github.com/nginxinc/kubernetes-ingress@v1.12.5/deployments/daemon-set/nginx-plus-ingress.yaml (about)

     1  apiVersion: apps/v1
     2  kind: DaemonSet
     3  metadata:
     4    name: nginx-ingress
     5    namespace: nginx-ingress
     6  spec:
     7    selector:
     8      matchLabels:
     9        app: nginx-ingress
    10    template:
    11      metadata:
    12        labels:
    13          app: nginx-ingress
    14       #annotations:
    15         #prometheus.io/scrape: "true"
    16         #prometheus.io/port: "9113"
    17         #prometheus.io/scheme: http
    18      spec:
    19        serviceAccountName: nginx-ingress
    20        containers:
    21        - image: nginx-plus-ingress:1.12.5
    22          imagePullPolicy: IfNotPresent
    23          name: nginx-plus-ingress
    24          ports:
    25          - name: http
    26            containerPort: 80
    27            hostPort: 80
    28          - name: https
    29            containerPort: 443
    30            hostPort: 443
    31          - name: readiness-port
    32            containerPort: 8081
    33         #- name: prometheus
    34           #containerPort: 9113
    35          readinessProbe:
    36            httpGet:
    37              path: /nginx-ready
    38              port: readiness-port
    39            periodSeconds: 1
    40          securityContext:
    41            allowPrivilegeEscalation: true
    42            runAsUser: 101 #nginx
    43            capabilities:
    44              drop:
    45              - ALL
    46              add:
    47              - NET_BIND_SERVICE
    48          env:
    49          - name: POD_NAMESPACE
    50            valueFrom:
    51              fieldRef:
    52                fieldPath: metadata.namespace
    53          - name: POD_NAME
    54            valueFrom:
    55              fieldRef:
    56                fieldPath: metadata.name
    57          args:
    58            - -nginx-plus
    59            - -nginx-configmaps=$(POD_NAMESPACE)/nginx-config
    60            - -default-server-tls-secret=$(POD_NAMESPACE)/default-server-secret
    61           #- -enable-app-protect
    62           #- -v=3 # Enables extensive logging. Useful for troubleshooting.
    63           #- -report-ingress-status
    64           #- -external-service=nginx-ingress
    65           #- -enable-prometheus-metrics
    66           #- -global-configuration=$(POD_NAMESPACE)/nginx-configuration