configured ingress for consol-api service

Author: Spencer Smolen

deployments/ambassador/host.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: getambassador.io/v3alpha1
+kind: Host
+metadata:
+  name: console-host
+  namespace: ambassador
+spec:
+  hostname: console.kriipke.io
+  tlsSecret:
+    name: tls-cert
+  tlsContext:
+    name: tls-termination-context

deployments/ambassador/listener-http.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: getambassador.io/v3alpha1
+kind: Listener
+metadata:
+  name: http-listener
+spec:
+  port: 8080
+  protocol: HTTPS
+  # protocolStack:
+  # - PROXY
+  # - HTTP
+  # - TCP
+  securityModel: XFP
+  statsPrefix: http-listener
+  hostBinding:
+    namespace:
+      from: ALL

deployments/ambassador/listener-https.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: getambassador.io/v3alpha1
+kind: Listener
+metadata:
+  name: https-listener
+spec:
+  port: 8443
+  protocol: HTTPS
+  # protocolStack:
+  # - PROXY
+  # - TLS
+  # - HTTP
+  # - TCP
+  securityModel: XFP
+  statsPrefix: https-listener
+  hostBinding:
+    namespace:
+      from: ALL

deployments/ambassador/mapping.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: getambassador.io/v3alpha1
+kind: Mapping
+metadata:
+  name: console-backend
+  namespace: console
+spec:
+  host: console.kriipke.io
+  prefix: /api/
+  rewrite: /api/
+  service: http://console-api.console:8080
+---
+apiVersion: getambassador.io/v3alpha1
+kind: Mapping
+metadata:
+  name: console-frontend
+  namespace: console
+spec:
+  host: console.kriipke.io
+  prefix: /
+  service: console-web

deployments/ambassador/secret-tls.yaml.example

@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: tls-cert
+  namespace: ambassador
+type: kubernetes.io/tls
+data:
+  tls.crt: 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
+  tls.key: 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

deployments/ambassador/tlscontext.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: getambassador.io/v3alpha1
+kind: TLSContext
+metadata:
+  name: tls-termination-context
+  namespace: ambassador
+spec:
+  hosts:
+    - console.kriipke.io
+  secret: tls-cert

deployments/manifests/configmap-example.yaml

@@ -11,6 +11,7 @@ data:
     POSTGRES_PASSWORD=SOMEPASSWORD
     POSTGRES_DB=defaultdb
     POSTGRES_PORT=99999
+    POSTGRES_CA_CERT=/app/configs/ca-postgres.crt
 
     # CONSOLE-API SERVER PORT
     PORT=8080