summaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf
diff options
context:
space:
mode:
authorsebdet <sebastien.determe@intl.att.com>2021-01-13 11:35:56 +0100
committerS�bastien Determe <sebastien.determe@intl.att.com>2021-02-11 08:58:38 +0000
commit5c4498813e10d25160a86f97fe7a95ea26f9ef7b (patch)
treee336a310e4d20c5c305e86f3812e77fdf59d2676 /kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf
parentf26d9eff22180b8232f2965d347226e2a4999cd3 (diff)
[POLICY] Migration of clamp to policy area
Creation of the clamp subcharts + fusion of the clamp database to policy mariadb Issue-ID: POLICY-2951 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I8192f82bc393e3fc8d5884d6ab73912a0466edcd Signed-off-by: sebdet <sebastien.determe@intl.att.com>
Diffstat (limited to 'kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf')
-rw-r--r--kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf31
1 files changed, 31 insertions, 0 deletions
diff --git a/kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf b/kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf
new file mode 100644
index 0000000000..4cab734074
--- /dev/null
+++ b/kubernetes/policy/components/policy-clamp-fe/resources/config/default.conf
@@ -0,0 +1,31 @@
+server {
+
+ listen 2443 default ssl;
+ ssl_protocols TLSv1.2;
+ {{ if .Values.global.aafEnabled }}
+ ssl_certificate {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_pem}};
+ ssl_certificate_key {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_key}};
+ {{ else }}
+ ssl_certificate /etc/ssl/clamp.pem;
+ ssl_certificate_key /etc/ssl/clamp.key;
+ {{ end }}
+
+ ssl_verify_client optional_no_ca;
+ location /restservices/clds/ {
+ proxy_pass https://policy-clamp-be:8443;
+ proxy_set_header X-SSL-Cert $ssl_client_escaped_cert;
+ }
+
+ location / {
+ root /usr/share/nginx/html;
+ index index.html index.htm;
+ try_files $uri $uri/ /index.html;
+ }
+
+ error_page 500 502 503 504 /50x.html;
+
+ location = /50x.html {
+ root /usr/share/nginx/html;
+ }
+
+}