Skip to content

Commit

Permalink
Remove nginx config files from cloud proxy container in favor of Conf…
Browse files Browse the repository at this point in the history
…igmaps for easier runtime overrides

Signed-off-by: Dom Del Nano <[email protected]>
  • Loading branch information
ddelnano committed Sep 10, 2024
1 parent 07fff00 commit 9169b67
Show file tree
Hide file tree
Showing 14 changed files with 456 additions and 422 deletions.
1 change: 1 addition & 0 deletions k8s/cloud/base/kustomization.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -44,3 +44,4 @@ resources:
- cron_script_deployment.yaml
- cron_script_service.yaml
- support_access_config.yaml
- proxy_nginx_config.yaml
33 changes: 33 additions & 0 deletions k8s/cloud/base/proxy_deployment.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -78,6 +78,36 @@ spec:
volumeMounts:
- name: certs
mountPath: /certs
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/nginx.conf.tmpl
subPath: nginx.conf.tmpl
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_vars.conf
subPath: pixie_vars.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_api.conf
subPath: pixie_api.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_cache.conf
subPath: pixie_cache.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_compression.conf
subPath: pixie_compression.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_filter.conf
subPath: pixie_filter.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_health_check.conf
subPath: pixie_health_check.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/pixie_server_defaults.conf
subPath: pixie_server_defaults.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/headers_common.conf
subPath: headers_common.conf
- name: nginx-config
mountPath: /usr/local/openresty/nginx/conf/nginx_vars.conf
subPath: nginx_vars.conf
securityContext:
allowPrivilegeEscalation: false
capabilities:
Expand Down Expand Up @@ -146,3 +176,6 @@ spec:
- name: certs
secret:
secretName: cloud-proxy-tls-certs
- name: nginx-config
configMap:
name: pl-proxy-nginx-config
Loading

0 comments on commit 9169b67

Please sign in to comment.