kibana-ingress.yaml 1.61 KB
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: kibana-ingress
  namespace: logging
  labels:
    app: kibana
  annotations:
    # ALB 控制器注解
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
    alb.ingress.kubernetes.io/ssl-redirect: "443"
    
    # 健康检查配置
    alb.ingress.kubernetes.io/healthcheck-protocol: HTTP
    alb.ingress.kubernetes.io/healthcheck-port: traffic-port
    alb.ingress.kubernetes.io/healthcheck-path: /api/status
    alb.ingress.kubernetes.io/healthcheck-interval-seconds: "30"
    alb.ingress.kubernetes.io/healthcheck-timeout-seconds: "5"
    alb.ingress.kubernetes.io/healthy-threshold-count: "2"
    alb.ingress.kubernetes.io/unhealthy-threshold-count: "2"
    
    # SSL 证书 - 将由 Terraform 自动填充
    alb.ingress.kubernetes.io/certificate-arn: "PENDING_ACM_CERTIFICATE_ARN"
    
    # 安全组 - 请替换为您的安全组 ID
    alb.ingress.kubernetes.io/security-groups: "sg-xxxxxxxxx"
    
    # 其他优化配置
    alb.ingress.kubernetes.io/load-balancer-attributes: idle_timeout.timeout_seconds=60
    alb.ingress.kubernetes.io/success-codes: "200,302"
    alb.ingress.kubernetes.io/tags: Environment=production,Team=logging,Project=elk-stack
spec:
  ingressClassName: alb
  rules:
  - host: kibana.mpc.run.place
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: kibana-service
            port:
              number: 5601
  tls:
  - hosts:
    - kibana.mpc.run.place