|
- name: ChiefAlexander
|
||||||
- name: taharah
|
|
||||||
email: Trevor.G.Wood@gmail.com
|
|
||||||
engine: gotpl
|
engine: gotpl
|
||||||
kubeVersion: ">=1.10.0-0"
|
kubeVersion: ">=1.10.0-0"
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
The nginx-ingress controller has been installed.
|
The ingress-nginx controller has been installed.
|
||||||
|
|
||||||
{{- if contains "NodePort" .Values.controller.service.type }}
|
{{- if contains "NodePort" .Values.controller.service.type }}
|
||||||
Get the application URL by running these commands:
|
Get the application URL by running these commands:
|
||||||
|
@ -6,12 +6,12 @@ Get the application URL by running these commands:
|
||||||
{{- if (not (empty .Values.controller.service.nodePorts.http)) }}
|
{{- if (not (empty .Values.controller.service.nodePorts.http)) }}
|
||||||
export HTTP_NODE_PORT={{ .Values.controller.service.nodePorts.http }}
|
export HTTP_NODE_PORT={{ .Values.controller.service.nodePorts.http }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
export HTTP_NODE_PORT=$(kubectl --namespace {{ .Release.Namespace }} get services -o jsonpath="{.spec.ports[0].nodePort}" {{ template "nginx-ingress.controller.fullname" . }})
|
export HTTP_NODE_PORT=$(kubectl --namespace {{ .Release.Namespace }} get services -o jsonpath="{.spec.ports[0].nodePort}" {{ template "ingress-nginx.controller.fullname" . }})
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if (not (empty .Values.controller.service.nodePorts.https)) }}
|
{{- if (not (empty .Values.controller.service.nodePorts.https)) }}
|
||||||
export HTTPS_NODE_PORT={{ .Values.controller.service.nodePorts.https }}
|
export HTTPS_NODE_PORT={{ .Values.controller.service.nodePorts.https }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
export HTTPS_NODE_PORT=$(kubectl --namespace {{ .Release.Namespace }} get services -o jsonpath="{.spec.ports[1].nodePort}" {{ template "nginx-ingress.controller.fullname" . }})
|
export HTTPS_NODE_PORT=$(kubectl --namespace {{ .Release.Namespace }} get services -o jsonpath="{.spec.ports[1].nodePort}" {{ template "ingress-nginx.controller.fullname" . }})
|
||||||
{{- end }}
|
{{- end }}
|
||||||
export NODE_IP=$(kubectl --namespace {{ .Release.Namespace }} get nodes -o jsonpath="{.items[0].status.addresses[1].address}")
|
export NODE_IP=$(kubectl --namespace {{ .Release.Namespace }} get nodes -o jsonpath="{.items[0].status.addresses[1].address}")
|
||||||
|
|
||||||
|
@ -19,10 +19,10 @@ Get the application URL by running these commands:
|
||||||
echo "Visit https://$NODE_IP:$HTTPS_NODE_PORT to access your application via HTTPS."
|
echo "Visit https://$NODE_IP:$HTTPS_NODE_PORT to access your application via HTTPS."
|
||||||
{{- else if contains "LoadBalancer" .Values.controller.service.type }}
|
{{- else if contains "LoadBalancer" .Values.controller.service.type }}
|
||||||
It may take a few minutes for the LoadBalancer IP to be available.
|
It may take a few minutes for the LoadBalancer IP to be available.
|
||||||
You can watch the status by running 'kubectl --namespace {{ .Release.Namespace }} get services -o wide -w {{ template "nginx-ingress.controller.fullname" . }}'
|
You can watch the status by running 'kubectl --namespace {{ .Release.Namespace }} get services -o wide -w {{ template "ingress-nginx.controller.fullname" . }}'
|
||||||
{{- else if contains "ClusterIP" .Values.controller.service.type }}
|
{{- else if contains "ClusterIP" .Values.controller.service.type }}
|
||||||
Get the application URL by running these commands:
|
Get the application URL by running these commands:
|
||||||
export POD_NAME=$(kubectl --namespace {{ .Release.Namespace }} get pods -o jsonpath="{.items[0].metadata.name}" -l "app={{ template "nginx-ingress.name" . }},component={{ .Values.controller.name }},release={{ .Release.Name }}")
|
export POD_NAME=$(kubectl --namespace {{ .Release.Namespace }} get pods -o jsonpath="{.items[0].metadata.name}" -l "app={{ template "ingress-nginx.name" . }},component={{ .Values.controller.name }},release={{ .Release.Name }}")
|
||||||
kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:80
|
kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:80
|
||||||
echo "Visit http://127.0.0.1:8080 to access your application."
|
echo "Visit http://127.0.0.1:8080 to access your application."
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,14 +2,14 @@
|
||||||
{{/*
|
{{/*
|
||||||
Expand the name of the chart.
|
Expand the name of the chart.
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.name" -}}
|
{{- define "ingress-nginx.name" -}}
|
||||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create chart name and version as used by the chart label.
|
Create chart name and version as used by the chart label.
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.chart" -}}
|
{{- define "ingress-nginx.chart" -}}
|
||||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
|
@ -17,7 +17,7 @@ Create chart name and version as used by the chart label.
|
||||||
Create a default fully qualified app name.
|
Create a default fully qualified app name.
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.fullname" -}}
|
{{- define "ingress-nginx.fullname" -}}
|
||||||
{{- if .Values.fullnameOverride -}}
|
{{- if .Values.fullnameOverride -}}
|
||||||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
|
@ -34,8 +34,8 @@ We truncate at 63 chars because some Kubernetes name fields are limited to this
|
||||||
Create a default fully qualified controller name.
|
Create a default fully qualified controller name.
