chore

samtuap · Nov 1, 2024 · b6e34fc · b6e34fc
1 parent c5ba6d6
commit b6e34fc
Show file tree

Hide file tree

Showing 2 changed files with 43 additions and 32 deletions.
diff --git a/k8s/ingress.yml b/k8s/ingress.yml
@@ -3,11 +3,19 @@ kind: Ingress
 metadata:
   name: inong-ingress
   annotations:
-    kubernetes.io/ingress.class: nginx
+#    kubernetes.io/ingress.class: nginx
 #    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
 #    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
-    # nginx.ingress.kubernetes.io/rewrite-target: /$1 # api-gateway에서 라우팅하므로 이부부은 주석 처리 되어야한다.
-    nginx.ingress.kubernetes.io/websocket-services: "openvidu-service" # 웹소켓 지원
+#    # nginx.ingress.kubernetes.io/rewrite-target: /$1 # api-gateway에서 라우팅하므로 이부부은 주석 처리 되어야한다.
+#    nginx.ingress.kubernetes.io/websocket-services: "openvidu-service" # 웹소켓 지원
+#    cert-manager.io/cluster-issuer: letsencrypt-prod
+    kubernetes.io/ingress.class: nginx
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.ingress.kubernetes.io/proxy-buffering: "off"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
     cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   # 아래 tls 부분을 추가!

diff --git a/k8s/openvidu-depl.yml b/k8s/openvidu-depl.yml
@@ -15,32 +15,35 @@ spec:
         app: openvidu
     spec:
       containers:
-      - name: openvidu-server
-        image: openvidu/openvidu-server-kms:latest #
-#        image: openvidu/openvidu-dev
-        ports:
-        - containerPort: 4443
-        env:
-          - name: OPENVIDU_URL
-            valueFrom:
-              secretKeyRef:
-                key: OPENVIDU_URL
-                name: inong-app-secrets
-          - name: OPENVIDU_SECRET
-            valueFrom:
-              secretKeyRef:
-                key: OPENVIDU_SECRET
-                name: inong-app-secrets
-          - name: DOMAIN_OR_PUBLIC_IP
-            value: "api.inong.shop"
-          - name: OPENVIDU_PUBLICURL
-            value: "https://api.inong.shop/openvidu"
-#            value: https://api.inong.shop:4443/
-          - name: OPENVIDU_SERVER_CONTEXT_PATH
-            value: "/openvidu"
-          - name: CERTIFICATE_TYPE
-            value: letsencrypt
-          - name: LETSENCRYPT_EMAIL
-            value: [email protected]
-          - name: OPENVIDU_SERVER_SSL
-            value: "true"
+        - name: openvidu-server
+          image: openvidu/openvidu-server-kms:latest #
+          #        image: openvidu/openvidu-dev
+          ports:
+            - containerPort: 4443
+          env:
+            - name: DOMAIN_OR_PUBLIC_IP
+              value: "api.inong.shop"
+            - name: OPENVIDU_PUBLICURL
+#              value: "https://api.inong.shop:4443/"
+              value: "https://api.inong.shop/openvidu/"
+            - name: OPENVIDU_SERVER_CE_PATH
+              value: "/openvidu"
+            - name: OPENVIDU_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: inong-app-secrets
+                  key: OPENVIDU_SECRET
+            - name: CERTIFICATE_TYPE
+              value: "owncert"
+            - name: CERTIFICATE_CERTIFICATE
+              value: /etc/letsencrypt/tls.crt
+            - name: CERTIFICATE_PRIVATE_KEY
+              value: /etc/letsencrypt/tls.key
+          volumeMounts:
+            - name: tls-secret
+              mountPath: /etc/letsencrypt
+              readOnly: true
+      volumes:
+        - name: tls-secret
+          secret:
+            secretName: inong-com-tls