imfreedom/k8s-cluster

Allow http for (www.)pidgin.im, deploy the old site and add ingress paths to point to it

2020-01-17, Gary Kramlich
8862a80937e7
Parents 2a6e8023b661
Children ad9548cab441
Allow http for (www.)pidgin.im, deploy the old site and add ingress paths to point to it
1 files changed, 99 insertions(+), 33 deletions(-)
  • +99 -33
    50-nest.pidgin.im.yaml
    • --- a/50-nest.pidgin.im.yaml Tue Jan 14 21:12:44 2020 -0600
    +++ b/50-nest.pidgin.im.yaml Fri Jan 17 21:08:13 2020 -0600
    @@ -6,6 +6,7 @@
    name: nest
    annotations:
    cert-manager.io/issuer: letsencrypt
    + nginx.ingress.kubernetes.io/ssl-redirect: "false"
    nginx.ingress.kubernetes.io/configuration-snippet: |
    more_set_headers "X-Frame-Options: SAMEORIGIN";
    labels:
    @@ -19,6 +20,14 @@
    serviceName: nest
    servicePort: 3000
    path: /
    + - backend:
    + serviceName: oldsite
    + servicePort: 80
    + path: /win32
    + - backend:
    + serviceName: oldsite
    + servicePort: 80
    + path: /version.php
    - host: www.pidgin.im
    http:
    paths:
    @@ -26,6 +35,14 @@
    serviceName: nest
    servicePort: 3000
    path: /
    + - backend:
    + serviceName: oldsite
    + servicePort: 80
    + path: /win32
    + - backend:
    + serviceName: oldsite
    + servicePort: 80
    + path: /version.php
    tls:
    - hosts:
    - pidgin.im
    @@ -50,39 +67,6 @@
    kind: Ingress
    metadata:
    namespace: pidgin
    - name: nest-win32-redirects
    - annotations:
    - cert-manager.io/issuer: letsencrypt
    - nginx.ingress.kubernetes.io/server-snippet: |
    - return 301 https://old.pidgin.im$request_uri;
    - labels:
    - app: nest
    -spec:
    - rules:
    - - host: pidgin.im
    - http:
    - paths:
    - - path: /win32
    - backend:
    - serviceName: nest
    - servicePort: 3000
    - - host: www.pidgin.im
    - http:
    - paths:
    - - path: /win32
    - backend:
    - serviceName: nest
    - servicePort: 3000
    - tls:
    - - hosts:
    - - pidgin.im
    - - www.pidgin.im
    - secretName: nest-tls
    ----
    -apiVersion: extensions/v1beta1
    -kind: Ingress
    -metadata:
    - namespace: pidgin
    name: nest-redirects
    annotations:
    cert-manager.io/issuer: letsencrypt
    @@ -198,3 +182,85 @@
    cpu: 50m
    memory: 64Mi
    ---
    +
    +apiVersion: v1
    +kind: Service
    +metadata:
    + namespace: pidgin
    + name: oldsite
    + labels:
    + app: oldsite
    +spec:
    + ports:
    + - port: 80
    + protocol: TCP
    + selector:
    + app: oldsite
    +---
    +apiVersion: networking.k8s.io/v1
    +kind: NetworkPolicy
    +metadata:
    + namespace: pidgin
    + name: oldsite
    + labels:
    + app: oldsite
    +spec:
    + podSelector:
    + matchLabels:
    + app: oldsite
    + ingress:
    + - from:
    + - namespaceSelector:
    + matchLabels:
    + name: kube-public
    + podSelector:
    + matchLabels:
    + app: ingress
    + role: controller
    + ports:
    + - port: 80
    + protocol: TCP
    +---
    +apiVersion: apps/v1
    +kind: Deployment
    +metadata:
    + namespace: pidgin
    + name: oldsite
    + labels:
    + app: oldsite
    +spec:
    + replicas: 2
    + selector:
    + matchLabels:
    + app: oldsite
    + template:
    + metadata:
    + labels:
    + app: oldsite
    + spec:
    + affinity:
    + podAntiAffinity:
    + preferredDuringSchedulingIgnoredDuringExecution:
    + - podAffinityTerm:
    + labelSelector:
    + matchExpressions:
    + - key: app
    + operator: In
    + values:
    + - oldsite
    + topologyKey: failure-domain.beta.kubernetes.io/region
    + weight: 100
    + containers:
    + - name: oldsite
    + image: pidgin/www:latest
    + imagePullPolicy: Always
    + ports:
    + - containerPort: 80
    + resources:
    + limits:
    + cpu: 100m
    + memory: 96Mi
    + requests:
    + cpu: 50m
    + memory: 64Mi
    +---