adjust cert & ssl-settings

This commit is contained in:
jerger 2022-07-15 13:14:30 +02:00
parent 29ed1fbfdd
commit a6b9c24c03
2 changed files with 14 additions and 12 deletions

View file

@ -4,12 +4,12 @@ metadata:
name: ingress-jira name: ingress-jira
annotations: annotations:
cert-manager.io/cluster-issuer: letsencrypt-staging-issuer cert-manager.io/cluster-issuer: letsencrypt-staging-issuer
nginx.ingress.kubernetes.io/proxy-body-size: "256m" ingress.kubernetes.io/proxy-body-size: "256m"
nginx.ingress.kubernetes.io/ssl-redirect: "true" ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/rewrite-target: / ingress.kubernetes.io/rewrite-target: /
nginx.ingress.kubernetes.io/proxy-connect-timeout: "300" ingress.kubernetes.io/proxy-connect-timeout: "300"
nginx.ingress.kubernetes.io/proxy-send-timeout: "300" ingress.kubernetes.io/proxy-send-timeout: "300"
nginx.ingress.kubernetes.io/proxy-read-timeout: "300" ingress.kubernetes.io/proxy-read-timeout: "300"
namespace: default namespace: default
spec: spec:
tls: tls:

View file

@ -11,6 +11,8 @@
:spec :spec
{:secretName "jira-secret" {:secretName "jira-secret"
:commonName "xx" :commonName "xx"
:duration "2160h",
:renewBefore "360h",
:dnsNames ["xx"] :dnsNames ["xx"]
:issuerRef :issuerRef
{:name "prod", :kind "ClusterIssuer"}}} {:name "prod", :kind "ClusterIssuer"}}}
@ -34,12 +36,12 @@
:annotations :annotations
{:cert-manager.io/cluster-issuer {:cert-manager.io/cluster-issuer
"staging" "staging"
:nginx.ingress.kubernetes.io/proxy-body-size "256m" :ingress.kubernetes.io/proxy-body-size "256m"
:nginx.ingress.kubernetes.io/ssl-redirect "true" :ingress.kubernetes.io/ssl-redirect "true"
:nginx.ingress.kubernetes.io/rewrite-target "/" :ingress.kubernetes.io/rewrite-target "/"
:nginx.ingress.kubernetes.io/proxy-connect-timeout "300" :ingress.kubernetes.io/proxy-connect-timeout "300"
:nginx.ingress.kubernetes.io/proxy-send-timeout "300" :ingress.kubernetes.io/proxy-send-timeout "300"
:nginx.ingress.kubernetes.io/proxy-read-timeout "300"} :ingress.kubernetes.io/proxy-read-timeout "300"}
:namespace "default"} :namespace "default"}
:spec :spec
{:tls [{:hosts ["xx"], :secretName "jira-secret"}] {:tls [{:hosts ["xx"], :secretName "jira-secret"}]