1 # Copyright (C) The Arvados Authors. All rights reserved.
3 # SPDX-License-Identifier: Apache-2.0
8 name: arvados-api-server-configmap
10 app: arvados-api-server
11 chart: {{ template "arvados.chart" . }}
12 release: {{ .Release.Name }}
13 heritage: {{ .Release.Service }}
15 {{- (tpl (.Files.Glob "config/api-server/*").AsConfig . ) | nindent 2 }}
21 name: arvados-api-server-https-configmap
23 app: {{ template "arvados.name" . }}
24 chart: {{ template "arvados.chart" . }}
25 release: {{ .Release.Name }}
26 heritage: {{ .Release.Service }}
30 server 127.0.0.1:9004;
33 server 127.0.0.1:8000;
37 proxy_http_version 1.1;
39 # When Keep clients request a list of Keep services from the API server, the
40 # server will automatically return the list of available proxies if
41 # the request headers include X-External-Client: 1. Following the example
42 # here, at the end of this section, add a line for each netmask that has
43 # direct access to Keep storage daemons to set this header value to 0.
44 geo $external_client {
46 {{- range .Values.internalIPs }}
53 server_name public-api;
55 ssl_certificate /etc/nginx/ssl.crt;
56 ssl_certificate_key /etc/nginx/ssl.key;
58 client_max_body_size 128m;
60 # Redirect plain HTTP requests to HTTPS.
61 error_page 497 301 =307 https://$host:$server_port$request_uri;
63 location /rails/_health/ping {
64 proxy_pass http://rails/_health/ping;
65 proxy_connect_timeout 90s;
66 proxy_read_timeout 300s;
68 proxy_set_header X-Forwarded-Proto https;
69 proxy_set_header Host $http_host;
70 proxy_set_header X-External-Client $external_client;
71 proxy_set_header X-Real-IP $remote_addr;
72 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
75 proxy_pass http://controller;
76 proxy_connect_timeout 90s;
77 proxy_read_timeout 300s;
79 proxy_set_header X-Forwarded-Proto https;
80 proxy_set_header Host $http_host;
81 proxy_set_header X-External-Client $external_client;
82 proxy_set_header X-Real-IP $remote_addr;
83 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;