| # |
| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| apiVersion: v1 |
| kind: ConfigMap |
| metadata: |
| name: {{ include "apisix.fullname" . }} |
| namespace: {{ .Release.Namespace }} |
| data: |
| config.yaml: |- |
| # |
| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # |
| apisix: |
| node_listen: {{ .Values.gateway.http.containerPort }} # APISIX listening port |
| enable_heartbeat: true |
| enable_admin: {{ .Values.admin.enabled }} |
| enable_admin_cors: {{ .Values.admin.cors }} |
| enable_debug: false |
| enable_dev_mode: false # Sets nginx worker_processes to 1 if set to true |
| enable_reuseport: true # Enable nginx SO_REUSEPORT switch if set to true. |
| enable_ipv6: true |
| config_center: etcd # etcd: use etcd to store the config value |
| # yaml: fetch the config value from local yaml file `/your_path/conf/apisix.yaml` |
| |
| #proxy_protocol: # Proxy Protocol configuration |
| # listen_http_port: 9181 # The port with proxy protocol for http, it differs from node_listen and port_admin. |
| # This port can only receive http request with proxy protocol, but node_listen & port_admin |
| # can only receive http request. If you enable proxy protocol, you must use this port to |
| # receive http request with proxy protocol |
| # listen_https_port: 9182 # The port with proxy protocol for https |
| # enable_tcp_pp: true # Enable the proxy protocol for tcp proxy, it works for stream_proxy.tcp option |
| # enable_tcp_pp_to_upstream: true # Enables the proxy protocol to the upstream server |
| |
| proxy_cache: # Proxy Caching configuration |
| cache_ttl: 10s # The default caching time if the upstream does not specify the cache time |
| zones: # The parameters of a cache |
| - name: disk_cache_one # The name of the cache, administrator can be specify |
| # which cache to use by name in the admin api |
| memory_size: 50m # The size of shared memory, it's used to store the cache index |
| disk_size: 1G # The size of disk, it's used to store the cache data |
| disk_path: "/tmp/disk_cache_one" # The path to store the cache data |
| cache_levels: "1:2" # The hierarchy levels of a cache |
| # - name: disk_cache_two |
| # memory_size: 50m |
| # disk_size: 1G |
| # disk_path: "/tmp/disk_cache_two" |
| # cache_levels: "1:2" |
| |
| allow_admin: # http://nginx.org/en/docs/http/ngx_http_access_module.html#allow |
| {{- if .Values.allow.ipList }} |
| {{- range $ips := .Values.allow.ipList }} |
| - {{ $ips }} |
| {{- end }} |
| {{- else }} |
| - 0.0.0.0/0 |
| {{- end}} |
| # - "::/64" |
| {{- if .Values.admin.enabled }} |
| port_admin: {{ .Values.admin.port }} |
| {{- end }} |
| |
| # Default token when use API to call for Admin API. |
| # *NOTE*: Highly recommended to modify this value to protect APISIX's Admin API. |
| # Disabling this configuration item means that the Admin API does not |
| # require any authentication. |
| admin_key: |
| # admin: can everything for configuration data |
| - name: "admin" |
| key: {{ .Values.admin.credentials.admin }} |
| role: admin |
| # viewer: only can view configuration data |
| - name: "viewer" |
| key: {{ .Values.admin.credentials.viewer }} |
| role: viewer |
| router: |
| http: 'radixtree_uri' # radixtree_uri: match route by uri(base on radixtree) |
| # radixtree_host_uri: match route by host + uri(base on radixtree) |
| ssl: 'radixtree_sni' # radixtree_sni: match route by SNI(base on radixtree) |
| # stream_proxy: # TCP/UDP proxy |
| # tcp: # TCP proxy port list |
| # - 9100 |
| # - 9101 |
| # udp: # UDP proxy port list |
| # - 9200 |
| # - 9211 |
| # dns_resolver: |
| # {{- range $resolver := .Values.dns.resolvers }} |
| # - {{ $resolver }} |
| # {{- end }} |
| dns_resolver_valid: {{.Values.dns.validity}} |
| resolver_timeout: {{.Values.dns.timeout}} |
| ssl: |
| enable: {{ .Values.gateway.tls.enabled }} |
| enable_http2: {{ .Values.gateway.tls.http2.enabled }} |
| listen_port: {{ .Values.gateway.tls.containerPort }} |
| ssl_protocols: "TLSv1 TLSv1.1 TLSv1.2 TLSv1.3" |
| ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA" |
| |
| nginx_config: # config for render the template to genarate nginx.conf |
| error_log: "/dev/stderr" |
| error_log_level: "warn" # warn,error |
| worker_rlimit_nofile: 20480 # the number of files a worker process can open, should be larger than worker_connections |
| event: |
| worker_connections: 10620 |
| http: |
| access_log: "/dev/stdout" |
| keepalive_timeout: 60s # timeout during which a keep-alive client connection will stay open on the server side. |
| client_header_timeout: 60s # timeout for reading client request header, then 408 (Request Time-out) error is returned to the client |
| client_body_timeout: 60s # timeout for reading client request body, then 408 (Request Time-out) error is returned to the client |
| send_timeout: 10s # timeout for transmitting a response to the client.then the connection is closed |
| underscores_in_headers: "on" # default enables the use of underscores in client request header fields |
| real_ip_header: "X-Real-IP" # http://nginx.org/en/docs/http/ngx_http_realip_module.html#real_ip_header |
| real_ip_from: # http://nginx.org/en/docs/http/ngx_http_realip_module.html#set_real_ip_from |
| - 127.0.0.1 |
| - 'unix:' |
| #lua_shared_dicts: # add custom shared cache to nginx.conf |
| # ipc_shared_dict: 100m # custom shared cache, format: `cache-key: cache-size` |
| |
| etcd: |
| {{- if .Values.etcd.enabled }} |
| host: # it's possible to define multiple etcd hosts addresses of the same etcd cluster. |
| - "http://{{ .Release.Name }}-etcd.{{ .Release.Namespace }}.svc.{{ .Values.gateway.k8s_domain }}:{{ .Values.etcd.defaultPort }}" |
| {{- else }} |
| host: # it's possible to define multiple etcd hosts addresses of the same etcd cluster. |
| {{- range $value := .Values.etcd.host }} |
| - "{{ $value }}" # multiple etcd address |
| {{- end}} |
| {{- end }} |
| prefix: {{ .Values.etcd.prefix | quote }} # apisix configurations prefix |
| timeout: {{ .Values.etcd.timeout }} # 30 seconds |
| |
| {{- if .Values.plugins }} |
| plugins: # plugin list |
| {{- end }} |
| {{- range $plugin := .Values.plugins }} |
| - {{ $plugin }} |
| {{- end }} |
| stream_plugins: |
| {{- range $plugin := .Values.stream_plugins }} |
| - {{ $plugin }} |
| {{- end }} |
