d33d33 · March 17, 2021 07:18 · zffocussss · Mar 17, 2021 · zffocussss · Mar 17, 2021
diff --git a/README.md b/README.md
diff --git a/echo-deployment.yml b/echo-deployment.yml
 apiVersion: v1
 kind: Namespace
 metadata:
  name: echo

 ---

 apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: echo-deployment
  namespace: echo
  labels:
    app: echo
 spec:
  replicas: 1
  selector:
    matchLabels:
      app: echo
  template:
    metadata:
      labels:
        app: echo
    spec:
      containers:
      - name: echo
        image: mendhak/http-https-echo
        ports:
        - containerPort: 80
        - containerPort: 443
diff --git a/echo-ingress.yml b/echo-ingress.yml
 apiVersion: v1
 kind: Service
 metadata:  
  name: echo-service
  namespace: echo
 spec:
  selector:    
    app: echo
  ports:  
  - name: http
    port: 80
    targetPort: 80
    protocol: TCP

 ---

 apiVersion: extensions/v1beta1
 kind: Ingress
 metadata:
  name: echo-ingress
  namespace: echo
 spec:
  backend:
    serviceName: echo-service
    servicePort: 80
diff --git a/ingress-lb.yml b/ingress-lb.yml
 kind: Service
 apiVersion: v1
 metadata:
  name: ingress-lb
  namespace: ingress-nginx
  annotations:
    service.beta.kubernetes.io/ovh-loadbalancer-proxy-protocol: "v1"
 spec:
  selector:
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx
  externalTrafficPolicy: Local
  ports:
  - name: http
    protocol: TCP
    port: 80
    targetPort: 80
  - name: https
    protocol: TCP
    port: 443
    targetPort: 443
  type: LoadBalancer
diff --git a/patch-ingress-configmap.yml b/patch-ingress-configmap.yml
 data:
  use-proxy-protocol: "true"
  proxy-real-ip-cidr: "10.108.0.0/14"
  use-forwarded-headers: "false"
  http-snippet: |
    geo $realip_remote_addr $is_lb {
      default       0;
      10.108.0.0/14 1;
    }
  server-snippet: |
    if ($is_lb != 1) {
      return 403;
    }
	apiVersion: v1
	kind: Namespace
	metadata:
	name: echo

	---

	apiVersion: apps/v1
	kind: Deployment
	metadata:
	name: echo-deployment
	namespace: echo
	labels:
	app: echo
	spec:
	replicas: 1
	selector:
	matchLabels:
	app: echo
	template:
	metadata:
	labels:
	app: echo
	spec:
	containers:
	- name: echo
	image: mendhak/http-https-echo
	ports:
	- containerPort: 80
	- containerPort: 443
	apiVersion: v1
	kind: Service
	metadata:
	name: echo-service
	namespace: echo
	spec:
	selector:
	app: echo
	ports:
	- name: http
	port: 80
	targetPort: 80
	protocol: TCP

	---

	apiVersion: extensions/v1beta1
	kind: Ingress
	metadata:
	name: echo-ingress
	namespace: echo
	spec:
	backend:
	serviceName: echo-service
	servicePort: 80
	data:
	use-proxy-protocol: "true"
	proxy-real-ip-cidr: "10.108.0.0/14"
	use-forwarded-headers: "false"
	http-snippet: \|
	geo $realip_remote_addr $is_lb {
	default 0;
	10.108.0.0/14 1;
	}
	server-snippet: \|
	if ($is_lb != 1) {
	return 403;
	}