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.controller.fullname" -}}
|
{{- define "ingress-nginx.controller.fullname" -}}
|
||||||
{{- printf "%s-%s" (include "nginx-ingress.fullname" .) .Values.controller.name | trunc 63 | trimSuffix "-" -}}
|
{{- printf "%s-%s" (include "ingress-nginx.fullname" .) .Values.controller.name | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
|
@ -47,8 +47,8 @@ service generated.
|
||||||
Users can provide an override for an explicit service they want bound via `.Values.controller.publishService.pathOverride`
|
Users can provide an override for an explicit service they want bound via `.Values.controller.publishService.pathOverride`
|
||||||
|
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.controller.publishServicePath" -}}
|
{{- define "ingress-nginx.controller.publishServicePath" -}}
|
||||||
{{- $defServiceName := printf "%s/%s" .Release.Namespace (include "nginx-ingress.controller.fullname" .) -}}
|
{{- $defServiceName := printf "%s/%s" .Release.Namespace (include "ingress-nginx.controller.fullname" .) -}}
|
||||||
{{- $servicePath := default $defServiceName .Values.controller.publishService.pathOverride }}
|
{{- $servicePath := default $defServiceName .Values.controller.publishService.pathOverride }}
|
||||||
{{- print $servicePath | trimSuffix "-" -}}
|
{{- print $servicePath | trimSuffix "-" -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
@ -57,16 +57,16 @@ Users can provide an override for an explicit service they want bound via `.Valu
|
||||||
Create a default fully qualified default backend name.
|
Create a default fully qualified default backend name.
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.defaultBackend.fullname" -}}
|
{{- define "ingress-nginx.defaultBackend.fullname" -}}
|
||||||
{{- printf "%s-%s" (include "nginx-ingress.fullname" .) .Values.defaultBackend.name | trunc 63 | trimSuffix "-" -}}
|
{{- printf "%s-%s" (include "ingress-nginx.fullname" .) .Values.defaultBackend.name | trunc 63 | trimSuffix "-" -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Common labels
|
Common labels
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.labels" -}}
|
{{- define "ingress-nginx.labels" -}}
|
||||||
helm.sh/chart: {{ include "nginx-ingress.chart" . }}
|
helm.sh/chart: {{ include "ingress-nginx.chart" . }}
|
||||||
{{ include "nginx-ingress.selectorLabels" . }}
|
{{ include "ingress-nginx.selectorLabels" . }}
|
||||||
{{- if .Chart.AppVersion }}
|
{{- if .Chart.AppVersion }}
|
||||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -76,17 +76,17 @@ app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
{{/*
|
{{/*
|
||||||
Selector labels
|
Selector labels
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.selectorLabels" -}}
|
{{- define "ingress-nginx.selectorLabels" -}}
|
||||||
app.kubernetes.io/name: {{ include "nginx-ingress.name" . }}
|
app.kubernetes.io/name: {{ include "ingress-nginx.name" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create the name of the controller service account to use
|
Create the name of the controller service account to use
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.serviceAccountName" -}}
|
{{- define "ingress-nginx.serviceAccountName" -}}
|
||||||
{{- if .Values.serviceAccount.create -}}
|
{{- if .Values.serviceAccount.create -}}
|
||||||
{{ default (include "nginx-ingress.fullname" .) .Values.serviceAccount.name }}
|
{{ default (include "ingress-nginx.fullname" .) .Values.serviceAccount.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccount.name }}
|
{{ default "default" .Values.serviceAccount.name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
@ -95,9 +95,9 @@ Create the name of the controller service account to use
|
||||||
{{/*
|
{{/*
|
||||||
Create the name of the backend service account to use - only used when podsecuritypolicy is also enabled
|
Create the name of the backend service account to use - only used when podsecuritypolicy is also enabled
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "nginx-ingress.defaultBackend.serviceAccountName" -}}
|
{{- define "ingress-nginx.defaultBackend.serviceAccountName" -}}
|
||||||
{{- if .Values.defaultBackend.serviceAccount.create -}}
|
{{- if .Values.defaultBackend.serviceAccount.create -}}
|
||||||
{{ default (printf "%s-backend" (include "nginx-ingress.fullname" .)) .Values.defaultBackend.serviceAccount.name }}
|
{{ default (printf "%s-backend" (include "ingress-nginx.fullname" .)) .Values.defaultBackend.serviceAccount.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default-backend" .Values.defaultBackend.serviceAccount.name }}
|
{{ default "default-backend" .Values.defaultBackend.serviceAccount.name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -3,9 +3,9 @@ apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-custom-add-headers
|
name: {{ include "ingress-nginx.fullname" . }}-custom-add-headers
|
||||||
data:
|
data:
|
||||||
{{ toYaml .Values.controller.addHeaders | indent 2 }}
|
{{ toYaml .Values.controller.addHeaders | indent 2 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,13 +2,13 @@
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- admissionregistration.k8s.io
|
- admissionregistration.k8s.io
|
||||||
|
@ -22,6 +22,6 @@ rules:
|
||||||
resources: ['podsecuritypolicies']
|
resources: ['podsecuritypolicies']
|
||||||
verbs: ['use']
|
verbs: ['use']
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- {{ include "nginx-ingress.fullname" . }}-admission
|
- {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,19 +2,19 @@
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,13 +2,13 @@
|
||||||
apiVersion: batch/v1
|
apiVersion: batch/v1
|
||||||
kind: Job
|
kind: Job
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission-create
|
name: {{ include "ingress-nginx.fullname" . }}-admission-create
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
spec:
|
spec:
|
||||||
{{- if .Capabilities.APIVersions.Has "batch/v1alpha1" }}
|
{{- if .Capabilities.APIVersions.Has "batch/v1alpha1" }}
|
||||||
# Alpha feature since k8s 1.12
|
# Alpha feature since k8s 1.12
|
||||||
|
@ -16,14 +16,14 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission-create
|
name: {{ include "ingress-nginx.fullname" . }}-admission-create
|
||||||
