assets

ingress-external-devices/hyper2.yaml

@@ -30,25 +30,19 @@ metadata:
   annotations:
     kubernetes.io/ingress.class: nginx
     cert-manager.io/cluster-issuer: letsencrypt
-
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
-
-    # SNI + Host for upstream TLS
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/upstream-vhost: "hyper2.undercloud.local"
     nginx.ingress.kubernetes.io/proxy-ssl-server-name: "true"
     nginx.ingress.kubernetes.io/proxy-ssl-name: "hyper2.undercloud.local"
     nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
-
-    # rewrite absolute redirects from Proxmox
-    nginx.ingress.kubernetes.io/proxy-redirect-from: "https://hyper2.undercloud.local:8006/"
-    nginx.ingress.kubernetes.io/proxy-redirect-to:   "https://hyper2.apps.undercloud.dev/"
-
-    # uploads and long-lived connections (noVNC, tasks)
+    nginx.ingress.kubernetes.io/proxy-redirect-from: "https://hyper2.undercloud.local:8006"
+    nginx.ingress.kubernetes.io/proxy-redirect-to:   "https://hyper2.apps.undercloud.dev"
     nginx.ingress.kubernetes.io/proxy-body-size: "0"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
 spec:
+  ingressClassName: nginx
   tls:
   - hosts: [hyper2.apps.undercloud.dev]
     secretName: hyper2-tls
@@ -63,7 +57,7 @@ spec:
             name: hyper2
             port:
               number: 8006
-
+---
 # === Ceph Dashboard on 8443 ===
 apiVersion: v1
 kind: Service

ingress-external-devices/hyper3.yaml

@@ -30,25 +30,19 @@ metadata:
   annotations:
     kubernetes.io/ingress.class: nginx
     cert-manager.io/cluster-issuer: letsencrypt
-
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
-
-    # SNI + Host for upstream TLS
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/upstream-vhost: "hyper3.undercloud.local"
     nginx.ingress.kubernetes.io/proxy-ssl-server-name: "true"
     nginx.ingress.kubernetes.io/proxy-ssl-name: "hyper3.undercloud.local"
     nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
-
-    # rewrite absolute redirects from Proxmox
-    nginx.ingress.kubernetes.io/proxy-redirect-from: "https://hyper3.undercloud.local:8006/"
-    nginx.ingress.kubernetes.io/proxy-redirect-to:   "https://hyper3.apps.undercloud.dev/"
-
-    # uploads and long-lived connections (noVNC, tasks)
+    nginx.ingress.kubernetes.io/proxy-redirect-from: "https://hyper3.undercloud.local:8006"
+    nginx.ingress.kubernetes.io/proxy-redirect-to:   "https://hyper3.apps.undercloud.dev"
     nginx.ingress.kubernetes.io/proxy-body-size: "0"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
 spec:
+  ingressClassName: nginx
   tls:
   - hosts: [hyper3.apps.undercloud.dev]
     secretName: hyper3-tls
@@ -63,7 +57,7 @@ spec:
             name: hyper3
             port:
               number: 8006
-
+---
 # === Ceph Dashboard on 8443 ===
 apiVersion: v1
 kind: Service