proxy.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: nginx-config
data:
  nginx.conf: |
    worker_processes  1;
    events {
      worker_connections  1024;
    }

    http {
      server_tokens off;

      include             mime.types;

      sendfile            on;
      tcp_nopush          off;
      keepalive_timeout   0;

      add_header X-Frame-Options SAMEORIGIN;
      add_header X-Content-Type-Options nosniff;
      add_header X-XSS-Protection "1; mode=block";

      server {
        listen       80;
        server_name  localhost;
        root         /var/www/html;

        # readiness probe
        location = /ready {
          # do not log healthchecks
          access_log off;

          add_header Content-Type text/plain;
          return 200 'ok';
        }

        # Proxy configuration
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        proxy_pass_request_body on;
        proxy_redirect off;

        proxy_hide_header X-Powered-By;
        proxy_hide_header Server;
        proxy_hide_header X-AspNetMvc-Version;
        proxy_hide_header X-AspNet-Version;

        # Login
        location = /logout {
          proxy_pass    http://login:7000;
        }
        location /auth/twitter {
          proxy_pass    http://login:7000;
        }

        # User
        location /identity {
          proxy_pass    http://user:7000;
        }

        # Renderer
        location /post {
          proxy_pass    http://renderer:7000;
        }

        # Post
        location = /publish/ {
          proxy_pass    http://post:7000/;
        }

        # Website
        location / {
          proxy_pass    http://website:7000;
        }
      }
    }
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: proxy
  labels:
    project: cast
spec:
  selector:
    matchLabels:
      name: proxy
      project: cast
  replicas: 2
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        name: proxy
        project: cast
    spec:
      containers:
      - image: nginx:mainline-alpine
        name: proxy
        ports:
        - containerPort: 80
        volumeMounts:
        - name: nginx-config
          mountPath: /etc/nginx/nginx.conf
          subPath: nginx.conf
        readinessProbe:
          httpGet:
            path: /ready
            port: 80
          initialDelaySeconds: 5
          periodSeconds: 5
          successThreshold: 1
      restartPolicy: Always
      volumes:
      - name: nginx-config
        configMap:
          name: nginx-config