{{- with .Values.controller.admissionWebhooks.patch.podAnnotations }}
|
{{- with .Values.controller.admissionWebhooks.patch.podAnnotations }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 8 }}
|
{{- include "ingress-nginx.labels" . | nindent 8 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
spec:
|
spec:
|
||||||
{{- if .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
{{- if .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
||||||
priorityClassName: {{ .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
priorityClassName: {{ .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
||||||
|
@ -34,11 +34,11 @@ spec:
|
||||||
imagePullPolicy: {{ .Values.controller.admissionWebhooks.patch.image.pullPolicy }}
|
imagePullPolicy: {{ .Values.controller.admissionWebhooks.patch.image.pullPolicy }}
|
||||||
args:
|
args:
|
||||||
- create
|
- create
|
||||||
- --host={{ template "nginx-ingress.controller.fullname" . }}-admission,{{ template "nginx-ingress.controller.fullname" . }}-admission.{{ .Release.Namespace }}.svc
|
- --host={{ template "ingress-nginx.controller.fullname" . }}-admission,{{ template "ingress-nginx.controller.fullname" . }}-admission.{{ .Release.Namespace }}.svc
|
||||||
- --namespace={{ .Release.Namespace }}
|
- --namespace={{ .Release.Namespace }}
|
||||||
- --secret-name={{ template "nginx-ingress.fullname". }}-admission
|
- --secret-name={{ template "ingress-nginx.fullname". }}-admission
|
||||||
restartPolicy: OnFailure
|
restartPolicy: OnFailure
|
||||||
serviceAccountName: {{ include "nginx-ingress.fullname" . }}-admission
|
serviceAccountName: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
{{- with .Values.controller.admissionWebhooks.patch.nodeSelector }}
|
{{- with .Values.controller.admissionWebhooks.patch.nodeSelector }}
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
|
|
|
@ -2,13 +2,13 @@
|
||||||
apiVersion: batch/v1
|
apiVersion: batch/v1
|
||||||
kind: Job
|
kind: Job
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission-patch
|
name: {{ include "ingress-nginx.fullname" . }}-admission-patch
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": post-install,post-upgrade
|
"helm.sh/hook": post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
spec:
|
spec:
|
||||||
{{- if .Capabilities.APIVersions.Has "batch/v1alpha1" }}
|
{{- if .Capabilities.APIVersions.Has "batch/v1alpha1" }}
|
||||||
# Alpha feature since k8s 1.12
|
# Alpha feature since k8s 1.12
|
||||||
|
@ -16,14 +16,14 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission-patch
|
name: {{ include "ingress-nginx.fullname" . }}-admission-patch
|
||||||
{{- with .Values.controller.admissionWebhooks.patch.podAnnotations }}
|
{{- with .Values.controller.admissionWebhooks.patch.podAnnotations }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 8 }}
|
{{- include "ingress-nginx.labels" . | nindent 8 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
spec:
|
spec:
|
||||||
{{- if .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
{{- if .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
||||||
priorityClassName: {{ .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
priorityClassName: {{ .Values.controller.admissionWebhooks.patch.priorityClassName }}
|
||||||
|
@ -34,13 +34,13 @@ spec:
|
||||||
imagePullPolicy: {{ .Values.controller.admissionWebhooks.patch.pullPolicy }}
|
imagePullPolicy: {{ .Values.controller.admissionWebhooks.patch.pullPolicy }}
|
||||||
args:
|
args:
|
||||||
- patch
|
- patch
|
||||||
- --webhook-name={{ include "nginx-ingress.fullname" . }}-admission
|
- --webhook-name={{ include "ingress-nginx.fullname" . }}-admission
|
||||||
- --namespace={{ .Release.Namespace }}
|
- --namespace={{ .Release.Namespace }}
|
||||||
- --patch-mutating=false
|
- --patch-mutating=false
|
||||||
- --secret-name={{ template "nginx-ingress.fullname". }}-admission
|
- --secret-name={{ template "ingress-nginx.fullname". }}-admission
|
||||||
- --patch-failure-policy={{ .Values.controller.admissionWebhooks.failurePolicy }}
|
- --patch-failure-policy={{ .Values.controller.admissionWebhooks.failurePolicy }}
|
||||||
restartPolicy: OnFailure
|
restartPolicy: OnFailure
|
||||||
serviceAccountName: {{ include "nginx-ingress.fullname" . }}-admission
|
serviceAccountName: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
{{- with .Values.controller.admissionWebhooks.patch.nodeSelector }}
|
{{- with .Values.controller.admissionWebhooks.patch.nodeSelector }}
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
|
|
|
@ -2,13 +2,13 @@
|
||||||
apiVersion: policy/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
spec:
|
spec:
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
fsGroup:
|
fsGroup:
|
||||||
|
|
|
@ -2,13 +2,13 @@
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: Role
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- ""
|
- ""
|
||||||
|
|
|
@ -2,19 +2,19 @@
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: Role
|
kind: Role
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,11 +2,11 @@
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
annotations:
|
annotations:
|
||||||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: admission-webhook
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,9 +3,9 @@ apiVersion: admissionregistration.k8s.io/v1beta1
|
||||||
kind: ValidatingWebhookConfiguration
|
kind: ValidatingWebhookConfiguration
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: admission-webhook
|
app.kubernetes.io/component: admission-webhook
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-admission
|
name: {{ include "ingress-nginx.fullname" . }}-admission
|
||||||
webhooks:
|
webhooks:
|
||||||
- name: validate.nginx.ingress.kubernetes.io
|
- name: validate.nginx.ingress.kubernetes.io
|
||||||
rules:
|
rules:
|
||||||
|
@ -23,6 +23,6 @@ webhooks:
|
||||||
clientConfig:
|
clientConfig:
|
||||||
service:
|
service:
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}-admission
|
name: {{ template "ingress-nginx.controller.fullname" . }}-admission
|
||||||
path: /extensions/v1beta1/ingresses
|
path: /extensions/v1beta1/ingresses
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,8 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- ""
|
- ""
|
||||||
|
|
|
@ -3,14 +3,14 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "nginx-ingress.serviceAccountName" . }}
