tea/browsertrix
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ingress: only set ssl-redirect if using tls (#2432)

Browse Source 
otherwise, http path should be accessible. Can be used when TLS
termination handled outside of ingress.
This commit is contained in:
Ilya Kreymer 2025-02-26 23:12:07 -08:00 committed by GitHub
parent 00e85c3e94
commit 67668438c0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
chart/templates/ingress.yaml
View File

@ -10,18 +10,20 @@ metadata:
{{- if .Values.ingress.useOldClassAnnotation }} {{- if .Values.ingress.useOldClassAnnotation }}
kubernetes.io/ingress.class: {{ .Values.ingress_class | default "nginx" }} kubernetes.io/ingress.class: {{ .Values.ingress_class | default "nginx" }}
{{- end }} {{- end }}
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/proxy-body-size: "0" nginx.ingress.kubernetes.io/proxy-body-size: "0"
nginx.ingress.kubernetes.io/proxy-request-buffering: "off" nginx.ingress.kubernetes.io/proxy-request-buffering: "off"
# for larger uploads to not timeout # for larger uploads to not timeout
nginx.ingress.kubernetes.io/proxy-read-timeout: "300" nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
nginx.ingress.kubernetes.io/proxy-buffering: "off" nginx.ingress.kubernetes.io/proxy-buffering: "off"
nginx.ingress.kubernetes.io/upstream-vhost: "{{ .Values.ingress.host }}"
{{- if .Values.ingress.tls }} {{- if .Values.ingress.tls }}
cert-manager.io/cluster-issuer: {{ .Values.ingress.custom_cluster_issuer | default "cert-main" }} cert-manager.io/cluster-issuer: {{ .Values.ingress.custom_cluster_issuer | default "cert-main" }}
{{- end }}
nginx.ingress.kubernetes.io/upstream-vhost: "{{ .Values.ingress.host }}"
nginx.ingress.kubernetes.io/configuration-snippet: | nginx.ingress.kubernetes.io/configuration-snippet: |
proxy_set_header X-Forwarded-Proto {{ .Values.ingress.tls | ternary "https" "http" }}; proxy_set_header X-Forwarded-Proto {{ .Values.ingress.tls | ternary "https" "http" }};
nginx.ingress.kubernetes.io/ssl-redirect: "true"
{{- else }}
nginx.ingress.kubernetes.io/ssl-redirect: "false"
{{- end }}
spec: spec:
{{- if not .Values.ingress.useOldClassAnnotation }} {{- if not .Values.ingress.useOldClassAnnotation }}