mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-03-23 20:05:05 -02:30
9b122fb5a8
* Use alternate self-sufficient shellcheck precommit This pre-commit does not require prerequisite on the host, making it easier to run in CI workflows. * Switch to upstream ansible-lint pre-commit hook This way, the hook is self contained and does not depend on a previous virtualenv installation. * pre-commit: fix hooks dependencies - ansible-syntax-check - tox-inventory-builder - jinja-syntax-check * Fix ci-matrix pre-commit hook - Remove dependency of pydblite which fails to setup on recent pythons - Discard shell script and put everything into pre-commit * pre-commit: apply autofixes hooks and fix the rest manually - markdownlint (manual fix) - end-of-file-fixer - requirements-txt-fixer - trailing-whitespace * Convert check_typo to pre-commit + use maintained version client9/misspell is unmaintained, and has been forked by the golangci team, see https://github.com/client9/misspell/issues/197#issuecomment-1596318684. They haven't yet added a pre-commit config, so use my fork with the pre-commit hook config until the pull request is merged. * collection-build-install convert to pre-commit * Run pre-commit hooks in dynamic pipeline Use gitlab dynamic child pipelines feature to have one source of truth for the pre-commit jobs, the pre-commit config file. Use one cache per pre-commit. This should reduce the "fetching cache" time steps in gitlab-ci, since each job will have a separate cache with only its hook installed. * Remove gitlab-ci job done in pre-commit * pre-commit: adjust mardownlint default, md fixes Use a style file as recommended by upstream. This makes for only one source of truth. Conserve previous upstream default for MD007 (upstream default changed here https://github.com/markdownlint/markdownlint/pull/373) * Update pre-commit hooks --------- Co-authored-by: Max Gautier <mg@max.gautier.name>
72 lines
2.5 KiB
Django/Jinja
72 lines
2.5 KiB
Django/Jinja
#jinja2: trim_blocks:False
|
|
---
|
|
# Source: cilium helm chart: cilium/templates/hubble-relay/configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: hubble-relay-config
|
|
namespace: kube-system
|
|
data:
|
|
config.yaml: |
|
|
cluster-name: "{{ cilium_cluster_name }}"
|
|
peer-service: "hubble-peer.kube-system.svc.{{ dns_domain }}:443"
|
|
listen-address: :4245
|
|
metrics-listen-address: ":9966"
|
|
dial-timeout:
|
|
retry-timeout:
|
|
sort-buffer-len-max:
|
|
sort-buffer-drain-timeout:
|
|
tls-client-cert-file: /var/lib/hubble-relay/tls/client.crt
|
|
tls-client-key-file: /var/lib/hubble-relay/tls/client.key
|
|
tls-server-cert-file: /var/lib/hubble-relay/tls/server.crt
|
|
tls-server-key-file: /var/lib/hubble-relay/tls/server.key
|
|
tls-hubble-server-ca-files: /var/lib/hubble-relay/tls/hubble-server-ca.crt
|
|
disable-server-tls: {% if cilium_hubble_tls_generate %}false{% else %}true{% endif %}
|
|
disable-client-tls: {% if cilium_hubble_tls_generate %}false{% else %}true{% endif %}
|
|
---
|
|
# Source: cilium/templates/hubble-ui/configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: hubble-ui-nginx
|
|
namespace: kube-system
|
|
data:
|
|
nginx.conf: |
|
|
server {
|
|
listen 8081;
|
|
{% if cilium_enable_ipv6 %}
|
|
listen [::]:8081;
|
|
{% endif %}
|
|
server_name localhost;
|
|
root /app;
|
|
index index.html;
|
|
client_max_body_size 1G;
|
|
|
|
location / {
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
|
# CORS
|
|
add_header Access-Control-Allow-Methods "GET, POST, PUT, HEAD, DELETE, OPTIONS";
|
|
add_header Access-Control-Allow-Origin *;
|
|
add_header Access-Control-Max-Age 1728000;
|
|
add_header Access-Control-Expose-Headers content-length,grpc-status,grpc-message;
|
|
add_header Access-Control-Allow-Headers range,keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,x-grpc-web,grpc-timeout;
|
|
if ($request_method = OPTIONS) {
|
|
return 204;
|
|
}
|
|
# /CORS
|
|
|
|
location /api {
|
|
proxy_http_version 1.1;
|
|
proxy_pass_request_headers on;
|
|
proxy_hide_header Access-Control-Allow-Origin;
|
|
proxy_pass http://127.0.0.1:8090;
|
|
}
|
|
|
|
location / {
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
}
|
|
}
|