AumerandDevin Buhl
caf50cd16d
* Update nginx-ingress helmrelease.yaml to prevent error masking If an application was throwing any error that is in this list, it forwarded that error to the default backend. A lot of 405 requests where POST requests which gave an 500 error, this resulting in the default backend to handle those requests, but that only accepts GET request, thus transforming the errors in 405. So in reality the real errors where masked, and the applications couldn't handle the error properly resulting in more issues. * Update helmrelease.yaml * Update README.md --------- Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
69 lines
1.6 KiB
YAML
69 lines
1.6 KiB
YAML
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: ingress-nginx
|
|
namespace: networking
|
|
spec:
|
|
interval: 15m
|
|
chart:
|
|
spec:
|
|
chart: ingress-nginx
|
|
version: 4.7.0
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: ingress-nginx
|
|
namespace: flux-system
|
|
maxHistory: 2
|
|
install:
|
|
createNamespace: true
|
|
remediation:
|
|
retries: 3
|
|
upgrade:
|
|
cleanupOnFail: true
|
|
remediation:
|
|
retries: 3
|
|
uninstall:
|
|
keepHistory: false
|
|
values:
|
|
controller:
|
|
extraEnvs:
|
|
- name: TZ
|
|
value: "${TIMEZONE}"
|
|
service:
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/hostname: "ingress.${SECRET_DOMAIN}"
|
|
loadBalancerIP: "${METALLB_INGRESS_ADDR}"
|
|
externalTrafficPolicy: Local
|
|
publishService:
|
|
enabled: true
|
|
ingressClassResource:
|
|
default: true
|
|
config:
|
|
client-header-timeout: 120
|
|
client-body-buffer-size: "100M"
|
|
client-body-timeout: 120
|
|
enable-brotli: "true"
|
|
hsts-max-age: "31449600"
|
|
keep-alive: 120
|
|
keep-alive-requests: 10000
|
|
proxy-body-size: "100M"
|
|
ssl-protocols: "TLSv1.3 TLSv1.2"
|
|
metrics:
|
|
enabled: true
|
|
serviceMonitor:
|
|
enabled: true
|
|
namespace: networking
|
|
namespaceSelector:
|
|
any: true
|
|
extraArgs:
|
|
default-ssl-certificate: "networking/${SECRET_DOMAIN/./-}-production-tls"
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 250Mi
|
|
limits:
|
|
memory: 500Mi
|
|
defaultBackend:
|
|
enabled: false
|