Compare commits
3
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
dd4b8df134 | ||
|
|
ffb076cf47 | ||
|
|
ceb7fb6479 |
+19
-5
@@ -21,6 +21,8 @@ spec:
|
|||||||
app: reverse-proxy
|
app: reverse-proxy
|
||||||
spec:
|
spec:
|
||||||
nodeName: kube-master
|
nodeName: kube-master
|
||||||
|
# Allows the sidecar to see and signal the Nginx process
|
||||||
|
shareProcessNamespace: true
|
||||||
containers:
|
containers:
|
||||||
#- image: nginx:alpine
|
#- image: nginx:alpine
|
||||||
- image: gitea.tryton.geeraert.eu/pi-ux-ce/geoip2-nginx:1.29.6
|
- image: gitea.tryton.geeraert.eu/pi-ux-ce/geoip2-nginx:1.29.6
|
||||||
@@ -42,8 +44,6 @@ spec:
|
|||||||
mountPath: /etc/nginx/deny.d/
|
mountPath: /etc/nginx/deny.d/
|
||||||
- name: blacklisted-sessions-map
|
- name: blacklisted-sessions-map
|
||||||
mountPath: /etc/nginx/blacklisted.d/
|
mountPath: /etc/nginx/blacklisted.d/
|
||||||
- name: reverse-proxy-geoip
|
|
||||||
mountPath: /etc/nginx/geoip.d/
|
|
||||||
- name: reverse-proxy-ssl
|
- name: reverse-proxy-ssl
|
||||||
mountPath: /etc/nginx/ssl/
|
mountPath: /etc/nginx/ssl/
|
||||||
- mountPath: /etc/nginx/
|
- mountPath: /etc/nginx/
|
||||||
@@ -56,6 +56,23 @@ spec:
|
|||||||
limits:
|
limits:
|
||||||
cpu: 250m
|
cpu: 250m
|
||||||
memory: 250Mi
|
memory: 250Mi
|
||||||
|
- name: sidecar-watcher
|
||||||
|
image: alpine:latest
|
||||||
|
command: ["/bin/sh", "-c"]
|
||||||
|
args:
|
||||||
|
- |
|
||||||
|
apk add --no-cache inotify-tools;
|
||||||
|
echo "Watcher started..."
|
||||||
|
while inotifywait -e close_write /etc/nginx/blacklisted.d/blacklisted-sessions.conf; do
|
||||||
|
echo "Change detected in deny.conf, reloading Nginx..."
|
||||||
|
# Find the Nginx master process and send SIGHUP (reload)
|
||||||
|
pkill -HUP nginx
|
||||||
|
done
|
||||||
|
volumeMounts:
|
||||||
|
- name: blacklisted-sessions-map
|
||||||
|
mountPath: /etc/nginx/blacklisted.d/
|
||||||
|
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: reverse-proxy-log
|
- name: reverse-proxy-log
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
@@ -63,9 +80,6 @@ spec:
|
|||||||
- name: reverse-proxy-ssl
|
- name: reverse-proxy-ssl
|
||||||
hostPath:
|
hostPath:
|
||||||
path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
|
path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
|
||||||
- name: reverse-proxy-geoip
|
|
||||||
hostPath:
|
|
||||||
path: /opt/kubernetes/Reverse_proxy_Nginx/geoip
|
|
||||||
- name: nginx-configfile
|
- name: nginx-configfile
|
||||||
configMap:
|
configMap:
|
||||||
name: nginx-config
|
name: nginx-config
|
||||||
|
|||||||
@@ -1 +0,0 @@
|
|||||||
#
|
|
||||||
Reference in New Issue
Block a user