youzipi commented on issue #423:
URL:
https://github.com/apache/pulsar-helm-chart/issues/423#issuecomment-2401412985
> Thanks @youzipi! How are you using the proxy now? Did you find a way to
proxy everything through https and not binary tcp? Is it using SNI?
custom configs:
- service for proxy
- ingress for broker
tcp: `host_name:6651` -> alb -> service(proxy, type=LoadBalancer)
http: `host_name:8080/broker-admin` -> ingress(broker) -> service(broker,
type=ClusterIP, generated by helm)
```yaml
---
apiVersion: v1
kind: Service
metadata:
annotations:
service.beta.kubernetes.io/alicloud-loadbalancer-address-type: intranet
service.beta.kubernetes.io/alicloud-loadbalancer-id: lb-aaa
service.beta.kubernetes.io/alicloud-loadbalancer-force-override-listeners:
"true"
service.beta.kubernetes.io/alicloud-loadbalancer-protocol-port: tcp:6651
service.beta.kubernetes.io/alicloud-loadbalancer-network-type: vpc
name: proxy-tcp
namespace: pulsar-new
labels:
app: pulsar
component: proxy
spec:
type: LoadBalancer
ports:
- name: tcp
targetPort: 6651
port: 6651
protocol: TCP
selector:
app: pulsar
component: proxy
...
```
```yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
labels:
app: pulsar
cluster: pulsar
environment: prod
component: broker
annotations:
# nginx.ingress.kubernetes.io/rewrite-target: /
nginx.ingress.kubernetes.io/configuration-snippet: |
rewrite ^/broker-admin/(.*)$ /$1 break;
name: "pulsar-broker"
namespace: pulsar-new
spec:
rules:
- http:
paths:
- path: /broker-admin
pathType: Prefix
backend:
service:
name: "pulsar-broker"
port:
number: 8080
host: $host-name
---
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
