github.com/nginxinc/kubernetes-ingress@v1.12.5/deployments/deployment/nginx-plus-ingress.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    name: nginx-ingress
     5    namespace: nginx-ingress
     6  spec:
     7    replicas: 1
     8    selector:
     9      matchLabels:
    10        app: nginx-ingress
    11    template:
    12      metadata:
    13        labels:
    14          app: nginx-ingress
    15       #annotations:
    16         #prometheus.io/scrape: "true"
    17         #prometheus.io/port: "9113"
    18         #prometheus.io/scheme: http
    19      spec:
    20        serviceAccountName: nginx-ingress
    21        containers:
    22        - image: nginx-plus-ingress:1.12.5
    23          imagePullPolicy: IfNotPresent
    24          name: nginx-plus-ingress
    25          ports:
    26          - name: http
    27            containerPort: 80
    28          - name: https
    29            containerPort: 443
    30          - name: readiness-port
    31            containerPort: 8081
    32         #- name: prometheus
    33           #containerPort: 9113
    34          readinessProbe:
    35            httpGet:
    36              path: /nginx-ready
    37              port: readiness-port
    38            periodSeconds: 1
    39          securityContext:
    40            allowPrivilegeEscalation: true
    41            runAsUser: 101 #nginx
    42            capabilities:
    43              drop:
    44              - ALL
    45              add:
    46              - NET_BIND_SERVICE
    47          env:
    48          - name: POD_NAMESPACE
    49            valueFrom:
    50              fieldRef:
    51                fieldPath: metadata.namespace
    52          - name: POD_NAME
    53            valueFrom:
    54              fieldRef:
    55                fieldPath: metadata.name
    56          args:
    57            - -nginx-plus
    58            - -nginx-configmaps=$(POD_NAMESPACE)/nginx-config
    59            - -default-server-tls-secret=$(POD_NAMESPACE)/default-server-secret
    60           #- -enable-app-protect
    61           #- -v=3 # Enables extensive logging. Useful for troubleshooting.
    62           #- -report-ingress-status
    63           #- -external-service=nginx-ingress
    64           #- -enable-prometheus-metrics
    65           #- -global-configuration=$(POD_NAMESPACE)/nginx-configuration