forked from ElasticSuite/chrome-print
-
Notifications
You must be signed in to change notification settings - Fork 1
/
kubernetes-template.yaml
83 lines (82 loc) · 1.8 KB
/
kubernetes-template.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# generate using http://www.htaccesstools.com/htpasswd-generator/
# something like admin:ENCRYPTED
# then base64 encode it
# to get BASE64 ENCODED
apiVersion: v1
data:
auth: BASE64 ENCODED
kind: Secret
metadata:
name: ingress-chrome-print-auth
type: Opaque
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
name: chrome-print
spec:
replicas: 2
template:
metadata:
labels:
app: chrome-print
tier: backend
track: stable
spec:
containers:
- name: chrome-print
image: "gcr.io/draftspot-177614/chrome-print:latest"
imagePullPolicy: "Always"
ports:
- name: http
containerPort: 8888
---
kind: Service
apiVersion: v1
metadata:
name: chrome-print
labels:
app: chrome-print
tier: backend
track: stable
spec:
selector:
app: chrome-print
tier: backend
ports:
- protocol: "TCP"
port: 80
targetPort: 8888
type: ClusterIP
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
# message shown when login is required
ingress.kubernetes.io/auth-realm: Authentication Required
# name of secret that defines username/password
ingress.kubernetes.io/auth-secret: ingress-chrome-print-auth
# type of authentication
ingress.kubernetes.io/auth-type: basic
ingress.kubernetes.io/enable-cors: "true"
# force https
kubernetes.io/ingress.allow-http: "true"
# use our nginx ingress
kubernetes.io/ingress.class: nginx
# get tls cert from ACME
kubernetes.io/tls-acme: 'true'
name: chrome-print
spec:
tls:
- hosts:
- chrome-print.host.com
secretName: chrome-print-tls
rules:
- host: chrome-print.host.com
http:
paths:
- backend:
serviceName: chrome-print
servicePort: 80
path: /