Add kong custom-values.yaml, CUSTOM-README.md

2025-02-06 14:59:18 +09:00
parent d05533a3ea
commit 9db5358a00
2 changed files with 353 additions and 0 deletions
@@ -0,0 +1,154 @@
+image:
+  repository: paasup/kong-oidc-keycloak-authz
+  tag: 3.4.0-0.1.0
+
+deployment:
+  kong:
+    enabled: true
+  daemonset: false 
+
+  # proxy 컨테이너의 timezone 설정
+  userDefinedVolumeMounts:
+    - name: tz-config
+      mountPath: /etc/localtime
+  userDefinedVolumes:
+    - name: tz-config
+      hostPath:
+        path: /usr/share/zoneinfo/Asia/Seoul
+
+# Kong proxy 서비스 설정
+proxy:
+  enabled: true
+  type: LoadBalancer
+  ingress:
+    enable: false
+
+# Kong admin API 서비스 설정
+admin:
+  annotations:
+    konghq.com/protocol: https
+  enabled: true
+  type: ClusterIP
+  ingress:
+    enabled: true
+    annotations:
+      konghq.com/https-redirect-status-code: "301"
+      konghq.com/protocols: https
+      konghq.com/strip-path: "true"
+    hostname: kong.example.org
+    ingressClassName: kong
+    path: /api
+    # certificate를 사용하여 추가시 해당 이름으로 생성됨
+    # (helm release는 kong으로 배포해야함)
+    tls: kong-kong-admin-cert 
+  
+manager:
+  enabled: true
+  type: ClusterIP
+  annotations:
+    konghq.com/protocol: https
+  http:
+    enabled: false
+  ingress:
+    enabled: true
+    annotations:
+      konghq.com/https-redirect-status-code: "301"
+      nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+    hostname: kong.example.org
+    ingressClassName: kong
+    path: /
+    tls: kong-kong-admin-cert
+
+# cluster:
+#   enabled: false
+#   type: ClusterIP
+#   tls:
+#     enabled: true
+#   labels:
+#     konghq.com/service: cluster
+
+# Enterprise 영역 비활성화
+enterprise:
+  enabled: false
+portal:
+  enabled: false
+portalapi:
+  enabled: false
+clustertelemetry:
+  enabled: false
+
+# cert-manager를 통한 인증서 생성 설정
+certificates:
+  enabled: true
+  clusterIssuer: selfsigned-issuer
+  admin:
+    enabled: true
+    commonName: kong.example.org
+  portal:
+    enabled: false
+  proxy:
+    enabled: false
+  cluster:
+    enabled: false
+
+# Kong의 Conriguration 설정
+env:
+  #admin_gui_url: https://kong.example.org/           # kong manager의 URL 주소
+  #admin_gui_api_url: https://kong.example.org/api    # 
+  admin_access_log: /dev/stdout
+  admin_error_log: /dev/stdout
+  admin_gui_access_log: /dev/stdout
+  admin_gui_error_log: /dev/stdout
+  cluster_data_plane_purge_delay: 60
+  cluster_listen: 0.0.0.0:8005
+  cluster_telemetry_listen: 0.0.0.0:8006
+  log_level: info
+  lua_package_path: /opt/?.lua;;
+  nginx_worker_processes: "2"
+  database: postgres
+  pg_database: kong
+  pg_host: kong-postgresql.kong.svc.cluster.local
+  pg_ssl: "off"
+  pg_ssl_verify: "off"
+  pg_user: kong
+  pg_password: paasadm1234!
+  plugins: bundled, oidc, keycloak-authz
+  prefix: /kong_prefix/
+  proxy_access_log: /dev/stdout
+  proxy_error_log: /dev/stdout
+  proxy_stream_access_log: /dev/stdout
+  proxy_stream_error_log: /dev/stdout
+  status_listen: 0.0.0.0:8100
+  trusted_ips: 0.0.0.0/0,::/0
+
+
+
+# Ingress Controller 설정
+ingressController:
+  enabled: true
+  image:
+    repository: kong/kubernetes-ingress-controller
+    tag: "3.3"
+  env:
+    kong_admin_filter_tag: ingress_controller_kong
+    kong_admin_tls_skip_verify: true
+    kong_admin_url: https://localhost:8444
+    publish_service: kong/kong-kong-proxy
+
+  # ingress-controller 컨테이너의 timezone 설정
+  customEnv:
+    TZ: "Asia/Seoul"
+
+migrations:
+  enabled: true
+  postUpgrade: true
+  preUpgrade: true
+
+
+# sub-chart postgres
+postgresql:
+  enabled: true
+  auth:
+    database: kong
+    username: kong
+    password: paasadm1234!