|
name: {{ template "ingress-nginx.serviceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -3,17 +3,17 @@ apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml .Values.controller.configAnnotations | indent 4}}
|
{{ toYaml .Values.controller.configAnnotations | indent 4}}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
data:
|
data:
|
||||||
{{- if .Values.controller.addHeaders }}
|
{{- if .Values.controller.addHeaders }}
|
||||||
add-headers: {{ .Release.Namespace }}/{{ include "nginx-ingress.fullname" . }}-custom-add-headers
|
add-headers: {{ .Release.Namespace }}/{{ include "ingress-nginx.fullname" . }}-custom-add-headers
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if or .Values.controller.proxySetHeaders .Values.controller.headers }}
|
{{- if or .Values.controller.proxySetHeaders .Values.controller.headers }}
|
||||||
proxy-set-headers: {{ .Release.Namespace }}/{{ include "nginx-ingress.fullname" . }}-custom-proxy-headers
|
proxy-set-headers: {{ .Release.Namespace }}/{{ include "ingress-nginx.fullname" . }}-custom-proxy-headers
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.controller.config }}
|
{{- if .Values.controller.config }}
|
||||||
{{ toYaml .Values.controller.config | indent 2 }}
|
{{ toYaml .Values.controller.config | indent 2 }}
|
||||||
|
|
|
@ -5,15 +5,15 @@ apiVersion: {{ template "deployment.apiVersion" . }}
|
||||||
kind: DaemonSet
|
kind: DaemonSet
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml .Values.controller.deploymentAnnotations | indent 4}}
|
{{ toYaml .Values.controller.deploymentAnnotations | indent 4}}
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 6 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 6 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
revisionHistoryLimit: {{ .Values.revisionHistoryLimit }}
|
revisionHistoryLimit: {{ .Values.revisionHistoryLimit }}
|
||||||
updateStrategy:
|
updateStrategy:
|
||||||
|
@ -28,7 +28,7 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 8 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 8 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
{{- if .Values.controller.podLabels }}
|
{{- if .Values.controller.podLabels }}
|
||||||
{{ toYaml .Values.controller.podLabels | indent 8}}
|
{{ toYaml .Values.controller.podLabels | indent 8}}
|
||||||
|
@ -51,7 +51,7 @@ spec:
|
||||||
{{ toYaml .Values.controller.podSecurityContext | indent 8 }}
|
{{ toYaml .Values.controller.podSecurityContext | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
containers:
|
containers:
|
||||||
- name: {{ template "nginx-ingress.name" . }}-{{ .Values.controller.name }}
|
- name: {{ template "ingress-nginx.name" . }}-{{ .Values.controller.name }}
|
||||||
image: "{{ .Values.controller.image.repository }}:{{ .Values.controller.image.tag }}"
|
image: "{{ .Values.controller.image.repository }}:{{ .Values.controller.image.tag }}"
|
||||||
imagePullPolicy: "{{ .Values.controller.image.pullPolicy }}"
|
imagePullPolicy: "{{ .Values.controller.image.pullPolicy }}"
|
||||||
{{- if .Values.controller.lifecycle }}
|
{{- if .Values.controller.lifecycle }}
|
||||||
|
@ -61,7 +61,7 @@ spec:
|
||||||
args:
|
args:
|
||||||
- /nginx-ingress-controller
|
- /nginx-ingress-controller
|
||||||
{{- if .Values.defaultBackend.enabled }}
|
{{- if .Values.defaultBackend.enabled }}
|
||||||
- --default-backend-service={{ .Release.Namespace }}/{{ template "nginx-ingress.defaultBackend.fullname" . }}
|
- --default-backend-service={{ .Release.Namespace }}/{{ template "ingress-nginx.defaultBackend.fullname" . }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
{{- if (semverCompare "<0.21.0" .Values.controller.image.tag) }}
|
{{- if (semverCompare "<0.21.0" .Values.controller.image.tag) }}
|
||||||
- --default-backend-service={{ required ".Values.controller.defaultBackendService is required if .Values.defaultBackend.enabled=false and .Values.controller.image.tag < 0.21.0" .Values.controller.defaultBackendService }}
|
- --default-backend-service={{ required ".Values.controller.defaultBackendService is required if .Values.defaultBackend.enabled=false and .Values.controller.image.tag < 0.21.0" .Values.controller.defaultBackendService }}
|
||||||
|
@ -70,7 +70,7 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if and (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) .Values.controller.publishService.enabled }}
|
{{- if and (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) .Values.controller.publishService.enabled }}
|
||||||
- --publish-service={{ template "nginx-ingress.controller.publishServicePath" . }}
|
- --publish-service={{ template "ingress-nginx.controller.publishServicePath" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
||||||
- --election-id={{ .Values.controller.electionID }}
|
- --election-id={{ .Values.controller.electionID }}
|
||||||
|
@ -79,15 +79,15 @@ spec:
|
||||||
- --ingress-class={{ .Values.controller.ingressClass }}
|
- --ingress-class={{ .Values.controller.ingressClass }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
||||||
- --configmap={{ .Release.Namespace }}/{{ template "nginx-ingress.controller.fullname" . }}
|
- --configmap={{ .Release.Namespace }}/{{ template "ingress-nginx.controller.fullname" . }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
- --nginx-configmap={{ .Release.Namespace }}/{{ template "nginx-ingress.controller.fullname" . }}
|
- --nginx-configmap={{ .Release.Namespace }}/{{ template "ingress-nginx.controller.fullname" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.tcp }}
|
{{- if .Values.tcp }}
|
||||||
- --tcp-services-configmap={{ .Release.Namespace }}/{{ include "nginx-ingress.fullname" . }}-tcp
|
- --tcp-services-configmap={{ .Release.Namespace }}/{{ include "ingress-nginx.fullname" . }}-tcp
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.udp }}
|
{{- if .Values.udp }}
|
||||||
- --udp-services-configmap={{ .Release.Namespace }}/{{ include "nginx-ingress.fullname" . }}-udp
|
- --udp-services-configmap={{ .Release.Namespace }}/{{ include "ingress-nginx.fullname" . }}-udp
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.controller.scope.enabled }}
|
{{- if .Values.controller.scope.enabled }}
|
||||||
- --watch-namespace={{ default .Release.Namespace .Values.controller.scope.namespace }}
