From dbcd1cacf9d08b2d17b569736effb389c6f99d13 Mon Sep 17 00:00:00 2001 From: krishnaa96 Date: Tue, 11 Aug 2020 10:26:50 +0530 Subject: [OOF] Use certInitializer for OOF pods Remove Hardcoded certificates from OOF Resturcture OOF charts Issue-ID: OPTFRA-803 Signed-off-by: krishnaa96 Change-Id: Ibe886a44fcbf22bb3443fbb8ec8e37ddc7636ffe --- .../components/oof-has/resources/config/nginx.conf | 31 ++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 kubernetes/oof/components/oof-has/resources/config/nginx.conf (limited to 'kubernetes/oof/components/oof-has/resources/config/nginx.conf') diff --git a/kubernetes/oof/components/oof-has/resources/config/nginx.conf b/kubernetes/oof/components/oof-has/resources/config/nginx.conf new file mode 100644 index 0000000000..a6790164d8 --- /dev/null +++ b/kubernetes/oof/components/oof-has/resources/config/nginx.conf @@ -0,0 +1,31 @@ +events { + worker_connections 768; + # multi_accept on; +} + +http { + # ... + upstream conductor_uwsgi { + server 127.0.0.1:8080; + } + + server { + + listen 8091 ssl; + server_name oof; + ssl_certificate /opt/bitnami/nginx/ssl/local/org.onap.oof.crt; + ssl_certificate_key /opt/bitnami/nginx/ssl/local/org.onap.oof.key; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + include /opt/bitnami/nginx/conf/uwsgi_params; + uwsgi_pass conductor_uwsgi; + + uwsgi_param Host $host; + uwsgi_param X-Real-IP $remote_addr; + uwsgi_param X-Forwarded-For $proxy_add_x_forwarded_for; + uwsgi_param X-Forwarded-Proto $http_x_forwarded_proto; + } + } +} -- cgit 1.2.3-korg