ingress-nginx-helm-values.ftl.yaml

controller:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
  watchIngressWithoutClass: true
  admissionWebhooks:
    enabled: false
  kind: Deployment
<#if config.application.netpols == true>
  networkPolicy:
    enabled: true
</#if>
  service:
    # Preserve client ip address
    # https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
    externalTrafficPolicy: Local
  replicaCount: 2
<#if podResources == true>
  resources:
    # Be generous to our Single Point of failure
    limits:
       cpu: '1'
       memory: 1Gi
    requests:
      cpu: 100m
      memory: 90Mi
<#else>
<#-- Explicitly set to null, because the chart sets requests by default
     https://github.com/kubernetes/ingress-nginx/blob/helm-chart-4.9.1/charts/ingress-nginx/values.yaml#L361 -->
  resources: null
</#if>
  ingressClassResource:
    enabled: true
    default: true
    #extraArgs:
    #default-ssl-certificate: "ingress-nginx/wildcard-cert"
  config:
    # settings for compression
    use-gzip: "true"
    enable-brotli: "true"
    # permanent redirect from http to https
    #force-ssl-redirect: "true"
    # customize access log format to include requested hostname ($host)
    # https://github.com/kubernetes/ingress-nginx/blob/controller-v1.2.1/docs/user-guide/nginx-configuration/log-format.md
    log-format-upstream: '$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$host" $request_length $request_time [$proxy_upstream_name] [$proxy_alternative_upstream_name] $upstream_addr $upstream_response_length $upstream_response_time $upstream_status $req_id'
<#if monitoring.active == true>
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
      namespace: ${namePrefix}monitoring
</#if>