|
- --watch-namespace={{ default .Release.Namespace .Values.controller.scope.namespace }}
|
||||||
|
@ -225,7 +225,7 @@ spec:
|
||||||
affinity:
|
affinity:
|
||||||
{{ toYaml .Values.controller.affinity | indent 8 }}
|
{{ toYaml .Values.controller.affinity | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
serviceAccountName: {{ template "nginx-ingress.serviceAccountName" . }}
|
serviceAccountName: {{ template "ingress-nginx.serviceAccountName" . }}
|
||||||
terminationGracePeriodSeconds: 60
|
terminationGracePeriodSeconds: 60
|
||||||
{{- if (or .Values.controller.customTemplate.configMapName .Values.controller.extraVolumeMounts .Values.controller.admissionWebhooks.enabled .Values.controller.extraVolumes) }}
|
{{- if (or .Values.controller.customTemplate.configMapName .Values.controller.extraVolumeMounts .Values.controller.admissionWebhooks.enabled .Values.controller.extraVolumes) }}
|
||||||
volumes:
|
volumes:
|
||||||
|
@ -241,7 +241,7 @@ spec:
|
||||||
{{- if .Values.controller.admissionWebhooks.enabled }}
|
{{- if .Values.controller.admissionWebhooks.enabled }}
|
||||||
- name: webhook-cert
|
- name: webhook-cert
|
||||||
secret:
|
secret:
|
||||||
secretName: {{ template "nginx-ingress.fullname". }}-admission
|
secretName: {{ template "ingress-nginx.fullname". }}-admission
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.controller.extraVolumes }}
|
{{- if .Values.controller.extraVolumes }}
|
||||||
{{ toYaml .Values.controller.extraVolumes | indent 8}}
|
{{ toYaml .Values.controller.extraVolumes | indent 8}}
|
||||||
|
|
|
@ -3,15 +3,15 @@ apiVersion: {{ template "deployment.apiVersion" . }}
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml .Values.controller.deploymentAnnotations | indent 4}}
|
{{ toYaml .Values.controller.deploymentAnnotations | indent 4}}
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 6 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 6 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
{{- if not .Values.controller.autoscaling.enabled }}
|
{{- if not .Values.controller.autoscaling.enabled }}
|
||||||
replicas: {{ .Values.controller.replicaCount }}
|
replicas: {{ .Values.controller.replicaCount }}
|
||||||
|
@ -29,7 +29,7 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 8 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 8 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
{{- if .Values.controller.podLabels }}
|
{{- if .Values.controller.podLabels }}
|
||||||
{{ toYaml .Values.controller.podLabels | indent 8 }}
|
{{ toYaml .Values.controller.podLabels | indent 8 }}
|
||||||
|
@ -52,7 +52,7 @@ spec:
|
||||||
{{ toYaml .Values.controller.podSecurityContext | indent 8 }}
|
{{ toYaml .Values.controller.podSecurityContext | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
containers:
|
containers:
|
||||||
- name: {{ template "nginx-ingress.name" . }}-{{ .Values.controller.name }}
|
- name: {{ template "ingress-nginx.name" . }}-{{ .Values.controller.name }}
|
||||||
image: "{{ .Values.controller.image.repository }}:{{ .Values.controller.image.tag }}"
|
image: "{{ .Values.controller.image.repository }}:{{ .Values.controller.image.tag }}"
|
||||||
imagePullPolicy: "{{ .Values.controller.image.pullPolicy }}"
|
imagePullPolicy: "{{ .Values.controller.image.pullPolicy }}"
|
||||||
{{- if .Values.controller.lifecycle }}
|
{{- if .Values.controller.lifecycle }}
|
||||||
|
@ -62,7 +62,7 @@ spec:
|
||||||
args:
|
args:
|
||||||
- /nginx-ingress-controller
|
- /nginx-ingress-controller
|
||||||
{{- if .Values.defaultBackend.enabled }}
|
{{- if .Values.defaultBackend.enabled }}
|
||||||
- --default-backend-service={{ .Release.Namespace }}/{{ template "nginx-ingress.defaultBackend.fullname" . }}
|
- --default-backend-service={{ .Release.Namespace }}/{{ template "ingress-nginx.defaultBackend.fullname" . }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
{{- if (semverCompare "<0.21.0" .Values.controller.image.tag) }}
|
{{- if (semverCompare "<0.21.0" .Values.controller.image.tag) }}
|
||||||
- --default-backend-service={{ required ".Values.controller.defaultBackendService is required if .Values.defaultBackend.enabled=false and .Values.controller.image.tag < 0.21.0" .Values.controller.defaultBackendService }}
|
- --default-backend-service={{ required ".Values.controller.defaultBackendService is required if .Values.defaultBackend.enabled=false and .Values.controller.image.tag < 0.21.0" .Values.controller.defaultBackendService }}
|
||||||
|
@ -71,7 +71,7 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if and (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) .Values.controller.publishService.enabled }}
|
{{- if and (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) .Values.controller.publishService.enabled }}
|
||||||
- --publish-service={{ template "nginx-ingress.controller.publishServicePath" . }}
|
- --publish-service={{ template "ingress-nginx.controller.publishServicePath" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
||||||
- --election-id={{ .Values.controller.electionID }}
|
- --election-id={{ .Values.controller.electionID }}
|
||||||
|
@ -80,15 +80,15 @@ spec:
|
||||||
- --ingress-class={{ .Values.controller.ingressClass }}
|
- --ingress-class={{ .Values.controller.ingressClass }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
{{- if (semverCompare ">=0.9.0-beta.1" .Values.controller.image.tag) }}
|
||||||
- --configmap={{ default .Release.Namespace .Values.controller.configMapNamespace }}/{{ template "nginx-ingress.controller.fullname" . }}
|
- --configmap={{ default .Release.Namespace .Values.controller.configMapNamespace }}/{{ template "ingress-nginx.controller.fullname" . }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
- --nginx-configmap={{ default .Release.Namespace .Values.controller.configMapNamespace }}/{{ template "nginx-ingress.controller.fullname" . }}
|
- --nginx-configmap={{ default .Release.Namespace .Values.controller.configMapNamespace }}/{{ template "ingress-nginx.controller.fullname" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.tcp }}
|
{{- if .Values.tcp }}
|
||||||
- --tcp-services-configmap={{ default .Release.Namespace .Values.controller.tcp.configMapNamespace }}/{{ include "nginx-ingress.fullname" . }}-tcp
|
