29d19087f1
- Updated all OpenTelemetry packages to latest versions: - opentelemetry-api: 1.27.0 → 1.39.1 - opentelemetry-sdk: 1.27.0 → 1.39.1 - opentelemetry-exporter-otlp-proto-grpc: 1.27.0 → 1.39.1 - opentelemetry-exporter-otlp-proto-http: 1.27.0 → 1.39.1 - opentelemetry-instrumentation-fastapi: 0.48b0 → 0.60b1 - opentelemetry-instrumentation-httpx: 0.48b0 → 0.60b1 - opentelemetry-instrumentation-redis: 0.48b0 → 0.60b1 - opentelemetry-instrumentation-sqlalchemy: 0.48b0 → 0.60b1 - Removed prometheus-client==0.23.1 from all services - Unified all services to use the same monitoring package versions Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
84 lines
2.9 KiB
YAML
84 lines
2.9 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: bakery-ingress-https
|
|
namespace: bakery-ia
|
|
labels:
|
|
app.kubernetes.io/name: bakery-ia
|
|
app.kubernetes.io/component: ingress
|
|
annotations:
|
|
# Nginx ingress controller annotations
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "10m"
|
|
nginx.ingress.kubernetes.io/proxy-connect-timeout: "600"
|
|
nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
|
|
nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
|
|
# SSE and WebSocket configuration for long-lived connections
|
|
nginx.ingress.kubernetes.io/proxy-buffering: "off"
|
|
nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
|
|
nginx.ingress.kubernetes.io/upstream-keepalive-timeout: "3600"
|
|
# WebSocket upgrade support
|
|
nginx.ingress.kubernetes.io/websocket-services: "gateway-service"
|
|
# CORS configuration for HTTPS
|
|
nginx.ingress.kubernetes.io/enable-cors: "true"
|
|
nginx.ingress.kubernetes.io/cors-allow-origin: "https://your-domain.com" # To be overridden in overlays
|
|
nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS, PATCH"
|
|
nginx.ingress.kubernetes.io/cors-allow-headers: "Content-Type, Authorization, X-Requested-With, Accept, Origin, Cache-Control"
|
|
nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
|
|
# Cert-manager annotations for automatic certificate issuance
|
|
# Using issuer appropriate for environment
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod" # To be overridden in dev overlay
|
|
spec:
|
|
ingressClassName: nginx
|
|
tls:
|
|
- hosts:
|
|
- your-domain.com # To be overridden in overlays
|
|
secretName: bakery-tls-cert # To be overridden in overlays
|
|
rules:
|
|
- host: your-domain.com # To be overridden in overlays
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: frontend-service
|
|
port:
|
|
number: 3000
|
|
- path: /api
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: gateway-service
|
|
port:
|
|
number: 8000
|
|
- host: api.your-domain.com # To be overridden in overlays
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: gateway-service
|
|
port:
|
|
number: 8000
|
|
- host: monitoring.your-domain.com # To be overridden in overlays
|
|
http:
|
|
paths:
|
|
# SigNoz Frontend UI and API (consolidated in newer versions)
|
|
- path: /signoz(/|$)(.*)
|
|
pathType: ImplementationSpecific
|
|
backend:
|
|
service:
|
|
name: signoz
|
|
port:
|
|
number: 8080
|
|
# SigNoz API endpoints
|
|
- path: /signoz-api(/|$)(.*)
|
|
pathType: ImplementationSpecific
|
|
backend:
|
|
service:
|
|
name: signoz
|
|
port:
|
|
number: 8080 |