diff --git a/on-premise/cicd/argocd_v2.12.3/ing.yaml b/on-premise/cicd/argocd_v2.12.3/ing.yaml new file mode 100644 index 0000000..62b2a3b --- /dev/null +++ b/on-premise/cicd/argocd_v2.12.3/ing.yaml @@ -0,0 +1,28 @@ +# Offloading setting. +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: ing-argocd + namespace: argocd + annotations: + #nginx.ingress.kubernetes.io/force-ssl-redirect: "true" + nginx.ingress.kubernetes.io/backend-protocol: "https" + nginx.ingress.kubernetes.io/ssl-passthrough: "true" +spec: + ingressClassName: nginx + rules: + - host: argocd.inje-private.com # 사전 생성된 인증서의 도메인적용. + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: argocd-server + port: + number: 443 + tls: + - hosts: + - "argocd.inje-private.com" + secretName: argocd-ssl + diff --git a/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz b/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz index a97d8ac..e1e62b4 100644 Binary files a/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz and b/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz differ diff --git a/on-premise/main/rancher_v2.9.1/rancher/values.yaml b/on-premise/main/rancher_v2.9.1/rancher/values.yaml index 4f35a88..12e3c63 100644 --- a/on-premise/main/rancher_v2.9.1/rancher/values.yaml +++ b/on-premise/main/rancher_v2.9.1/rancher/values.yaml @@ -40,7 +40,7 @@ restrictedAdmin: false # Control how the Rancher agents validate TLS connections # Valid options: strict, or system-store # Note, for new installations empty will default to strict on 2.9+, or system-store on 2.8 or older -agentTLSMode: "" +agentTLSMode: "system-store" # Extra environment variables passed to the rancher pods. # extraEnv: diff --git a/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-ing.yaml b/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-ing.yaml new file mode 100644 index 0000000..12d1b57 --- /dev/null +++ b/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-ing.yaml @@ -0,0 +1,25 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: kiali-ingress + namespace: istio-system # Kiali가 설치된 네임스페이스 + annotations: + nginx.ingress.kubernetes.io/rewrite-target: / +spec: + ingressClassName: nginx + tls: + - hosts: + - kiali.nd-cicd-proto.com # Kiali 대시보드에 접근할 도메인 + secretName: kiali-tls # TLS 비밀 정보 (secret) + rules: + - host: kiali.nd-cicd-proto.com # Kiali 대시보드에 접근할 도메인 + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: kiali + port: + number: 20001 # Kiali의 서비스 포트 (기본 포트) +