icecheng/freeleaps-ops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(manifests): update NodePort values for ingress-nginx service

Browse Source 
Signed-off-by: 孙振宇 <>
This commit is contained in:
孙振宇 2025-01-13 01:36:43 +08:00
parent da5e00bc31
commit 30fc78315d
1 changed files with 40 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
cluster/manifests/freeleaps-controls-system/ingress-nginx/values.yaml
View File

@ -559,9 +559,9 @@ controller:
appProtocol: true appProtocol: true
nodePorts: nodePorts:
# -- Node port allocated for the external HTTP listener. If left empty, the service controller allocates one from the configured node port range. # -- Node port allocated for the external HTTP listener. If left empty, the service controller allocates one from the configured node port range.
http: "38080" http: "30080"
# -- Node port allocated for the external HTTPS listener. If left empty, the service controller allocates one from the configured node port range. # -- Node port allocated for the external HTTPS listener. If left empty, the service controller allocates one from the configured node port range.
https: "38443" https: "30443"
# -- Node port mapping for external TCP listeners. If left empty, the service controller allocates them from the configured node port range. # -- Node port mapping for external TCP listeners. If left empty, the service controller allocates them from the configured node port range.
# Example: # Example:
# tcp: # tcp:
@ -915,45 +915,44 @@ controller:
# -- Annotations to be added to the PrometheusRule. # -- Annotations to be added to the PrometheusRule.
annotations: {} annotations: {}
namespace: "freeleaps-monitoring-system" namespace: "freeleaps-monitoring-system"
rules: [] rules:
# # These are just examples rules, please adapt them to your needs - alert: NGINXConfigFailed
# - alert: NGINXConfigFailed expr: count(nginx_ingress_controller_config_last_reload_successful == 0) > 0
# expr: count(nginx_ingress_controller_config_last_reload_successful == 0) > 0 for: 1s
# for: 1s labels:
# labels: severity: critical
# severity: critical annotations:
# annotations: description: bad ingress config - nginx config test failed
# description: bad ingress config - nginx config test failed summary: uninstall the latest ingress changes to allow config reloads to resume
# summary: uninstall the latest ingress changes to allow config reloads to resume # By default a fake self-signed certificate is generated as default and
# # By default a fake self-signed certificate is generated as default and # it is fine if it expires. If `--default-ssl-certificate` flag is used
# # it is fine if it expires. If `--default-ssl-certificate` flag is used # and a valid certificate passed please do not filter for `host` label!
# # and a valid certificate passed please do not filter for `host` label! # (i.e. delete `{host!="_"}` so also the default SSL certificate is
# # (i.e. delete `{host!="_"}` so also the default SSL certificate is # checked for expiration)
# # checked for expiration) - alert: NGINXCertificateExpiry
# - alert: NGINXCertificateExpiry expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800
# expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800 for: 1s
# for: 1s labels:
# labels: severity: critical
# severity: critical annotations:
# annotations: description: ssl certificate(s) will expire in less then a week
# description: ssl certificate(s) will expire in less then a week summary: renew expiring certificates to avoid downtime
# summary: renew expiring certificates to avoid downtime - alert: NGINXTooMany500s
# - alert: NGINXTooMany500s expr: 100 * ( sum( nginx_ingress_controller_requests{status=~"5.+"} ) / sum(nginx_ingress_controller_requests) ) > 5
# expr: 100 * ( sum( nginx_ingress_controller_requests{status=~"5.+"} ) / sum(nginx_ingress_controller_requests) ) > 5 for: 1m
# for: 1m labels:
# labels: severity: warning
# severity: warning annotations:
# annotations: description: Too many 5XXs
# description: Too many 5XXs summary: More than 5% of all requests returned 5XX, this requires your attention
# summary: More than 5% of all requests returned 5XX, this requires your attention - alert: NGINXTooMany400s
# - alert: NGINXTooMany400s expr: 100 * ( sum( nginx_ingress_controller_requests{status=~"4.+"} ) / sum(nginx_ingress_controller_requests) ) > 5
# expr: 100 * ( sum( nginx_ingress_controller_requests{status=~"4.+"} ) / sum(nginx_ingress_controller_requests) ) > 5 for: 1m
# for: 1m labels:
# labels: severity: warning
# severity: warning annotations:
# annotations: description: Too many 4XXs
# description: Too many 4XXs summary: More than 5% of all requests returned 4XX, this requires your attention
# summary: More than 5% of all requests returned 4XX, this requires your attention
# -- Improve connection draining when ingress controller pod is deleted using a lifecycle hook: # -- Improve connection draining when ingress controller pod is deleted using a lifecycle hook:
# With this new hook, we increased the default terminationGracePeriodSeconds from 30 seconds # With this new hook, we increased the default terminationGracePeriodSeconds from 30 seconds
# to 300, allowing the draining of connections up to five minutes. # to 300, allowing the draining of connections up to five minutes.