kube-active-proxy-ds.yaml

apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  annotations:
    description: Nginx Reverse Proxy for Services and Pods powered by annotations
  labels:
    app: kube-active-proxy
  name: kube-active-proxy
  namespace: default
spec:
  selector:
    matchLabels:
      app: kube-active-proxy
  template:
    metadata:
      labels:
        app: kube-active-proxy
    spec:
      - name: "kube-active-proxy"
        image: adi90x/kube-active-proxy
        env:
          - name: KAP_LE_TEST
            value: "false"
        ports:
          - name: tcp-80
            containerPort: 80
          - name: tcp-443
            containerPort: 443
        volumeMounts:
          - mountPath: "/etc/nginx/htpasswd"
            name: kap-htpasswd
          - mountPath: "/etc/nginx/vhost.d"
            name: kap-vhost
          - mountPath: "/etc/letsencrypt"
            name: kap-le
        imagePullPolicy: "Always"
        ports:
        - containerPort: 80
          hostPort: 80
          protocol: TCP
        - containerPort: 443
          hostPort: 443
          protocol: TCP
        securityContext:
          privileged: true
      dnsPolicy: ClusterFirst
      hostNetwork: true
      nodeSelector:
        kap/front: "true"
      restartPolicy: Always
      serviceAccount: kube-active-proxy
      serviceAccountName: kube-active-proxy
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: kube-active-proxy
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: kube-active-proxy
rules:
- apiGroups: [""]
  resources: ["endpoints","pods","services","nodes"]
  verbs: ["get","list","watch"]
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: kube-active-proxy
subjects:
- kind: ServiceAccount
  name: kube-active-proxy # Name is case sensitive
  namespace: default
roleRef:
  kind: ClusterRole
  name: kube-active-proxy
  apiGroup: rbac.authorization.k8s.io
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: kap-htpasswd-pvc
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 50Mi
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: kap-vhost-pvc
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 50Mi
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: kap-le-pvc
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 200Mi