Annotation¶

1. on ingress : nginx.ingress.kubernetes.io/xxxxxx¶

set up CORS for UI
notice: ssl/tls: certificated added on secret.

Ensure you have an NGINX Ingress Controller installed

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: backend-ingress
  annotations:
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/cors-allow-origin: "https://ui-dew4.app-1.msi-dev.lekhraj.com"
    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, PUT, POST, DELETE, PATCH, OPTIONS"
    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Range, Correlation-id, authorization"
    nginx.ingress.kubernetes.io/cors-expose-headers: "Content-Length, Content-Range"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
    nginx.ingress.kubernetes.io/proxy-next-upstream: "off"
spec:
  ingressClassName: nginx
  rules:
  - host: backend-dew4.app-1.msi-dev.lekhraj.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ui-service
            port:
              number: 8080
  tls:
  - hosts:
    - backend-dew4.app-1.msi-dev.lekhraj.com
    secretName: app-backend-release-dev4-tls-cert

SSL setup
option-1 : ingress controller + tls
option-2 : ALB-controller + ACM

ingress scenario-1 :

App1.ui.org.com → service.ui (ClusterIP)
App1.api.org.com → service.api (ClusterIP)

R53: Cname

Subdomain         Type  Target
app1.ui.org.com   A     Ingress Controller's Load Balancer hostname <<
app1.api.org.com  A     Ingress Controller's Load Balancer hostname >>

ingress scenario-2 :
App1.ui.org.com → service.1 (ClusterIP)
App1.ui.org.com → service.2 (ClusterIP)
App1.ui.org.com would go service1/2
ans: reolve by age. so service1 (since older)