1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
resource "helm_release" "ingress_nginx_proxy" {
name = "ingress-nginx-proxy"
namespace = kubernetes_namespace.all["base-system"].metadata[0].name
repository = "https://kubernetes.github.io/ingress-nginx"
chart = "ingress-nginx"
version = "4.12.0"
values = [
<<-YAML
controller:
kind: DaemonSet
allowSnippetAnnotations: true
ingressClass: nginx-proxy
watchIngressWithoutClass: false
ingressClassByName: false
ingressClassResource:
enabled: true
name: nginx-proxy
controllerValue: k8s.io/ingress-nginx-proxy
config:
block-user-agents: >
~*.*ahrefsbot.*,
~*.*amazonbot.*,
~*.*applebot-extended.*,
~*.*barkrowler.*,
~*.*fxios.*,
~*.*bytespider.*,
~*.*ccbot.*,
~*.*chatgpt-user.*,
~*.*claude-web.*,
~*.*claudebot.*,
~*.*diffbot.*,
~*.*dotbot.*,
~*.*facebookbot.*,
~*.*facebookexternalhit.*,
~*.*friendlycrawler.*,
~*.*google-extended.*,
~*.*gptbot.*,
~*.*image2dataset.*,
~*.*imagesiftbot.*,
~*.*meta-externalagent.*,
~*.*mozilla\/5\.0\ \(linux\;\ android\ 6\.0\.1\;\ nexus\ 5x\ build\/mmb29p\).*,
~*.*omgili.*,
~*.*perplexitybot.*,
~*.*petalbot.*,
~*.*presto.*,
~*.*semrushbot.*,
~*.*timpibot.*
proxy-real-ip-cidr: 10.57.0.0/16,fd68:1057:1992:3381::/48,192.168.178.0/24
use-forwarded-headers: true
use-proxy-protocol: true
service:
type: NodePort
ipFamilyPolicy: PreferDualStack
externalTrafficPolicy: Local
nodePorts:
http: 32080
https: 32443
metrics:
enabled: true
serviceMonitor:
enabled: true
YAML
]
}
|