- --tcp-services-configmap={{ default .Release.Namespace .Values.controller.tcp.configMapNamespace }}/{{ include "ingress-nginx.fullname" . }}-tcp
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.udp }}
|
{{- if .Values.udp }}
|
||||||
- --udp-services-configmap={{ default .Release.Namespace .Values.controller.udp.configMapNamespace }}/{{ include "nginx-ingress.fullname" . }}-udp
|
- --udp-services-configmap={{ default .Release.Namespace .Values.controller.udp.configMapNamespace }}/{{ include "ingress-nginx.fullname" . }}-udp
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.controller.scope.enabled }}
|
{{- if .Values.controller.scope.enabled }}
|
||||||
- --watch-namespace={{ default .Release.Namespace .Values.controller.scope.namespace }}
|
- --watch-namespace={{ default .Release.Namespace .Values.controller.scope.namespace }}
|
||||||
|
@ -217,7 +217,7 @@ spec:
|
||||||
affinity:
|
affinity:
|
||||||
{{ toYaml .Values.controller.affinity | indent 8 }}
|
{{ toYaml .Values.controller.affinity | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
serviceAccountName: {{ template "nginx-ingress.serviceAccountName" . }}
|
serviceAccountName: {{ template "ingress-nginx.serviceAccountName" . }}
|
||||||
terminationGracePeriodSeconds: {{ .Values.controller.terminationGracePeriodSeconds }}
|
terminationGracePeriodSeconds: {{ .Values.controller.terminationGracePeriodSeconds }}
|
||||||
{{- if (or .Values.controller.customTemplate.configMapName .Values.controller.extraVolumeMounts .Values.controller.admissionWebhooks.enabled .Values.controller.extraVolumes) }}
|
{{- if (or .Values.controller.customTemplate.configMapName .Values.controller.extraVolumeMounts .Values.controller.admissionWebhooks.enabled .Values.controller.extraVolumes) }}
|
||||||
volumes:
|
volumes:
|
||||||
|
@ -233,7 +233,7 @@ spec:
|
||||||
{{- if .Values.controller.admissionWebhooks.enabled }}
|
{{- if .Values.controller.admissionWebhooks.enabled }}
|
||||||
- name: webhook-cert
|
- name: webhook-cert
|
||||||
secret:
|
secret:
|
||||||
secretName: {{ template "nginx-ingress.fullname". }}-admission
|
secretName: {{ template "ingress-nginx.fullname". }}-admission
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.controller.extraVolumes }}
|
{{- if .Values.controller.extraVolumes }}
|
||||||
{{ toYaml .Values.controller.extraVolumes | indent 8}}
|
{{ toYaml .Values.controller.extraVolumes | indent 8}}
|
||||||
|
|
|
@ -4,14 +4,14 @@ apiVersion: autoscaling/v2beta1
|
||||||
kind: HorizontalPodAutoscaler
|
kind: HorizontalPodAutoscaler
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
scaleTargetRef:
|
scaleTargetRef:
|
||||||
apiVersion: {{ template "deployment.apiVersion" . }}
|
apiVersion: {{ template "deployment.apiVersion" . }}
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
minReplicas: {{ .Values.controller.autoscaling.minReplicas }}
|
minReplicas: {{ .Values.controller.autoscaling.minReplicas }}
|
||||||
maxReplicas: {{ .Values.controller.autoscaling.maxReplicas }}
|
maxReplicas: {{ .Values.controller.autoscaling.maxReplicas }}
|
||||||
metrics:
|
metrics:
|
||||||
|
|
|
@ -12,9 +12,9 @@ metadata:
|
||||||
{{- if .Values.controller.metrics.service.labels }}
|
{{- if .Values.controller.metrics.service.labels }}
|
||||||
{{ toYaml .Values.controller.metrics.service.labels | indent 4 }}
|
{{ toYaml .Values.controller.metrics.service.labels | indent 4 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}-metrics
|
name: {{ template "ingress-nginx.controller.fullname" . }}-metrics
|
||||||
spec:
|
spec:
|
||||||
{{- if not .Values.controller.metrics.service.omitClusterIP }}
|
{{- if not .Values.controller.metrics.service.omitClusterIP }}
|
||||||
{{- with .Values.controller.metrics.service.clusterIP }}
|
{{- with .Values.controller.metrics.service.clusterIP }}
|
||||||
|
@ -37,7 +37,7 @@ spec:
|
||||||
port: {{ .Values.controller.metrics.service.servicePort }}
|
port: {{ .Values.controller.metrics.service.servicePort }}
|
||||||
targetPort: metrics
|
targetPort: metrics
|
||||||
selector:
|
selector:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 4 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
type: "{{ .Values.controller.metrics.service.type }}"
|
type: "{{ .Values.controller.metrics.service.type }}"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,13 +3,13 @@ apiVersion: policy/v1beta1
|
||||||
kind: PodDisruptionBudget
|
kind: PodDisruptionBudget
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 6 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 6 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
minAvailable: {{ .Values.controller.minAvailable }}
|
minAvailable: {{ .Values.controller.minAvailable }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,12 +2,12 @@
|
||||||
apiVersion: monitoring.coreos.com/v1
|
apiVersion: monitoring.coreos.com/v1
|
||||||
kind: PrometheusRule
|
kind: PrometheusRule
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
{{- if .Values.controller.metrics.prometheusRule.namespace }}
|
{{- if .Values.controller.metrics.prometheusRule.namespace }}
|
||||||
namespace: {{ .Values.controller.metrics.prometheusRule.namespace }}
|
namespace: {{ .Values.controller.metrics.prometheusRule.namespace }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
{{- if .Values.controller.metrics.prometheusRule.additionalLabels }}
|
{{- if .Values.controller.metrics.prometheusRule.additionalLabels }}
|
||||||
{{ toYaml .Values.controller.metrics.prometheusRule.additionalLabels | indent 4 }}
|
{{ toYaml .Values.controller.metrics.prometheusRule.additionalLabels | indent 4 }}
|
||||||
|
@ -15,7 +15,7 @@ metadata:
|
||||||
spec:
|
spec:
|
||||||
{{- with .Values.controller.metrics.prometheusRule.rules }}
|
{{- with .Values.controller.metrics.prometheusRule.rules }}
|
||||||
groups:
|
groups:
|
||||||
- name: {{ template "nginx-ingress.name" $ }}
|
- name: {{ template "ingress-nginx.name" $ }}
|
||||||
rules: {{- toYaml . | nindent 4 }}
|
rules: {{- toYaml . | nindent 4 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,9 +2,9 @@
|
||||||
apiVersion: {{ template "podSecurityPolicy.apiVersion" . }}
|
apiVersion: {{ template "podSecurityPolicy.apiVersion" . }}
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
spec:
|
spec:
|
||||||
allowedCapabilities:
|
allowedCapabilities:
|
||||||
