viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add proxy protocol and proxy timeout to reverse-proxy ingresses [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2023-12-16 14:40:19 +00:00
parent cc26c84653
commit 73d293d1ba
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
3 changed files with 23 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/kubernetes/reverse_proxy/factory/main.tf
View file

@ -22,6 +22,14 @@ variable "max_body_size" {
type = string
default = "50m"
}
variable "use_proxy_protocol" {
type = bool
default = true
}
variable "proxy_timeout" {
type = number
default = 60
}
resource "kubernetes_service" "proxied-service" {
@ -59,6 +67,11 @@ resource "kubernetes_ingress_v1" "proxied-ingress" {
"nginx.ingress.kubernetes.io/auth-url" : var.protected ? "http://oauth2.oauth2.svc.cluster.local/oauth2/auth" : null
# "nginx.ingress.kubernetes.io/auth-signin" : var.protected ? "http://oauth2.oauth2.svc.cluster.local/oauth2/start?rd=/redirect/$http_host$escaped_request_uri" : null
"nginx.ingress.kubernetes.io/proxy-body-size" : var.max_body_size
"nginx.ingress.kubernetes.io/use-proxy-protocol" : var.use_proxy_protocol
"nginx.ingress.kubernetes.io/proxy-connect-timeout" : var.proxy_timeout
"nginx.ingress.kubernetes.io/proxy-send-timeout" : var.proxy_timeout
"nginx.ingress.kubernetes.io/proxy-read-timeout" : var.proxy_timeout
}
}