docs: Update examples (#796)

This commit is contained in:
Travis Groth 2020-05-28 10:29:10 -04:00 committed by GitHub
parent c77b2c6876
commit 14432daf26
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
10 changed files with 38 additions and 99 deletions

View file

@ -20,11 +20,11 @@ spec:
- paths:
backend:
serviceName: pomerium-proxy-service
servicePort: https
servicePort: http
- host: "authenticate.corp.beyondperimeter.com"
http:
paths:
- paths:
backend:
serviceName: pomerium-authenticate-service
servicePort: https
servicePort: http

View file

@ -1,10 +1,12 @@
# Main configuration flags : https://www.pomerium.io/docs/reference/reference/
insecure_server: true
grpc_insecure: true
address: ":80"
grpc_address: ":80"
authenticate_service_url: https://authenticate.corp.beyondperimeter.com
authorize_service_url: https://pomerium-authorize-service.default.svc.cluster.local
cache_service_url: https://pomerium-cache-service.default.svc.cluster.local
authorize_service_url: http://pomerium-authorize-service.default.svc.cluster.local
cache_service_url: http://pomerium-cache-service.default.svc.cluster.local
override_certificate_name: "*.corp.beyondperimeter.com"

View file

@ -4,8 +4,8 @@ metadata:
name: pomerium-authenticate-service
spec:
ports:
- port: 443
name: https
- port: 80
name: http
selector:
app: pomerium-authenticate
type: NodePort
@ -32,8 +32,8 @@ spec:
args:
- --config=/etc/pomerium/config.yaml
ports:
- containerPort: 443
name: https
- containerPort: 80
name: http
protocol: TCP
env:
- name: SERVICES
@ -51,12 +51,12 @@ spec:
readinessProbe:
httpGet:
path: /ping
port: 443
port: 80
scheme: HTTP
livenessProbe:
httpGet:
path: /ping
port: 443
port: 80
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 1

View file

@ -4,7 +4,7 @@ metadata:
name: pomerium-authorize-service
spec:
ports:
- port: 443
- port: 80
name: grpc
selector:
app: pomerium-authorize
@ -32,7 +32,7 @@ spec:
args:
- --config=/etc/pomerium/config.yaml
ports:
- containerPort: 443
- containerPort: 80
name: grpc
protocol: TCP
env:
@ -45,12 +45,12 @@ spec:
key: shared-secret
readinessProbe:
tcpSocket:
port: 443
port: 80
initialDelaySeconds: 5
periodSeconds: 10
livenessProbe:
tcpSocket:
port: 443
port: 80
initialDelaySeconds: 15
periodSeconds: 20

View file

@ -5,7 +5,7 @@ metadata:
spec:
clusterIP: None # cache is a headless service!
ports:
- port: 443
- port: 80
name: grpc
selector:
app: pomerium-cache
@ -33,7 +33,7 @@ spec:
args:
- --config=/etc/pomerium/config.yaml
ports:
- containerPort: 443
- containerPort: 80
name: grpc
protocol: TCP
env:
@ -46,12 +46,12 @@ spec:
key: shared-secret
readinessProbe:
tcpSocket:
port: 443
port: 80
initialDelaySeconds: 5
periodSeconds: 10
livenessProbe:
tcpSocket:
port: 443
port: 80
initialDelaySeconds: 15
periodSeconds: 20

View file

@ -4,10 +4,10 @@ metadata:
name: pomerium-proxy-service
spec:
ports:
- port: 443
- port: 80
protocol: TCP
name: https
targetPort: https
name: http
targetPort: http
selector:
app: pomerium-proxy
type: NodePort
@ -34,8 +34,8 @@ spec:
args:
- --config=/etc/pomerium/config.yaml
ports:
- containerPort: 443
name: https
- containerPort: 80
name: http
protocol: TCP
env:
- name: SERVICES
@ -53,12 +53,12 @@ spec:
readinessProbe:
httpGet:
path: /ping
port: 443
port: 80
scheme: HTTP
livenessProbe:
httpGet:
path: /ping
port: 443
port: 80
scheme: HTTP
initialDelaySeconds: 10
timeoutSeconds: 1

View file

@ -25,4 +25,4 @@ config:
ingress:
annotations:
kubernetes.io/ingress.allow-http: false
kubernetes.io/ingress.allow-http: "false"