ingress-nginx-helm-values.ftl.yaml

<#assign DockerImageParser=statics['com.cloudogu.gitops.utils.DockerImageParser']>
<#if config.registry.createImagePullSecrets == true>
imagePullSecrets:
  - name: proxy-registry

</#if>
controller:
<#if config.features.ingressNginx.helm.image?has_content>
  <#assign imageObject = DockerImageParser.parse(config.features.ingressNginx.helm.image)>
  image:
    repository: ${imageObject.registryAndRepositoryAsString}
    tag: ${imageObject.tag}
    # Changing the image will change digest, so don't use the default.
    # A digest can also be appended to the tag
    digest: null 
</#if>
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  watchIngressWithoutClass: true
  admissionWebhooks:
    enabled: false
  kind: Deployment
<#if config.application.netpols == true>
  networkPolicy:
    enabled: true
</#if>
  service:
    # Preserve client ip address
    # https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
    externalTrafficPolicy: Local
  replicaCount: 2
<#if config.application.podResources == true>

  resources:
    # Be generous to our Single Point of failure
    limits:
       cpu: '1'
       memory: 1Gi
    requests:
      cpu: 100m
      memory: 90Mi
<#else>
<#-- Explicitly set to null, because the chart sets requests by default
     https://github.com/kubernetes/ingress-nginx/blob/helm-chart-4.9.1/charts/ingress-nginx/values.yaml#L361 -->
  resources: null
</#if>
  ingressClassResource:
    enabled: true
    default: true
    #extraArgs:
    #default-ssl-certificate: "ingress-nginx/wildcard-cert"
  config:
    # settings for compression
    use-gzip: "true"
    enable-brotli: "true"
    # permanent redirect from http to https
    #force-ssl-redirect: "true"
    # customize access log format to include requested hostname ($host)
    # https://github.com/kubernetes/ingress-nginx/blob/controller-v1.2.1/docs/user-guide/nginx-configuration/log-format.md
    log-format-upstream: '$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$host" $request_length $request_time [$proxy_upstream_name] [$proxy_alternative_upstream_name] $upstream_addr $upstream_response_length $upstream_response_time $upstream_status $req_id'
<#if config.features.monitoring.active == true>
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
      namespace: ${config.application.namePrefix}monitoring
</#if>