diff --git a/minio/ingress-api.yaml b/minio/ingress-api.yaml new file mode 100644 index 0000000..e27d682 --- /dev/null +++ b/minio/ingress-api.yaml @@ -0,0 +1,28 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: minio-api + namespace: minio + annotations: + cert-manager.io/cluster-issuer: letsencrypt-prod + nginx.ingress.kubernetes.io/proxy-body-size: "0" + nginx.ingress.kubernetes.io/proxy-read-timeout: "600" + nginx.ingress.kubernetes.io/proxy-send-timeout: "600" + nginx.ingress.kubernetes.io/ssl-redirect: "true" +spec: + ingressClassName: haproxy + tls: + - hosts: + - s3.minio0213.kro.kr + secretName: minio-api-tls + rules: + - host: s3.minio0213.kro.kr + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: minio-service + port: + number: 9000 diff --git a/minio/ingress-console.yaml b/minio/ingress-console.yaml new file mode 100644 index 0000000..201c847 --- /dev/null +++ b/minio/ingress-console.yaml @@ -0,0 +1,37 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: minio-console + namespace: minio + annotations: + cert-manager.io/cluster-issuer: letsencrypt-prod + nginx.ingress.kubernetes.io/proxy-body-size: "0" + nginx.ingress.kubernetes.io/ssl-redirect: "true" +spec: + ingressClassName: haproxy + tls: + - hosts: + - minio.minio0213.kro.kr + - minio0213.kro.kr + secretName: minio-console-tls + rules: + - host: minio.minio0213.kro.kr + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: minio-service + port: + number: 9001 + - host: minio0213.kro.kr + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: minio-service + port: + number: 9001 diff --git a/minio/kustomization.yaml b/minio/kustomization.yaml index 53e5466..28ba8ce 100644 --- a/minio/kustomization.yaml +++ b/minio/kustomization.yaml @@ -5,3 +5,5 @@ resources: # ArgoCD Application 리소스는 infrastructure/kustomization.yaml에서 관리 # - argocd/minio.yaml - vault/minio-root-password.yaml + - ingress-api.yaml + - ingress-console.yaml diff --git a/pgweb/ingress.yaml b/pgweb/ingress.yaml new file mode 100644 index 0000000..173880c --- /dev/null +++ b/pgweb/ingress.yaml @@ -0,0 +1,36 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: pgweb-ingress + namespace: pgweb + annotations: + nginx.ingress.kubernetes.io/ssl-redirect: "true" + cert-manager.io/cluster-issuer: "letsencrypt-prod" +spec: + ingressClassName: haproxy + tls: + - hosts: + - pgweb0213.kro.kr + - www.pgweb0213.kro.kr + secretName: pgweb-tls + rules: + - host: pgweb0213.kro.kr + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: pgweb + port: + number: 80 + - host: www.pgweb0213.kro.kr + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: pgweb + port: + number: 80 diff --git a/pgweb/kustomization.yaml b/pgweb/kustomization.yaml index bc89382..02cd04c 100644 --- a/pgweb/kustomization.yaml +++ b/pgweb/kustomization.yaml @@ -8,3 +8,4 @@ resources: - vault/serviceaccount.yaml - vault/secretstore.yaml - vault/pgweb-secret.yaml + - ingress.yaml