github.com/replicatedcom/ship@v0.50.0/integration/init/multiple-kustomize-bases/expected/nginx-ingress-controller.yaml (about) 1 apiVersion: v1 2 kind: Namespace 3 metadata: 4 labels: 5 app.kubernetes.io/name: ingress-nginx 6 app.kubernetes.io/part-of: ingress-nginx 7 name: ingress-nginx 8 --- 9 apiVersion: v1 10 kind: ServiceAccount 11 metadata: 12 labels: 13 app.kubernetes.io/name: ingress-nginx 14 app.kubernetes.io/part-of: ingress-nginx 15 name: nginx-ingress-serviceaccount 16 namespace: ingress-nginx 17 --- 18 apiVersion: rbac.authorization.k8s.io/v1beta1 19 kind: Role 20 metadata: 21 labels: 22 app.kubernetes.io/name: ingress-nginx 23 app.kubernetes.io/part-of: ingress-nginx 24 name: nginx-ingress-role 25 namespace: ingress-nginx 26 rules: 27 - apiGroups: 28 - "" 29 resources: 30 - configmaps 31 - pods 32 - secrets 33 - namespaces 34 verbs: 35 - get 36 - apiGroups: 37 - "" 38 resourceNames: 39 - ingress-controller-leader-nginx 40 resources: 41 - configmaps 42 verbs: 43 - get 44 - update 45 - apiGroups: 46 - "" 47 resources: 48 - configmaps 49 verbs: 50 - create 51 - apiGroups: 52 - "" 53 resources: 54 - endpoints 55 verbs: 56 - get 57 --- 58 apiVersion: rbac.authorization.k8s.io/v1beta1 59 kind: ClusterRole 60 metadata: 61 labels: 62 app.kubernetes.io/name: ingress-nginx 63 app.kubernetes.io/part-of: ingress-nginx 64 name: nginx-ingress-clusterrole 65 rules: 66 - apiGroups: 67 - "" 68 resources: 69 - configmaps 70 - endpoints 71 - nodes 72 - pods 73 - secrets 74 verbs: 75 - list 76 - watch 77 - apiGroups: 78 - "" 79 resources: 80 - nodes 81 verbs: 82 - get 83 - apiGroups: 84 - "" 85 resources: 86 - services 87 verbs: 88 - get 89 - list 90 - watch 91 - apiGroups: 92 - extensions 93 resources: 94 - ingresses 95 verbs: 96 - get 97 - list 98 - watch 99 - apiGroups: 100 - "" 101 resources: 102 - events 103 verbs: 104 - create 105 - patch 106 - apiGroups: 107 - extensions 108 resources: 109 - ingresses/status 110 verbs: 111 - update 112 --- 113 apiVersion: rbac.authorization.k8s.io/v1beta1 114 kind: RoleBinding 115 metadata: 116 labels: 117 app.kubernetes.io/name: ingress-nginx 118 app.kubernetes.io/part-of: ingress-nginx 119 name: nginx-ingress-role-nisa-binding 120 namespace: ingress-nginx 121 roleRef: 122 apiGroup: rbac.authorization.k8s.io 123 kind: Role 124 name: nginx-ingress-role 125 subjects: 126 - kind: ServiceAccount 127 name: nginx-ingress-serviceaccount 128 namespace: ingress-nginx 129 --- 130 apiVersion: rbac.authorization.k8s.io/v1beta1 131 kind: ClusterRoleBinding 132 metadata: 133 labels: 134 app.kubernetes.io/name: ingress-nginx 135 app.kubernetes.io/part-of: ingress-nginx 136 name: nginx-ingress-clusterrole-nisa-binding 137 roleRef: 138 apiGroup: rbac.authorization.k8s.io 139 kind: ClusterRole 140 name: nginx-ingress-clusterrole 141 subjects: 142 - kind: ServiceAccount 143 name: nginx-ingress-serviceaccount 144 namespace: ingress-nginx 145 --- 146 apiVersion: v1 147 data: 148 use-proxy-protocol: "true" 149 kind: ConfigMap 150 metadata: 151 labels: 152 app.kubernetes.io/name: ingress-nginx 153 app.kubernetes.io/part-of: ingress-nginx 154 name: nginx-configuration 155 namespace: ingress-nginx 156 --- 157 apiVersion: v1 158 kind: ConfigMap 159 metadata: 