diff options
| author | Vincent Ambo <tazjin@google.com> | 2019-12-20T16·07+0000 |
|---|---|---|
| committer | Vincent Ambo <tazjin@google.com> | 2019-12-20T16·07+0000 |
| commit | 2512ea42567f74348fc5bfafb1ea1eb4ebe705dd (patch) | |
| tree | 6dd7146d2b373909e2708447e57d5c1ccf0f530c | |
| parent | 9653bdcf694e2317754060056dec31577e8d55ae (diff) | |
feat(infra/k8s): Add cgit to Ingress load balancer r/221
Apart from the fact that TLS certificate provisioning is very wonky, it seems to be working now. AFAICT the L7 LBs still don't support path rewriting, which means that this is likely not the final configuration and it will move behind nginx instead.
| -rw-r--r-- | infra/kubernetes/cgit/config.yaml | 3 | ||||
| -rw-r--r-- | infra/kubernetes/https-lb/ingress.yaml | 10 |
2 files changed, 11 insertions, 2 deletions
diff --git a/infra/kubernetes/cgit/config.yaml b/infra/kubernetes/cgit/config.yaml index f59a237aaa..577a56650a 100644 --- a/infra/kubernetes/cgit/config.yaml +++ b/infra/kubernetes/cgit/config.yaml @@ -70,4 +70,5 @@ spec: app: cgit ports: - protocol: TCP - port: 8080 + port: 2448 # cgit + targetPort: 8080 diff --git a/infra/kubernetes/https-lb/ingress.yaml b/infra/kubernetes/https-lb/ingress.yaml index f1d9fa4270..0a3092da20 100644 --- a/infra/kubernetes/https-lb/ingress.yaml +++ b/infra/kubernetes/https-lb/ingress.yaml @@ -6,7 +6,7 @@ kind: Ingress metadata: name: https-ingress annotations: - networking.gke.io/managed-certificates: tazj-in, www-tazj-in, oslo-pub + networking.gke.io/managed-certificates: tazj-in, git-tazj-in, www-tazj-in, oslo-pub spec: # Default traffic is routed to the blog, in case people go to # peculiar hostnames. @@ -14,6 +14,14 @@ spec: serviceName: tazblog servicePort: 8000 rules: + # Route git.tazj.in to the cgit pods + - host: git.tazj.in + http: + paths: + - path: / + backend: + serviceName: cgit + servicePort: 2448 # Route oslo.pub to the nginx instance which serves redirects - host: oslo.pub http: |