123 lines
2.7 KiB
YAML
123 lines
2.7 KiB
YAML
# リダイレクト設定
|
|
redirect:
|
|
# リダイレクトモード: "path-preserve" | "root-only" | "custom"
|
|
# path-preserve: パスを維持したまま転送 (例: /page -> https://new-domain.com/page)
|
|
# root-only: パスを無視して指定URLに転送 (例: /any/path -> https://new-domain.com)
|
|
# custom: 個別パスごとに転送先を指定
|
|
mode: "path-preserve"
|
|
|
|
# HTTPステータスコード: 301 (永久) | 302 (一時)
|
|
statusCode: 301
|
|
|
|
# path-preserve / root-only モード用の転送先ドメイン
|
|
targetDomain: "https://example.com"
|
|
|
|
# custom モード用の個別パス設定
|
|
customPaths:
|
|
# パスごとの転送先を指定
|
|
# 例:
|
|
# - path: "/old-page"
|
|
# target: "https://new-domain.com/new-page"
|
|
# - path: "/products"
|
|
# target: "https://shop.example.com/products"
|
|
# - path: "/blog/*"
|
|
# target: "https://blog.example.com"
|
|
[]
|
|
|
|
# customモード用のフォールバック設定
|
|
# 設定にないパスへのアクセス時の転送先
|
|
fallbackTarget: "https://example.com"
|
|
|
|
# Ingress設定
|
|
ingress:
|
|
enabled: true
|
|
className: "nginx"
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
hosts:
|
|
- host: old-domain.example.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: nginx-redirect-tls
|
|
hosts:
|
|
- old-domain.example.com
|
|
|
|
# Deployment設定
|
|
replicaCount: 2
|
|
|
|
image:
|
|
repository: nginx
|
|
tag: "1.25.3-alpine"
|
|
pullPolicy: IfNotPresent
|
|
|
|
# セキュリティコンテキスト
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 101
|
|
runAsGroup: 101
|
|
fsGroup: 101
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
# リソース制限
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
|
|
# ヘルスチェック
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: 8080
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: 8080
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
|
|
# Service設定
|
|
service:
|
|
type: ClusterIP
|
|
port: 80
|
|
targetPort: 8080
|
|
|
|
# Pod Disruption Budget
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 1
|
|
|
|
# Node Affinity / Pod Anti-Affinity
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/name
|
|
operator: In
|
|
values:
|
|
- nginx-redirect
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
# Additional labels
|
|
labels: {}
|
|
|
|
# Additional annotations
|
|
annotations: {} |