45 lines
1.4 KiB
Plaintext
45 lines
1.4 KiB
Plaintext
# Gitea Ingress Configuration
|
|
# Routes external traffic to Gitea service for web UI and Git HTTP access
|
|
#
|
|
# Prerequisites:
|
|
# - Gitea must be deployed in the 'gitea' namespace
|
|
# - Ingress controller must be installed (nginx, traefik, etc.)
|
|
# - For HTTPS: cert-manager with a ClusterIssuer named 'letsencrypt-prod' or 'local-ca-issuer'
|
|
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: gitea-ingress
|
|
namespace: gitea
|
|
labels:
|
|
app.kubernetes.io/name: gitea
|
|
app.kubernetes.io/component: ingress
|
|
app.kubernetes.io/part-of: bakery-ia-cicd
|
|
annotations:
|
|
# For nginx ingress controller
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "100m"
|
|
nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
|
|
nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
|
|
# For traefik ingress controller
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
# For TLS with cert-manager (uncomment for HTTPS)
|
|
# cert-manager.io/cluster-issuer: "local-ca-issuer"
|
|
spec:
|
|
ingressClassName: nginx
|
|
# Uncomment for HTTPS
|
|
# tls:
|
|
# - hosts:
|
|
# - gitea.bakery-ia.local
|
|
# secretName: gitea-tls
|
|
rules:
|
|
- host: gitea.bakery-ia.local
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: gitea-http
|
|
port:
|
|
number: 3000
|