|
|
|
@ -3,9 +3,9 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: Role
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- ""
|
- ""
|
||||||
|
@ -83,7 +83,7 @@ rules:
|
||||||
- apiGroups: ['{{ template "podSecurityPolicy.apiGroup" . }}']
|
- apiGroups: ['{{ template "podSecurityPolicy.apiGroup" . }}']
|
||||||
resources: ['podsecuritypolicies']
|
resources: ['podsecuritypolicies']
|
||||||
verbs: ['use']
|
verbs: ['use']
|
||||||
resourceNames: [{{ include "nginx-ingress.fullname" . }}]
|
resourceNames: [{{ include "ingress-nginx.fullname" . }}]
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -3,15 +3,15 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: Role
|
kind: Role
|
||||||
name: {{ include "nginx-ingress.fullname" . }}
|
name: {{ include "ingress-nginx.fullname" . }}
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "nginx-ingress.serviceAccountName" . }}
|
name: {{ template "ingress-nginx.serviceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -12,9 +12,9 @@ metadata:
|
||||||
{{- if .Values.controller.service.labels }}
|
{{- if .Values.controller.service.labels }}
|
||||||
{{ toYaml .Values.controller.service.labels | indent 4 }}
|
{{ toYaml .Values.controller.service.labels | indent 4 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
{{- if not .Values.controller.service.omitClusterIP }}
|
{{- if not .Values.controller.service.omitClusterIP }}
|
||||||
{{- with .Values.controller.service.clusterIP }}
|
{{- with .Values.controller.service.clusterIP }}
|
||||||
|
@ -84,7 +84,7 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
selector:
|
selector:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 4 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
type: "{{ .Values.controller.service.type }}"
|
type: "{{ .Values.controller.service.type }}"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,7 +3,7 @@ apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.serviceAccountName" . }}
|
name: {{ template "ingress-nginx.serviceAccountName" . }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -2,12 +2,12 @@
|
||||||
apiVersion: monitoring.coreos.com/v1
|
apiVersion: monitoring.coreos.com/v1
|
||||||
kind: ServiceMonitor
|
kind: ServiceMonitor
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}
|
name: {{ template "ingress-nginx.controller.fullname" . }}
|
||||||
{{- if .Values.controller.metrics.serviceMonitor.namespace }}
|
{{- if .Values.controller.metrics.serviceMonitor.namespace }}
|
||||||
namespace: {{ .Values.controller.metrics.serviceMonitor.namespace }}
|
namespace: {{ .Values.controller.metrics.serviceMonitor.namespace }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
{{- if .Values.controller.metrics.serviceMonitor.additionalLabels }}
|
{{- if .Values.controller.metrics.serviceMonitor.additionalLabels }}
|
||||||
{{ toYaml .Values.controller.metrics.serviceMonitor.additionalLabels | indent 4 }}
|
{{ toYaml .Values.controller.metrics.serviceMonitor.additionalLabels | indent 4 }}
|
||||||
|
@ -29,6 +29,6 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 6 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 6 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -9,9 +9,9 @@ metadata:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ template "nginx-ingress.controller.fullname" . }}-admission
|
name: {{ template "ingress-nginx.controller.fullname" . }}-admission
|
||||||
spec:
|
spec:
|
||||||
{{- if not .Values.controller.admissionWebhooks.service.omitClusterIP }}
|
{{- if not .Values.controller.admissionWebhooks.service.omitClusterIP }}
|
||||||
{{- with .Values.controller.admissionWebhooks.service.clusterIP }}
|
{{- with .Values.controller.admissionWebhooks.service.clusterIP }}
|
||||||
|
@ -34,7 +34,7 @@ spec:
|
||||||
port: 443
|
port: 443
|
||||||
targetPort: webhook
|
targetPort: webhook
|
||||||
selector:
|
selector:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 4 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
type: "{{ .Values.controller.admissionWebhooks.service.type }}"
|
type: "{{ .Values.controller.admissionWebhooks.service.type }}"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,13 +3,13 @@ apiVersion: {{ template "deployment.apiVersion" . }}
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
name: {{ template "nginx-ingress.defaultBackend.fullname" . }}
|
name: {{ template "ingress-nginx.defaultBackend.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 6 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 6 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
replicas: {{ .Values.defaultBackend.replicaCount }}
|
replicas: {{ .Values.defaultBackend.replicaCount }}
|
||||||
revisionHistoryLimit: {{ .Values.revisionHistoryLimit }}
|
revisionHistoryLimit: {{ .Values.revisionHistoryLimit }}
|
||||||
|
@ -22,7 +22,7 @@ spec:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 8 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 8 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
{{- if .Values.defaultBackend.podLabels }}
|
{{- if .Values.defaultBackend.podLabels }}
|
||||||
{{ toYaml .Values.defaultBackend.podLabels | indent 8 }}
|
{{ toYaml .Values.defaultBackend.podLabels | indent 8 }}
|
||||||
|
@ -40,7 +40,7 @@ spec:
|
||||||
{{ toYaml .Values.defaultBackend.podSecurityContext | indent 8 }}
|
{{ toYaml .Values.defaultBackend.podSecurityContext | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
containers:
|
containers:
|
||||||
- name: {{ template "nginx-ingress.name" . }}-{{ .Values.defaultBackend.name }}
|
- name: {{ template "ingress-nginx.name" . }}-{{ .Values.defaultBackend.name }}
|
||||||
image: "{{ .Values.defaultBackend.image.repository }}:{{ .Values.defaultBackend.image.tag }}"
|
image: "{{ .Values.defaultBackend.image.repository }}:{{ .Values.defaultBackend.image.tag }}"
|
||||||
imagePullPolicy: "{{ .Values.defaultBackend.image.pullPolicy }}"
|
imagePullPolicy: "{{ .Values.defaultBackend.image.pullPolicy }}"
|
||||||
args:
|
args:
|
||||||
|
@ -87,7 +87,7 @@ spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
{{ toYaml .Values.defaultBackend.nodeSelector | indent 8 }}
|
{{ toYaml .Values.defaultBackend.nodeSelector | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
serviceAccountName: {{ template "nginx-ingress.defaultBackend.serviceAccountName" . }}
