149 lines
4.8 KiB
YAML
149 lines
4.8 KiB
YAML
{{- if .Values.ingress.enabled -}}
|
|
{{- $serviceName := .Values.service.name -}}
|
|
{{- $grpcPort := (index $.Values.service.ports 0).port -}}
|
|
{{- $servicePort := (index $.Values.service.ports 1).port -}}
|
|
{{- $ingressPathType := .Values.ingress.pathType -}}
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: {{ include "pmm.fullname" . }}
|
|
labels:
|
|
{{- include "pmm.labels" . | nindent 4 }}
|
|
{{- if or .Values.ingress.annotations .Values.ingress.nginxInc }}
|
|
annotations:
|
|
{{- toYaml .Values.ingress.annotations | nindent 4 }}
|
|
{{- if .Values.ingress.nginxInc }}
|
|
nginx.org/ssl-services: {{ $serviceName }}-grpc
|
|
nginx.org/grpc-services: {{ $serviceName }}-grpc
|
|
{{- end }}
|
|
{{- end }}
|
|
spec:
|
|
{{- if .Values.ingress.ingressClassName }}
|
|
ingressClassName: {{ .Values.ingress.ingressClassName | quote }}
|
|
{{- end }}
|
|
{{- if .Values.ingress.tls }}
|
|
tls:
|
|
{{- range .Values.ingress.tls }}
|
|
- hosts:
|
|
{{- range .hosts }}
|
|
- {{ . | quote }}
|
|
{{- end }}
|
|
secretName: {{ .secretName }}
|
|
{{- end }}
|
|
{{- end }}
|
|
rules:
|
|
{{- range .Values.ingress.hosts }}
|
|
- host: {{ .host | quote }}
|
|
http:
|
|
paths:
|
|
{{- range .paths }}
|
|
- path: {{ . }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}
|
|
port:
|
|
number: {{ $servicePort }}
|
|
{{- if $.Values.ingress.nginxInc }}
|
|
# gRPC paths
|
|
- path: {{ printf "%s/agent." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
- path: {{ printf "%s/inventory." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
- path: {{ printf "%s/management." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
- path: {{ printf "%s/server." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if not .Values.ingress.nginxInc }}
|
|
---
|
|
# Community version of ingress-nginx requires second Ingress for gRPC
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: {{ include "pmm.fullname" . }}-grpc
|
|
labels:
|
|
{{- include "pmm.labels" . | nindent 4 }}
|
|
annotations:
|
|
{{- with .Values.ingress.community.annotations }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
nginx.ingress.kubernetes.io/backend-protocol: "GRPCS"
|
|
nginx.ingress.kubernetes.io/use-regex: "true"
|
|
spec:
|
|
{{- if .Values.ingress.ingressClassName }}
|
|
ingressClassName: {{ .Values.ingress.ingressClassName | quote }}
|
|
{{- end }}
|
|
{{- if .Values.ingress.tls }}
|
|
tls:
|
|
{{- range .Values.ingress.tls }}
|
|
- hosts:
|
|
{{- range .hosts }}
|
|
- {{ . | quote }}
|
|
{{- end }}
|
|
secretName: {{ .secretName }}
|
|
{{- end }}
|
|
{{- end }}
|
|
rules:
|
|
{{- range .Values.ingress.hosts }}
|
|
- host: {{ .host | quote }}
|
|
http:
|
|
paths:
|
|
{{- range .paths }}
|
|
# gRPC paths
|
|
- path: {{ printf "%s/agent." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
- path: {{ printf "%s/inventory." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
- path: {{ printf "%s/management." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
- path: {{ printf "%s/server." . | replace "//" "/" }}
|
|
pathType: {{ $ingressPathType }}
|
|
backend:
|
|
service:
|
|
name: {{ $serviceName }}-grpc
|
|
port:
|
|
number: {{ $grpcPort }} # MUST proxy to HTTPS
|
|
{{- end }}
|
|
{{- end }}
|
|
---
|
|
{{- end }}
|
|
{{- end }}
|