forked from rook/rook
Blaine Gardner
26c9512962
Add meta-comments to manifests to allow basic templating via `sed`. Add the following types of meta-comments: - # namespace:X - A basic namespace - replace the field with a namespace for X - # serviceaccount:namespace:X - A service account namespace for SCC - e.g., "system:serviceaccount:<ns>:rook-ceph-system" - Replace the namespace "<ns>" with with a namespace for X - # provisioner:namespace:X - A provisioner identifier with namespace prefix - e.g., "<ns>.cephfs.csi.ceph.com" - e.g., "<ns>.ceph.rook.io/bucket" - Replace the namespace "<ns>" with a namespace for X Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
32 lines
859 B
YAML
32 lines
859 B
YAML
#
|
|
# This example is for Kubernetes running an ngnix-ingress
|
|
# and an ACME (e.g. Let's Encrypt) certificate service
|
|
#
|
|
# The nginx-ingress annotations support the dashboard
|
|
# running using HTTPS with a self-signed certificate
|
|
#
|
|
apiVersion: extensions/v1beta1
|
|
kind: Ingress
|
|
metadata:
|
|
name: rook-ceph-mgr-dashboard
|
|
namespace: rook-ceph # namespace:cluster
|
|
annotations:
|
|
kubernetes.io/ingress.class: "nginx"
|
|
kubernetes.io/tls-acme: "true"
|
|
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
|
nginx.ingress.kubernetes.io/server-snippet: |
|
|
proxy_ssl_verify off;
|
|
spec:
|
|
tls:
|
|
- hosts:
|
|
- rook-ceph.example.com
|
|
secretName: rook-ceph.example.com
|
|
rules:
|
|
- host: rook-ceph.example.com
|
|
http:
|
|
paths:
|
|
- path: /
|
|
backend:
|
|
serviceName: rook-ceph-mgr-dashboard
|
|
servicePort: https-dashboard
|