rancher update

on-premise/cicd/argocd_v2.12.3/ing.yaml

@@ -0,0 +1,28 @@
+# Offloading setting.
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ing-argocd
+  namespace: argocd
+  annotations:
+    #nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/backend-protocol: "https"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: argocd.inje-private.com # 사전 생성된 인증서의 도메인적용.
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: argocd-server
+            port:
+              number: 443
+  tls:
+    - hosts:
+      - "argocd.inje-private.com"
+      secretName: argocd-ssl
+

on-premise/main/rancher_v2.9.1/rancher/values.yaml

@@ -40,7 +40,7 @@ restrictedAdmin: false
 # Control how the Rancher agents validate TLS connections
 # Valid options: strict, or system-store
 # Note, for new installations empty will default to strict on 2.9+, or system-store on 2.8 or older
-agentTLSMode: ""
+agentTLSMode: "system-store"
 
 # Extra environment variables passed to the rancher pods.
 # extraEnv:

on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-ing.yaml

@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: kiali-ingress
+  namespace: istio-system  # Kiali가 설치된 네임스페이스
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - kiali.nd-cicd-proto.com  # Kiali 대시보드에 접근할 도메인
+      secretName: kiali-tls  # TLS 비밀 정보 (secret)
+  rules:
+    - host: kiali.nd-cicd-proto.com  # Kiali 대시보드에 접근할 도메인
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: kiali
+                port:
+                  number: 20001  # Kiali의 서비스 포트 (기본 포트)
+