charts/arvados/templates/keep-proxy-configmap.yaml

   1 # Copyright (C) The Arvados Authors. All rights reserved.
   2 #
   3 # SPDX-License-Identifier: Apache-2.0
   4
   5 ---
   6 apiVersion: v1
   7 kind: ConfigMap
   8 metadata:
   9   name: arvados-keep-proxy-https-configmap
  10   labels:
  11     app: {{ template "arvados.name" . }}
  12     chart: {{ template "arvados.chart" . }}
  13     release: {{ .Release.Name }}
  14     heritage: {{ .Release.Service }}
  15 data:
  16   nginx.conf: |
  17     upstream httpContainer {
  18       server                127.0.0.1:25106;
  19     }
  20
  21     server {
  22       listen                25107 ssl;
  23       server_name           arvados-keep-proxy-https;
  24
  25       ssl_certificate       /etc/nginx/ssl.crt;
  26       ssl_certificate_key   /etc/nginx/ssl.key;
  27
  28       # Clients need to be able to upload blocks of data up to 64MiB in size.
  29       client_body_buffer_size 64M;
  30       client_max_body_size  64m;
  31
  32       # Redirect plain HTTP requests to HTTPS.
  33       error_page 497 301 =307 https://$host:$server_port$request_uri;
  34
  35       location / {
  36         proxy_pass            http://httpContainer;
  37         proxy_connect_timeout 90s;
  38         proxy_read_timeout    300s;
  39         proxy_redirect        off;
  40         proxy_set_header      X-Forwarded-Proto https;
  41         proxy_set_header      Host $host:$server_port;
  42         proxy_set_header      X-Real-IP $remote_addr;
  43         proxy_set_header      X-Forwarded-For $proxy_add_x_forwarded_for;
  44       }
  45     }