Jeffrey
cfd9317086
Five components under applications/netbox: the web pod, an rqworker, a daily housekeeping CronJob, postgres 18 and two valkey instances. The task queue runs appendonly on its own PVC so queued jobs survive a restart, while the cache instance is disposable. Worker and cronjob override args rather than command, which replaces CMD while keeping tini as the entrypoint, so only the web pod runs migrations. Media, reports and scripts share one RWX PVC via subPaths because both the web pod and the worker mount them. Exposed on the internal gateway only.
47 lines
1.3 KiB
YAML
47 lines
1.3 KiB
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: netbox-route
|
|
namespace: netbox
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
namespace: envoy-gateway
|
|
sectionName: netbox
|
|
hostnames:
|
|
- "netbox.jsme.be"
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
filters:
|
|
- type: RequestHeaderModifier
|
|
requestHeaderModifier:
|
|
set:
|
|
- name: X-Forwarded-Host
|
|
value: "netbox.jsme.be"
|
|
- name: X-Forwarded-Proto
|
|
value: https
|
|
- type: ResponseHeaderModifier
|
|
responseHeaderModifier:
|
|
set:
|
|
- name: Strict-Transport-Security
|
|
value: "max-age=31536000; includeSubDomains"
|
|
- name: X-Content-Type-Options
|
|
value: nosniff
|
|
- name: X-Frame-Options
|
|
value: SAMEORIGIN
|
|
- name: Referrer-Policy
|
|
value: strict-origin-when-cross-origin
|
|
- name: Permissions-Policy
|
|
value: "camera=(), microphone=(), geolocation=(), payment=()"
|
|
backendRefs:
|
|
- name: netbox
|
|
port: 8080
|
|
kind: Service
|
|
group: ""
|
|
weight: 1
|