d

yamls/kong/kong-proxy-db.1.yaml

+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
+    service.beta.kubernetes.io/aws-load-balancer-type: nlb
+  name: kong-dbproxy
+  namespace: kong
+spec:
+  externalTrafficPolicy: Local
+  ports:
+  - name: proxy
+    port: 80
+    protocol: TCP
+    targetPort: 8000
+    nodePort: 26999
+  - name: proxy-ssl
+    port: 443
+    protocol: TCP
+    targetPort: 8443
+  - name: admin-url
+    port: 8001 
+    protocol: TCP
+    targetPort: 8001
+  - name: promscratch
+    port: 9542
+    protocol: TCP
+  selector:
+    app: ingress-dbkong
+  type: LoadBalancer
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kong-validation-dbwebhook
+  namespace: kong
+spec:
+  ports:
+  - name: webhook
+    port: 443
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: ingress-dbkong
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: ingress-dbkong
+  name: ingress-dbkong
+  namespace: kong
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ingress-kong
+  template:
+    metadata:
+      annotations:
+        kuma.io/gateway: enabled
+        prometheus.io/port: "9542"
+        prometheus.io/scrape: "true"
+        traffic.sidecar.istio.io/includeInboundPorts: ""
+      labels:
+        app: ingress-dbkong
+    spec:
+      containers:
+      - env:
+        - name: KONG_DATABASE
+          value:  postgres
+        - name: KONG_PG_HOST
+          value:  kong-dbservice
+        - name: KONG_PG_PORT
+          value:  5432
+        - name: KONG_PG_DATABASE
+          value:  kong
+        - name: KONG_PG_USER
+          value:  kong
+        - name: KONG_PG_PASSWORD 
+          value:  kong         
+        - name: KONG_NGINX_WORKER_PROCESSES
+          value: "1"
+        - name: KONG_NGINX_HTTP_INCLUDE
+          value: /kong/servers.conf
+        - name: KONG_ADMIN_ACCESS_LOG
+          value: /dev/stdout
+        - name: KONG_ADMIN_ERROR_LOG
+          value: /dev/stderr
+        - name: KONG_ADMIN_LISTEN
+          value: 127.0.0.1:8444 ssl
+        - name: KONG_PROXY_LISTEN
+          value: 0.0.0.0:8000, 0.0.0.0:8443 ssl http2
+        image: kong:2.0
+        lifecycle:
+          preStop:
+            exec:
+              command:
+              - /bin/sh
+              - -c
+              - kong quit
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /health
+            port: 9001
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+        name: proxy
+        ports:
+        - containerPort: 8000
+          name: proxy
+          protocol: TCP
+        - containerPort: 8443
+          name: proxy-ssl
+          protocol: TCP
+        - containerPort: 9542
+          name: metrics
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /health
+            port: 9001
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+        securityContext:
+          runAsUser: 1000
+        volumeMounts:
+        - mountPath: /kong
+          name: kong-server-blocks
+      - args:
+        - /kong-ingress-controller
+        - --kong-url=https://localhost:8444
+        - --admin-tls-skip-verify
+        - --publish-service=kong/kong-dbproxy
+        env:
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: metadata.name
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: metadata.namespace
+        image: kong-docker-kubernetes-ingress-controller.bintray.io/kong-ingress-controller:0.8.0
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /healthz
+            port: 10254
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+        name: ingress-controller
+        ports:
+        - containerPort: 8080
+          name: webhook
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /healthz
+            port: 10254
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+      serviceAccountName: kong-serviceaccount
+      volumes:
+      - configMap:
+          name: kong-server-blocks
+        name: kong-server-blocks
\ No newline at end of file

yamls/kong/kong-proxy-db.yaml

@@ -7,7 +7,7 @@ metadata:
   name: kong-dbproxy
   namespace: kong
 spec:
-  externalTrafficPolicy: Local
+  #externalTrafficPolicy: Local
   ports:
   - name: proxy
     port: 80
@@ -27,12 +27,12 @@ spec:
     protocol: TCP
   selector:
     app: ingress-dbkong
-  type: LoadBalancer
+  type: NodePort
 ---
 apiVersion: v1
 kind: Service
 metadata:
-  name: kong-validation-dbwebhook
+  name: kong-validation-webhook
   namespace: kong
 spec:
   ports:
@@ -54,11 +54,10 @@ spec:
   replicas: 1
   selector:
     matchLabels:
-      app: ingress-kong
+      app: ingress-dbkong
   template:
     metadata:
       annotations:
-        kuma.io/gateway: enabled
         prometheus.io/port: "9542"
         prometheus.io/scrape: "true"
         traffic.sidecar.istio.io/includeInboundPorts: ""
@@ -67,6 +66,8 @@ spec:
     spec:
       containers:
       - env:
+        - name: KONG_DATABASE
+          value: "off"
         - name: KONG_NGINX_WORKER_PROCESSES
           value: "1"
         - name: KONG_NGINX_HTTP_INCLUDE
@@ -76,10 +77,11 @@ spec:
         - name: KONG_ADMIN_ERROR_LOG
           value: /dev/stderr
         - name: KONG_ADMIN_LISTEN
-          value: 127.0.0.1:8444 ssl
+          value: 0.0.0.0:8001, 0.0.0.0:8444 ssl
         - name: KONG_PROXY_LISTEN
           value: 0.0.0.0:8000, 0.0.0.0:8443 ssl http2
-        image: kong:2.0
+        image: kong:1.3
+        imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
@@ -93,7 +95,7 @@ spec:
             path: /health
             port: 9001
             scheme: HTTP
-          initialDelaySeconds: 5
+          initialDelaySeconds: 30
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 1
@@ -105,6 +107,9 @@ spec:
         - containerPort: 8443
           name: proxy-ssl
           protocol: TCP
+        - containerPort: 8001
+          name: admin-url
+          protocol: TCP
         - containerPort: 9542
           name: metrics
           protocol: TCP
@@ -114,7 +119,6 @@ spec:
             path: /health
             port: 9001
             scheme: HTTP
-          initialDelaySeconds: 5
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 1
@@ -123,6 +127,13 @@ spec:
         volumeMounts:
         - mountPath: /kong
           name: kong-server-blocks
+        resources:
+          requests:
+            cpu: 100m
+            memory: 512Mi
+          limits:
+            cpu: 500m
+            memory: 2500Mi
       - args:
         - /kong-ingress-controller
         - --kong-url=https://localhost:8444
@@ -139,7 +150,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.namespace
-        image: kong-docker-kubernetes-ingress-controller.bintray.io/kong-ingress-controller:0.8.0
+        image: kong-docker-kubernetes-ingress-controller.bintray.io/kong-ingress-controller:0.6.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3
@@ -147,7 +158,6 @@ spec:
             path: /healthz
             port: 10254
             scheme: HTTP
-          initialDelaySeconds: 5
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 1
@@ -162,7 +172,6 @@ spec:
             path: /healthz
             port: 10254
             scheme: HTTP
-          initialDelaySeconds: 5
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 1