github.com/replicatedhq/ship@v0.55.0/integration/init/kustomize-overlay/expected/nginx-ingress-controller.yaml (about) 1 apiVersion: v1 2 kind: Namespace 3 metadata: 4 labels: 5 app.kubernetes.io/name: ingress-nginx 6 app.kubernetes.io/part-of: ingress-nginx 7 name: ingress-nginx 8 --- 9 apiVersion: v1 10 kind: ServiceAccount 11 metadata: 12 labels: 13 app.kubernetes.io/name: ingress-nginx 14 app.kubernetes.io/part-of: ingress-nginx 15 name: nginx-ingress-serviceaccount 16 namespace: ingress-nginx 17 --- 18 apiVersion: rbac.authorization.k8s.io/v1beta1 19 kind: Role 20 metadata: 21 labels: 22 app.kubernetes.io/name: ingress-nginx 23 app.kubernetes.io/part-of: ingress-nginx 24 name: nginx-ingress-role 25 namespace: ingress-nginx 26 rules: 27 - apiGroups: 28 - "" 29 resources: 30 - configmaps 31 - pods 32 - secrets 33 - namespaces 34 verbs: 35 - get 36 - apiGroups: 37 - "" 38 resourceNames: 39 - ingress-controller-leader-nginx 40 resources: 41 - configmaps 42 verbs: 43 - get 44 - update 45 - apiGroups: 46 - "" 47 resources: 48 - configmaps 49 verbs: 50 - create 51 - apiGroups: 52 - "" 53 resources: 54 - endpoints 55 verbs: 56 - get 57 --- 58 apiVersion: rbac.authorization.k8s.io/v1beta1 59 kind: ClusterRole 60 metadata: 61 labels: 62 app.kubernetes.io/name: ingress-nginx 63 app.kubernetes.io/part-of: ingress-nginx 64 name: nginx-ingress-clusterrole 65 rules: 66 - apiGroups: 67 - "" 68 resources: 69 - configmaps 70 - endpoints 71 - nodes 72 - pods 73 - secrets 74 verbs: 75 - list 76 - watch 77 - apiGroups: 78 - "" 79 resources: 80 - nodes 81 verbs: 82 - get 83 - apiGroups: 84 - "" 85 resources: 86 - services 87 verbs: 88 - get 89 - list 90 - watch 91 - apiGroups: 92 - extensions 93 resources: 94 - ingresses 95 verbs: 96 - get 97 - list 98 - watch 99 - apiGroups: 100 - "" 101 resources: 102 - events 103 verbs: 104 - create 105 - patch 106 - apiGroups: 107 - extensions 108 resources: 109 - ingresses/status 110 verbs: 111 - update 112 --- 113 apiVersion: rbac.authorization.k8s.io/v1beta1 114 kind: RoleBinding 115 metadata: 116 labels: 117 app.kubernetes.io/name: ingress-nginx 118 app.kubernetes.io/part-of: ingress-nginx 119 name: nginx-ingress-role-nisa-binding 120 namespace: ingress-nginx 121 roleRef: 122 apiGroup: rbac.authorization.k8s.io 123 kind: Role 124 name: nginx-ingress-role 125 subjects: 126 - kind: ServiceAccount 127 name: nginx-ingress-serviceaccount 128 namespace: ingress-nginx 129 --- 130 apiVersion: rbac.authorization.k8s.io/v1beta1 131 kind: ClusterRoleBinding 132 metadata: 133 labels: 134 app.kubernetes.io/name: ingress-nginx 135 app.kubernetes.io/part-of: ingress-nginx 136 name: nginx-ingress-clusterrole-nisa-binding 137 roleRef: 138 apiGroup: rbac.authorization.k8s.io 139 kind: ClusterRole 140 name: nginx-ingress-clusterrole 141 subjects: 142 - kind: ServiceAccount 143 name: nginx-ingress-serviceaccount 144 namespace: ingress-nginx 145 --- 146 apiVersion: v1 147 data: 148 use-proxy-protocol: "true" 149 kind: ConfigMap 150 metadata: 151 labels: 152 app.kubernetes.io/name: ingress-nginx 