1 # Copyright (C) The Arvados Authors. All rights reserved.
3 # SPDX-License-Identifier: Apache-2.0
6 apiVersion: apps/v1beta2
12 chart: {{ template "arvados.chart" . }}
13 release: {{ .Release.Name }}
14 heritage: {{ .Release.Service }}
20 release: {{ .Release.Name }}
25 release: {{ .Release.Name }}
28 - name: {{ .Chart.Name }}
30 imagePullPolicy: {{ .Values.image.pullPolicy }}
32 - name: nginx-configmap
33 mountPath: /etc/nginx/conf.d/default.conf
36 mountPath: /etc/nginx/ssl.crt
39 mountPath: /etc/nginx/ssl.key
45 - name: nginx-configmap
47 name: arvados-ws-https-configmap
52 name: arvados-ws-https-configmap
54 app: {{ template "arvados.name" . }}
55 chart: {{ template "arvados.chart" . }}
56 release: {{ .Release.Name }}
57 heritage: {{ .Release.Service }}
60 upstream httpContainer {
61 server arvados-ws:9003;
65 listen 0.0.0.0:9003 ssl;
66 server_name arvados-ws-https;
68 proxy_connect_timeout 90s;
69 proxy_read_timeout 300s;
70 proxy_set_header X-Real-IP $remote_addr;
73 ssl_certificate /etc/nginx/ssl.crt;
74 ssl_certificate_key /etc/nginx/ssl.key;
76 # Clients need to be able to upload blocks of data up to 64MiB in size.
77 client_max_body_size 64m;
79 # Redirect plain HTTP requests to HTTPS.
80 error_page 497 301 =307 https://$host:$server_port$request_uri;
83 proxy_pass http://httpContainer;
84 proxy_set_header Upgrade $http_upgrade;
85 proxy_set_header Connection "upgrade";
86 proxy_set_header Host $host:$server_port;
87 proxy_set_header X-Forwarded-For $remote_addr;
94 name: arvados-ws-https
96 app: {{ template "arvados.name" . }}
97 chart: {{ template "arvados.chart" . }}
98 release: {{ .Release.Name }}
99 heritage: {{ .Release.Service }}
102 loadBalancerIP: "8.8.8.8"
109 app: arvados-ws-https