160 labels: 161 app.kubernetes.io/name: ingress-nginx 162 app.kubernetes.io/part-of: ingress-nginx 163 name: tcp-services 164 namespace: ingress-nginx 165 --- 166 apiVersion: v1 167 kind: ConfigMap 168 metadata: 169 labels: 170 app.kubernetes.io/name: ingress-nginx 171 app.kubernetes.io/part-of: ingress-nginx 172 name: udp-services 173 namespace: ingress-nginx 174 --- 175 apiVersion: v1 176 kind: Service 177 metadata: 178 annotations: 179 service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "60" 180 service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: '*' 181 labels: 182 app.kubernetes.io/name: ingress-nginx 183 app.kubernetes.io/part-of: ingress-nginx 184 name: ingress-nginx 185 namespace: ingress-nginx 186 spec: 187 ports: 188 - name: http 189 port: 80 190 targetPort: http 191 - name: https 192 port: 443 193 targetPort: https 194 selector: 195 app.kubernetes.io/name: ingress-nginx 196 app.kubernetes.io/part-of: ingress-nginx 197 type: LoadBalancer 198 --- 199 apiVersion: v1 200 kind: Service 201 metadata: 202 name: placeholder 203 namespace: placeholder 204 spec: 205 ports: 206 - name: http 207 port: 80 208 targetPort: http 209 - name: https 210 port: 443 211 targetPort: https 212 selector: 213 app.kubernetes.io/name: placeholder 214 app.kubernetes.io/part-of: placeholder 215 type: LoadBalancer 216 --- 217 apiVersion: apps/v1 218 kind: Deployment 219 metadata: 220 labels: 221 app.kubernetes.io/name: ingress-nginx 222 app.kubernetes.io/part-of: ingress-nginx 223 name: nginx-ingress-controller 224 namespace: ingress-nginx 225 spec: 226 replicas: 1 227 selector: 228 matchLabels: 229 app.kubernetes.io/name: ingress-nginx 230 app.kubernetes.io/part-of: ingress-nginx 231 template: 232 metadata: 233 annotations: 234 prometheus.io/port: "10254" 235 prometheus.io/scrape: "true" 236 labels: 237 app.kubernetes.io/name: ingress-nginx 238 app.kubernetes.io/part-of: ingress-nginx 239 spec: 240 containers: 241 - args: 242 - /nginx-ingress-controller 243 - --configmap=$(POD_NAMESPACE)/nginx-configuration 244 - --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services 245 - --udp-services-configmap=$(POD_NAMESPACE)/udp-services 246 - --publish-service=$(POD_NAMESPACE)/ingress-nginx 247 - --annotations-prefix=nginx.ingress.kubernetes.io 248 env: 249 - name: POD_NAME 250 valueFrom: 251 fieldRef: 252 fieldPath: metadata.name 253 - name: POD_NAMESPACE 254 valueFrom: 255 fieldRef: 256 fieldPath: metadata.namespace 257 image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.22.0 258 livenessProbe: 259 failureThreshold: 3 260 httpGet: 261 path: /healthz 262 port: 10254 263 scheme: HTTP 264 initialDelaySeconds: 10 265 periodSeconds: 10 266 successThreshold: 1 267 timeoutSeconds: 1 268 name: nginx-ingress-controller 269 ports: 270 - containerPort: 80 271 name: http 272 - containerPort: 443 273 name: https 274 readinessProbe: 275 failureThreshold: 3 276 httpGet: 277 path: /healthz 278 port: 10254 279 scheme: HTTP 280 periodSeconds: 10 281 successThreshold: 1 282 timeoutSeconds: 1 283 securityContext: 284 allowPrivilegeEscalation: true 285 capabilities: 286 add: 287 - NET_BIND_SERVICE 288 drop: 289 - ALL 290 runAsUser: 33 291 serviceAccountName: nginx-ingress-serviceaccount