|
serviceAccountName: {{ template "ingress-nginx.defaultBackend.serviceAccountName" . }}
|
||||||
{{- if .Values.defaultBackend.tolerations }}
|
{{- if .Values.defaultBackend.tolerations }}
|
||||||
tolerations:
|
tolerations:
|
||||||
{{ toYaml .Values.defaultBackend.tolerations | indent 8 }}
|
{{ toYaml .Values.defaultBackend.tolerations | indent 8 }}
|
||||||
|
|
|
@ -3,13 +3,13 @@ apiVersion: policy/v1beta1
|
||||||
kind: PodDisruptionBudget
|
kind: PodDisruptionBudget
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
name: {{ template "nginx-ingress.defaultBackend.fullname" . }}
|
name: {{ template "ingress-nginx.defaultBackend.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 6 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 6 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
minAvailable: {{ .Values.defaultBackend.minAvailable }}
|
minAvailable: {{ .Values.defaultBackend.minAvailable }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -2,9 +2,9 @@
|
||||||
apiVersion: {{ template "podSecurityPolicy.apiVersion" . }}
|
apiVersion: {{ template "podSecurityPolicy.apiVersion" . }}
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-backend
|
name: {{ include "ingress-nginx.fullname" . }}-backend
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
spec:
|
spec:
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
|
|
|
@ -3,12 +3,12 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: Role
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-backend
|
name: {{ include "ingress-nginx.fullname" . }}-backend
|
||||||
rules:
|
rules:
|
||||||
- apiGroups: ['{{ template "podSecurityPolicy.apiGroup" . }}']
|
- apiGroups: ['{{ template "podSecurityPolicy.apiGroup" . }}']
|
||||||
resources: ['podsecuritypolicies']
|
resources: ['podsecuritypolicies']
|
||||||
verbs: ['use']
|
verbs: ['use']
|
||||||
resourceNames: [{{ include "nginx-ingress.fullname" . }}-backend]
|
resourceNames: [{{ include "ingress-nginx.fullname" . }}-backend]
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -3,15 +3,15 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-backend
|
name: {{ include "ingress-nginx.fullname" . }}-backend
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: Role
|
kind: Role
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-backend
|
name: {{ include "ingress-nginx.fullname" . }}-backend
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "nginx-ingress.defaultBackend.serviceAccountName" . }}
|
name: {{ template "ingress-nginx.defaultBackend.serviceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
|
@ -9,9 +9,9 @@ metadata:
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
name: {{ template "nginx-ingress.defaultBackend.fullname" . }}
|
name: {{ template "ingress-nginx.defaultBackend.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
{{- if not .Values.defaultBackend.service.omitClusterIP }}
|
{{- if not .Values.defaultBackend.service.omitClusterIP }}
|
||||||
{{- with .Values.defaultBackend.service.clusterIP }}
|
{{- with .Values.defaultBackend.service.clusterIP }}
|
||||||
|
@ -35,7 +35,7 @@ spec:
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
targetPort: http
|
targetPort: http
|
||||||
selector:
|
selector:
|
||||||
{{- include "nginx-ingress.selectorLabels" . | nindent 4 }}
|
{{- include "ingress-nginx.selectorLabels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
type: "{{ .Values.defaultBackend.service.type }}"
|
type: "{{ .Values.defaultBackend.service.type }}"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,7 +3,7 @@ apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
app.kubernetes.io/component: {{ .Values.defaultBackend.name | quote }}
|
||||||
name: {{ template "nginx-ingress.defaultBackend.serviceAccountName" . }}
|
name: {{ template "ingress-nginx.defaultBackend.serviceAccountName" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,9 +3,9 @@ apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-custom-proxy-headers
|
name: {{ include "ingress-nginx.fullname" . }}-custom-proxy-headers
|
||||||
data:
|
data:
|
||||||
{{- if .Values.controller.proxySetHeaders }}
|
{{- if .Values.controller.proxySetHeaders }}
|
||||||
{{ toYaml .Values.controller.proxySetHeaders | indent 2 }}
|
{{ toYaml .Values.controller.proxySetHeaders | indent 2 }}
|
||||||
|
|
|
@ -3,11 +3,11 @@ apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml .Values.controller.tcp.annotations | indent 4}}
|
{{ toYaml .Values.controller.tcp.annotations | indent 4}}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-tcp
|
name: {{ include "ingress-nginx.fullname" . }}-tcp
|
||||||
data:
|
data:
|
||||||
{{ tpl (toYaml .Values.tcp) . | indent 2 }}
|
{{ tpl (toYaml .Values.tcp) . | indent 2 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -3,11 +3,11 @@ apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
{{- include "nginx-ingress.labels" . | nindent 4 }}
|
{{- include "ingress-nginx.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
app.kubernetes.io/component: {{ .Values.controller.name | quote }}
|
||||||
annotations:
|
annotations:
|
||||||
{{ toYaml .Values.controller.udp.annotations | indent 4}}
|
{{ toYaml .Values.controller.udp.annotations | indent 4}}
|
||||||
name: {{ include "nginx-ingress.fullname" . }}-udp
|
name: {{ include "ingress-nginx.fullname" . }}-udp
|
||||||
data:
|
data:
|
||||||
{{ tpl (toYaml .Values.udp) . | indent 2 }}
|
{{ tpl (toYaml .Values.udp) . | indent 2 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -168,7 +168,7 @@ controller:
|
||||||
# - key: app
|
# - key: app
|
||||||
# operator: In
|
# operator: In
|
||||||
# values:
|
# values:
|
||||||
# - nginx-ingress
|
# - ingress-nginx
|
||||||
# topologyKey: kubernetes.io/hostname
|
# topologyKey: kubernetes.io/hostname
|
||||||
|
|
||||||
# # An example of required pod anti-affinity
|
# # An example of required pod anti-affinity
|
||||||
|
@ -179,7 +179,7 @@ controller:
|
||||||
# - key: app
|
# - key: app
|
||||||
# operator: In
|
# operator: In
|
||||||
# values:
|
# values:
|
||||||
# - nginx-ingress
|
# - ingress-nginx
|
||||||
# topologyKey: "kubernetes.io/hostname"
|
# topologyKey: "kubernetes.io/hostname"
|
||||||
|
|
||||||
## terminationGracePeriodSeconds
|
## terminationGracePeriodSeconds
|
||||||
|
|
Loading…
Reference in a new issue