ducky/nginx
2015-06-30
ducky/nginx/replication-controllers/nginx.json
Make nginx kubernetes-ready. Add our upstream definitions, to route requests to our ducky-authd service and our ducky-subscriptionsd service. Remove the test handler that was installed at /. Update our proxy-redirect rules so the proxy redirects actually work now, and what used to redirect us to /profiles now redirects us to /auth/profiles. Define a Replication Controller that will spin up nginx pods for us and auto-attach the necessary JWT secret volume to read our JWT secret. Define a Service that will route to nginx for us.
| paddy@1 | 1 { |
| paddy@1 | 2 "kind":"ReplicationController", |
| paddy@1 | 3 "apiVersion":"v1", |
| paddy@1 | 4 "metadata":{ |
| paddy@1 | 5 "name": "ducky-nginx", |
| paddy@1 | 6 "labels": { |
| paddy@1 | 7 "name": "nginx", |
| paddy@1 | 8 "context": "ducky", |
| paddy@1 | 9 "repo": "ducky--nginx", |
| paddy@1 | 10 "role": "proxy" |
| paddy@1 | 11 } |
| paddy@1 | 12 }, |
| paddy@1 | 13 "spec":{ |
| paddy@1 | 14 "replicas":1, |
| paddy@1 | 15 "selector":{ |
| paddy@1 | 16 "context": "ducky", |
| paddy@1 | 17 "name":"nginx", |
| paddy@1 | 18 "repo": "ducky--nginx", |
| paddy@1 | 19 "role": "proxy" |
| paddy@1 | 20 }, |
| paddy@1 | 21 "template":{ |
| paddy@1 | 22 "metadata":{ |
| paddy@1 | 23 "labels":{ |
| paddy@1 | 24 "context": "ducky", |
| paddy@1 | 25 "name":"nginx", |
| paddy@1 | 26 "repo": "ducky--nginx", |
| paddy@1 | 27 "role": "proxy" |
| paddy@1 | 28 } |
| paddy@1 | 29 }, |
| paddy@1 | 30 "spec":{ |
| paddy@1 | 31 "volumes": [ |
| paddy@1 | 32 { |
| paddy@1 | 33 "name": "jwt-volume", |
| paddy@1 | 34 "secret": { |
| paddy@1 | 35 "secretName": "jwt" |
| paddy@1 | 36 } |
| paddy@1 | 37 } |
| paddy@1 | 38 ], |
| paddy@1 | 39 "containers":[ |
| paddy@1 | 40 { |
| paddy@1 | 41 "name":"ducky-nginx", |
| paddy@1 | 42 "image": "ducky/nginx:latest", |
| paddy@1 | 43 "volumeMounts": [ |
| paddy@1 | 44 { |
| paddy@1 | 45 "name": "jwt-volume", |
| paddy@1 | 46 "readOnly": true, |
| paddy@1 | 47 "mountPath": "/private/kubernetes/jwt" |
| paddy@1 | 48 } |
| paddy@1 | 49 ], |
| paddy@1 | 50 "ports":[ |
| paddy@1 | 51 { |
| paddy@1 | 52 "name": "http", |
| paddy@1 | 53 "containerPort":8080 |
| paddy@1 | 54 } |
| paddy@1 | 55 ] |
| paddy@1 | 56 } |
| paddy@1 | 57 ] |
| paddy@1 | 58 } |
| paddy@1 | 59 } |
| paddy@1 | 60 } |
| paddy@1 | 61 } |