summaryrefslogtreecommitdiff
path: root/data.d/k3s-master/src-tf/ingress-nginx-direct.tf
blob: beb1bcb7a1bcf44acdc28131f77603115941aaaa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
resource "helm_release" "ingress_nginx_direct" {
  name      = "ingress-nginx-direct"
  namespace = kubernetes_namespace.all["base-system"].metadata[0].name

  repository = "https://kubernetes.github.io/ingress-nginx"
  chart      = "ingress-nginx"
  version    = "4.7.1"

  values = [
    <<-YAML
    controller:
      kind: DaemonSet
      nodeSelector:
        node-role.kubernetes.io/master: "true"
      allowSnippetAnnotations: true
      watchIngressWithoutClass: false
      ingressClassByName: false
      ingressClassResource:
        enabled: true
        name: nginx-direct
      config:
        block-user-agents: >
          ~*.*ahrefsbot.*,
          ~*.*amazonbot.*,
          ~*.*applebot-extended.*,
          ~*.*barkrowler.*,
          ~*.*fxios.*,
          ~*.*bytespider.*,
          ~*.*ccbot.*,
          ~*.*chatgpt-user.*,
          ~*.*claude-web.*,
          ~*.*claudebot.*,
          ~*.*diffbot.*,
          ~*.*dotbot.*,
          ~*.*facebookbot.*,
          ~*.*facebookexternalhit.*,
          ~*.*friendlycrawler.*,
          ~*.*google-extended.*,
          ~*.*gptbot.*,
          ~*.*image2dataset.*,
          ~*.*imagesiftbot.*,
          ~*.*meta-externalagent.*,
          ~*.*mozilla\/5\.0\ \(linux\;\ android\ 6\.0\.1\;\ nexus\ 5x\ build\/mmb29p\).*,
          ~*.*omgili.*,
          ~*.*perplexitybot.*,
          ~*.*petalbot.*,
          ~*.*presto.*,
          ~*.*semrushbot.*,
          ~*.*timpibot.*
        use-forwarded-headers: true
      service:
        type: NodePort
        ipFamilyPolicy: PreferDualStack
        externalTrafficPolicy: Local
        nodePorts:
          http: 32081
          https: 32082
      metrics:
        enabled: true
        serviceMonitor:
          enabled: true
    YAML
  ]
}