153 app.kubernetes.io/part-of: ingress-nginx 154 name: nginx-configuration 155 namespace: ingress-nginx 156 --- 157 apiVersion: v1 158 kind: ConfigMap 159 metadata: 160 labels: 161 app.kubernetes.io/name: ingress-nginx 162 app.kubernetes.io/part-of: ingress-nginx 163 name: tcp-services 164 namespace: ingress-nginx 165 --- 166 apiVersion: v1 167 kind: ConfigMap 168 metadata: 169 labels: 170 app.kubernetes.io/name: ingress-nginx 171 app.kubernetes.io/part-of: ingress-nginx 172 name: udp-services 173 namespace: ingress-nginx 174 --- 175 apiVersion: v1 176 kind: Service 177 metadata: 178 annotations: 179 service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "60" 180 service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: '*' 181 labels: 182 app.kubernetes.io/name: ingress-nginx 183 app.kubernetes.io/part-of: ingress-nginx 184 name: ingress-nginx 185 namespace: ingress-nginx 186 spec: 187 ports: 188 - name: http 189 port: 80 190 targetPort: http 191 - name: https 192 port: 443 193 targetPort: https 194 selector: 195 app.kubernetes.io/name: ingress-nginx 196 app.kubernetes.io/part-of: ingress-nginx 197 type: LoadBalancer 198 --- 199 apiVersion: apps/v1 200 kind: Deployment 201 metadata: 202 labels: 203 app.kubernetes.io/name: ingress-nginx 204 app.kubernetes.io/part-of: ingress-nginx 205 name: nginx-ingress-controller 206 namespace: ingress-nginx 207 spec: 208 replicas: 1 209 selector: 210 matchLabels: 211 app.kubernetes.io/name: ingress-nginx 212 app.kubernetes.io/part-of: ingress-nginx 213 template: 214 metadata: 215 annotations: 216 prometheus.io/port: "10254" 217 prometheus.io/scrape: "true" 218 labels: 219 app.kubernetes.io/name: ingress-nginx 220 app.kubernetes.io/part-of: ingress-nginx 221 spec: 222 containers: 223 - args: 224 - /nginx-ingress-controller 225 - --configmap=$(POD_NAMESPACE)/nginx-configuration 226 - --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services 227 - --udp-services-configmap=$(POD_NAMESPACE)/udp-services 228 - --publish-service=$(POD_NAMESPACE)/ingress-nginx 229 - --annotations-prefix=nginx.ingress.kubernetes.io 230 env: 231 - name: POD_NAME 232 valueFrom: 233 fieldRef: 234 fieldPath: metadata.name 235 - name: POD_NAMESPACE 236 valueFrom: 237 fieldRef: 238 fieldPath: metadata.namespace 239 image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.22.0 240 livenessProbe: 241 failureThreshold: 3 242 httpGet: 243 path: /healthz 244 port: 10254 245 scheme: HTTP 246 initialDelaySeconds: 10 247 periodSeconds: 10 248 successThreshold: 1 249 timeoutSeconds: 1 250 name: nginx-ingress-controller 251 ports: 252 - containerPort: 80 253 name: http 254 - containerPort: 443 255 name: https 256 readinessProbe: 257 failureThreshold: 3 258 httpGet: 259 path: /healthz 260 port: 10254 261 scheme: HTTP 262 periodSeconds: 10 263 successThreshold: 1 264 timeoutSeconds: 1 265 securityContext: 266 allowPrivilegeEscalation: true 267 capabilities: 268 add: 269 - NET_BIND_SERVICE 270 drop: 271 - ALL 272 runAsUser: 33 273 serviceAccountName: nginx-ingress-serviceaccount