You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
166 lines
3.5 KiB
166 lines
3.5 KiB
image:
|
|
repository: paasup/kong-oidc-keycloak-authz
|
|
tag: 3.4.0-0.1.0
|
|
|
|
deployment:
|
|
kong:
|
|
enabled: true
|
|
daemonset: false
|
|
|
|
# proxy 컨테이너의 timezone 설정
|
|
userDefinedVolumeMounts:
|
|
- name: tz-config
|
|
mountPath: /etc/localtime
|
|
userDefinedVolumes:
|
|
- name: tz-config
|
|
hostPath:
|
|
path: /usr/share/zoneinfo/Asia/Seoul
|
|
|
|
# Kong proxy 서비스 설정
|
|
proxy:
|
|
enabled: true
|
|
type: LoadBalancer
|
|
ingress:
|
|
enable: false
|
|
|
|
## Host Port 배포 예시 추가
|
|
# proxy:
|
|
# enabled: true
|
|
# type: ClusterIP
|
|
# ingress:
|
|
# enable: false
|
|
# http:
|
|
# hostPort: 80
|
|
# tls:
|
|
# hostPort: 443
|
|
|
|
|
|
# Kong admin API 서비스 설정
|
|
admin:
|
|
annotations:
|
|
konghq.com/protocol: https
|
|
enabled: true
|
|
type: ClusterIP
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
konghq.com/https-redirect-status-code: "301"
|
|
konghq.com/protocols: https
|
|
konghq.com/strip-path: "true"
|
|
hostname: kong.example.org
|
|
ingressClassName: kong
|
|
path: /api
|
|
# certificate를 사용하여 추가시 해당 이름으로 생성됨
|
|
# (helm release는 kong으로 배포해야함)
|
|
tls: kong-kong-admin-cert
|
|
|
|
manager:
|
|
enabled: true
|
|
type: ClusterIP
|
|
annotations:
|
|
konghq.com/protocol: https
|
|
http:
|
|
enabled: false
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
konghq.com/https-redirect-status-code: "301"
|
|
konghq.com/protocols: https
|
|
hostname: kong.example.org
|
|
ingressClassName: kong
|
|
path: /
|
|
tls: kong-kong-admin-cert
|
|
|
|
# cluster:
|
|
# enabled: false
|
|
# type: ClusterIP
|
|
# tls:
|
|
# enabled: true
|
|
# labels:
|
|
# konghq.com/service: cluster
|
|
|
|
# Enterprise 영역 비활성화
|
|
enterprise:
|
|
enabled: false
|
|
portal:
|
|
enabled: false
|
|
portalapi:
|
|
enabled: false
|
|
clustertelemetry:
|
|
enabled: false
|
|
|
|
# cert-manager를 통한 인증서 생성 설정
|
|
certificates:
|
|
enabled: true
|
|
clusterIssuer: selfsigned-issuer
|
|
admin:
|
|
enabled: true
|
|
commonName: kong.example.org
|
|
portal:
|
|
enabled: false
|
|
proxy:
|
|
enabled: false
|
|
cluster:
|
|
enabled: false
|
|
|
|
# Kong의 Conriguration 설정
|
|
env:
|
|
admin_access_log: /dev/stdout
|
|
admin_error_log: /dev/stdout
|
|
admin_gui_access_log: /dev/stdout
|
|
admin_gui_error_log: /dev/stdout
|
|
cluster_data_plane_purge_delay: 60
|
|
cluster_listen: 0.0.0.0:8005
|
|
cluster_telemetry_listen: 0.0.0.0:8006
|
|
log_level: info
|
|
lua_package_path: /opt/?.lua;;
|
|
nginx_worker_processes: "2"
|
|
database: postgres
|
|
pg_database: kong
|
|
pg_host: kong-postgresql.kong.svc.cluster.local
|
|
pg_ssl: "off"
|
|
pg_ssl_verify: "off"
|
|
pg_user: kong
|
|
pg_password: password
|
|
plugins: bundled, oidc, keycloak-authz
|
|
prefix: /kong_prefix/
|
|
proxy_access_log: /dev/stdout
|
|
proxy_error_log: /dev/stdout
|
|
proxy_stream_access_log: /dev/stdout
|
|
proxy_stream_error_log: /dev/stdout
|
|
status_listen: 0.0.0.0:8100
|
|
trusted_ips: 0.0.0.0/0,::/0
|
|
nginx_proxy_proxy_buffer_size: "128k"
|
|
nginx_proxy_proxy_buffers: "8 256k"
|
|
|
|
# Ingress Controller 설정
|
|
ingressController:
|
|
enabled: true
|
|
image:
|
|
repository: kong/kubernetes-ingress-controller
|
|
tag: "3.3"
|
|
env:
|
|
kong_admin_filter_tag: ingress_controller_kong
|
|
kong_admin_tls_skip_verify: true
|
|
kong_admin_url: https://localhost:8444
|
|
publish_service: kong/kong-kong-proxy
|
|
admissionWebhook:
|
|
enabled: false
|
|
|
|
# ingress-controller 컨테이너의 timezone 설정
|
|
customEnv:
|
|
TZ: "Asia/Seoul"
|
|
|
|
migrations:
|
|
enabled: true
|
|
postUpgrade: true
|
|
preUpgrade: true
|
|
|
|
|
|
# sub-chart postgres
|
|
postgresql:
|
|
enabled: true
|
|
auth:
|
|
database: kong
|
|
username: kong
|
|
password: password
|
|
|