charts/arvados/templates/keep-web-configmap.yaml

   1 # Copyright (C) The Arvados Authors. All rights reserved.
   2 #
   3 # SPDX-License-Identifier: Apache-2.0
   4
   5 ---
   6 apiVersion: v1
   7 kind: ConfigMap
   8 metadata:
   9   name: arvados-keep-web-https-configmap
  10   labels:
  11     app: {{ template "arvados.name" . }}
  12     chart: {{ template "arvados.chart" . }}
  13     release: {{ .Release.Name }}
  14     heritage: {{ .Release.Service }}
  15 data:
  16   nginx.conf: |
  17     upstream httpContainer {
  18       server                127.0.0.1:29002;
  19     }
  20
  21     server {
  22       listen                9002 ssl;
  23       server_name           arvados-keep-web-https;
  24
  25       proxy_connect_timeout 90s;
  26       proxy_read_timeout    300s;
  27       proxy_set_header      X-Real-IP $remote_addr;
  28
  29       ssl_certificate       /etc/nginx/ssl.crt;
  30       ssl_certificate_key   /etc/nginx/ssl.key;
  31
  32       # Clients need to be able to upload blocks of data up to 64MiB in size.
  33       client_max_body_size  64m;
  34
  35       # Redirect plain HTTP requests to HTTPS.
  36       error_page 497 301 =307 https://$host:$server_port$request_uri;
  37
  38       location / {
  39         proxy_pass          http://httpContainer;
  40         proxy_set_header    Upgrade         $http_upgrade;
  41         proxy_set_header    Connection      "upgrade";
  42         proxy_set_header    Host            $host:$server_port;
  43         proxy_set_header    X-Forwarded-For $remote_addr;
  44       }
  45     }