From b3aef7b242d410d040f33d0db126d601cce69bee Mon Sep 17 00:00:00 2001 From: ktimoney Date: Mon, 13 Sep 2021 08:27:58 +0100 Subject: [POLICY] Add helm chart for policy-gui Added helm chart for policy gui Issue-ID: POLICY-3593 Change-Id: I8e0e1b7a31258bb860b304a1635f785517b443ae Signed-off-by: ktimoney --- .../policy-gui/resources/config/default.conf | 32 ++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 kubernetes/policy/components/policy-gui/resources/config/default.conf (limited to 'kubernetes/policy/components/policy-gui/resources/config/default.conf') diff --git a/kubernetes/policy/components/policy-gui/resources/config/default.conf b/kubernetes/policy/components/policy-gui/resources/config/default.conf new file mode 100644 index 0000000000..98417cd822 --- /dev/null +++ b/kubernetes/policy/components/policy-gui/resources/config/default.conf @@ -0,0 +1,32 @@ +server { + + listen 2443 default ssl; + ssl_protocols TLSv1.2; + {{ if .Values.global.aafEnabled }} + ssl_certificate {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_pem}}; + ssl_certificate_key {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_key}}; + {{ else }} + ssl_certificate /etc/ssl/clamp.pem; + ssl_certificate_key /etc/ssl/clamp.key; + {{ end }} + + ssl_verify_client optional_no_ca; + absolute_redirect off; + + location / { + root /usr/share/nginx/html; + index index.html index.htm; + try_files $uri $uri/ =404; + } + + location /clamp/restservices/clds/ { + proxy_pass https://policy-clamp-be:8443/restservices/clds/; + proxy_set_header X-SSL-Cert $ssl_client_escaped_cert; + } + + location = /50x.html { + root /var/lib/nginx/html; + } + error_page 500 502 503 504 /50x.html; + error_log /var/log/nginx/error.log warn; +} -- cgit 1.2.3-korg