imfreedom/k8s-cluster
Clone
Summary
Browse
Changes
Graph
Ignore client closed connections in nginx that's reverse proxying for reviewboard
17 months ago, Gary Kramlich
6eb43a49ff31
Ignore client closed connections in nginx that's reverse proxying for reviewboard
There was a reason I needed to do this a while ago, but I don't recall what it
was and I didn't commit it back then, but it _was_ necessary.
# youtrack is an issue tracker from jetbrains. It supports multiple projects,
# integrates into hub, and supports importing from multiple issue trackers.
---
apiVersion
:
traefik.containo.us/v1alpha1
kind
:
IngressRoute
metadata
:
name
:
issues-http
spec
:
entryPoints
:
-
http
routes
:
-
match
:
Host(`issues.imfreedom.org`)
kind
:
Rule
services
:
-
name
:
issues
port
:
8080
middlewares
:
-
name
:
https-redirect
---
apiVersion
:
traefik.containo.us/v1alpha1
kind
:
Middleware
metadata
:
name
:
issues-body-size
spec
:
buffering
:
maxRequestBodyBytes
:
16777216
memRequestBodyBytes
:
209715
---
apiVersion
:
traefik.containo.us/v1alpha1
kind
:
IngressRoute
metadata
:
name
:
issues
spec
:
entryPoints
:
-
https
routes
:
-
match
:
Host(`issues.imfreedom.org`)
kind
:
Rule
services
:
-
name
:
issues
port
:
8080
middlewares
:
-
name
:
issues-body-size
-
name
:
common-headers
-
name
:
hsts-headers
tls
:
secretName
:
issues-tls
---
apiVersion
:
cert-manager.io/v1
kind
:
Certificate
metadata
:
name
:
issues-tls
spec
:
secretName
:
issues-tls
issuerRef
:
name
:
letsencrypt
commonName
:
issues.imfreedom.org
dnsNames
:
-
issues.imfreedom.org
---
apiVersion
:
v1
kind
:
Service
metadata
:
name
:
issues
spec
:
ports
:
-
port
:
8080
protocol
:
TCP
selector
:
app
:
issues
role
:
app
---
apiVersion
:
networking.k8s.io/v1
kind
:
NetworkPolicy
metadata
:
name
:
issues
spec
:
podSelector
:
matchLabels
:
app
:
issues
role
:
app
ingress
:
-
from
:
-
namespaceSelector
:
matchLabels
:
name
:
kube-public
podSelector
:
matchExpressions
:
-
key
:
app
operator
:
In
values
:
-
traefik
-
key
:
role
operator
:
In
values
:
-
controller
ports
:
-
port
:
8080
protocol
:
TCP
---
apiVersion
:
apps/v1
kind
:
Deployment
metadata
:
name
:
issues
spec
:
replicas
:
1
revisionHistoryLimit
:
1
selector
:
matchLabels
:
app
:
issues
role
:
app
strategy
:
type
:
Recreate
template
:
spec
:
initContainers
:
-
name
:
configure
image
:
docker.io/jetbrains/youtrack:2022.3.63553
command
:
-
/run.sh
-
configure
-
-J-Dlog4j2.formatMsgNoLookups=true
volumeMounts
:
-
mountPath
:
/opt/youtrack/data
name
:
datadir
readOnly
:
false
subPath
:
data
-
mountPath
:
/opt/youtrack/conf
name
:
datadir
readOnly
:
false
subPath
:
conf
-
mountPath
:
/opt/youtrack/logs/
name
:
hostdir
readOnly
:
false
subPath
:
logs
-
mountPath
:
/opt/youtrack/backups/
name
:
datadir
readOnly
:
false
subPath
:
backups
-
mountPath
:
/opt/youtrack/temp/
name
:
hostdir
readOnly
:
false
subPath
:
temp
containers
:
-
name
:
youtrack
image
:
docker.io/jetbrains/youtrack:2022.3.63553
ports
:
-
containerPort
:
8080
resources
:
limits
:
cpu
:
1000m
memory
:
2048Mi
requests
:
cpu
:
500m
memory
:
1024Mi
volumeMounts
:
-
mountPath
:
/opt/youtrack/data
name
:
datadir
readOnly
:
false
subPath
:
data
-
mountPath
:
/opt/youtrack/conf
name
:
datadir
readOnly
:
false
subPath
:
conf
-
mountPath
:
/opt/youtrack/logs/
name
:
hostdir
readOnly
:
false
subPath
:
logs
-
mountPath
:
/opt/youtrack/backups/
name
:
datadir
readOnly
:
false
subPath
:
backups
-
mountPath
:
/opt/youtrack/temp/
name
:
hostdir
readOnly
:
false
subPath
:
temp
securityContext
:
fsGroup
:
13001
runAsUser
:
13001
volumes
:
-
name
:
datadir
persistentVolumeClaim
:
claimName
:
issues
-
name
:
hostdir
emptyDir
:
{}
---
apiVersion
:
v1
kind
:
PersistentVolumeClaim
metadata
:
name
:
issues
spec
:
accessModes
:
-
ReadWriteOnce
resources
:
requests
:
storage
:
10Gi
---
apiVersion
:
gemini.fairwinds.com/v1beta1
kind
:
SnapshotGroup
metadata
:
name
:
issues
spec
:
persistentVolumeClaim
:
claimName
:
issues
schedule
:
-
every
:
12 hours
keep
:
2
---