mirror of
https://github.com/bigchaindb/bigchaindb.git
synced 2024-10-13 13:34:05 +00:00
Secure WebSocket Support (#1619)
* Remove support for whitelist * Rename nginx to nginx-api * Remove websocket support from nginx-api * Change nginx to nginx-api service The nginx-api service will proxy requests to the BigchainDB HTTP API. * Rename ngx-instance-0 to ngx-api-instance-0 in nginx_3scale * Update nginx-api service base docker image and README * Add nginx-ws service to support Websocket * Add config files for simple dev setup * WS support with split NGINX * NGINX module as single entrypoint into the cluster. * Tested HTTP and WS with latest configs * Openresty as separate service * Remove upstream api port as configuration parameter * Changes while testing * Adding READMEs for nginx-http and nginx-https modules * Documentation update * Change 'Openresty' to 'OpenResty'.
This commit is contained in:
32
k8s/nginx-https/nginx-https-svc.yaml
Normal file
32
k8s/nginx-https/nginx-https-svc.yaml
Normal file
@@ -0,0 +1,32 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: ngx-https-instance-0
|
||||
namespace: default
|
||||
labels:
|
||||
name: ngx-https-instance-0
|
||||
annotations:
|
||||
# NOTE: the following annotation is a beta feature and
|
||||
# only available in GCE/GKE and Azure as of now
|
||||
service.beta.kubernetes.io/external-traffic: OnlyLocal
|
||||
spec:
|
||||
selector:
|
||||
app: ngx-https-instance-0-dep
|
||||
ports:
|
||||
- port: "<cluster-frontend-port from ConfigMap>"
|
||||
targetPort: "<cluster-frontend-port from ConfigMap>"
|
||||
name: public-secure-cluster-port
|
||||
protocol: TCP
|
||||
- port: "<mongodb-frontend-port from ConfigMap>"
|
||||
targetPort: "<mongodb-frontend-port from ConfigMap>"
|
||||
name: public-mdb-port
|
||||
protocol: TCP
|
||||
- port: "<threescale-api-port from ConfigMap>"
|
||||
targetPort: "<threescale-api-port from ConfigMap>"
|
||||
name: public-threescale-port
|
||||
protocol: TCP
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
name: public-insecure-cluster-port
|
||||
protocol: TCP
|
||||
type: LoadBalancer
|
||||
Reference in New Issue
Block a user