Scribd
Upload
77 views5 pages

Ingress Annotations

The document contains configuration details for multiple Istio ingress resources using different ingress classes like Nginx, Socket, and gRPC. It specifies protocol, rewrite targets, upstream hosts, headers, and other configuration parameters for routing traffic into Kubernetes clusters.

Uploaded by

Md Azmal
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
77 views5 pages

Ingress Annotations

The document contains configuration details for multiple Istio ingress resources using different ingress classes like Nginx, Socket, and gRPC. It specifies protocol, rewrite targets, upstream hosts, headers, and other configuration parameters for routing traffic into Kubernetes clusters.

Uploaded by

Md Azmal
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 5

UNIQUE ISTIO

ingressClass: nginx
gateway - with selector
ingressClass: traefik
protocol: h2c
gateway - with selector
ingressClass: traefik-v2
protocol: h2c
gateway - with selector
configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection
"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /analytics-exp-ui/stencil/production/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1; return 301 /new/ui$uri$is_args$args;
ingressClass: nginx
rewriteTarget: /analytics-exp-ui/staging/production/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1; return 301 /new/ui$uri$is_args$args;
ingressClass: nginx
rewriteTarget: /analytics-exp-ui/prod-us/production/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1; return 301 /new/ui$uri$is_args$args;
ingressClass: nginx
rewriteTarget: /analytics-exp-ui/prod/production/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1; return 301 /new/ui$uri$is_args$args;
ingressClass: nginx
rewriteTarget: /analytics-exp-ui/integration/production/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

custom:
nginx.ingress.kubernetes.io/rewrite-target: /
ingressClass: nginx

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /missions-ui/stencil/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /missions-ui/integration/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header Access-Control-Expose-Headers "Tus-Resumable, Upload-Length,


Upload-Metadata, Upload-Offset, Tus-Version, Tus-Extension, Tus-Max-Size, Content-Type,
x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id,
Authorization, Origin, Location, traceparent";
custom:
nginx.ingress.kubernetes.io/proxy-body-size: 500m
ingressClass: nginx

configurationSnippet: add_header Access-Control-Expose-Headers "Tus-Resumable, Upload-Length,


Upload-Metadata, Upload-Offset, Tus-Version, Tus-Extension, Tus-Max-Size, Content-Type,
x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id,
Authorization, Origin, Location";
ingressClass: nginx

configurationSnippet: add_header Strict-Transport-Security 'max-age=31536000; includeSubdomains;


always'; add_header Content-Security-Policy "frame-ancestors 'self' *.ameyo.com
*.mindtickle.com *.seismic.com *.salesforce.com *.force.com *.mediafly.com *.highspot.com
*.dynamics.com *.ipresent.com *.ipresentweb.com *.crm.ondemand.com *.stripe.partners
*.salesforce-communities.com";
ingressClass: nginx

ingressClass: socket

ingressClass: grpc
protocol: GRPC

backendProtocol: GRPC
ingressClass: grpc

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-container-hoisting/staging/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-container-hoisting/prod-us/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-container-hoisting/prod/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: set $new_cookie $http_cookie; if ($new_cookie ~ '(.*[\s])(source=)("[^"]*"|[^\s]*[^;]?)(.*)')


{ set $new_cookie $1$4; } proxy_set_header Cookie $new_cookie;
ingressClass: nginx

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /equip-outlook-addin/staging/production/exposed-static/$1
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com
UNIQUE ISTIO
configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection
"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /equip-outlook-addin/prod-us/production/exposed-static/$1
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /equip-outlook-addin/prod/production/exposed-static/$1
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /equip-outlook-addin/integration/production/exposed-static/$1
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

ingressClass: nginx
protocol: h2c

ingressClass: nginx
proxyHttpVersion: '1.1'
rewriteTarget: /selfserve-ui/coaching-dev/index.html
serverSnippet: proxy_set_header Connection ""; proxy_set_header Authorization
''; proxy_set_header Host s3-ap-southeast-1.amazonaws.com; add_header X-Content-Type-Options
nosniff; add_header X-XSS-Protection "1; mode=block"; proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id; proxy_hide_header x-amz-meta-server-side-encryption;
proxy_hide_header x-amz-server-side-encryption; proxy_hide_header Set-Cookie;
proxy_ignore_headers Set-Cookie; proxy_cache_valid 200 60s; proxy_intercept_errors
on; add_header Strict-Transport-Security 'max-age=31536000; includeSubdomains; always';
add_header Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache
'$upstream_cache_status $upstream_http_date'; expires -1;
upstreamVhost: coaching-devapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /selfserve-ui/stencil/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /selfserve-ui/lapps-dev/index.html
upstreamVhost: lapps-devapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /selfserve-ui/staging/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /selfserve-ui/prod-us/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /selfserve-ui/prod/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /selfserve-ui/integration/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

ingressClass: nginx
nginx.ingress.kubernetes.io/proxy-body-size: 300m

ingressClass: nginx
proxyHttpVersion: '1.1'
rewriteTarget: /checklist-ui/coaching-dev/index.html
serverSnippet: proxy_set_header Connection ""; proxy_set_header Authorization
''; proxy_set_header Host s3-ap-southeast-1.amazonaws.com; add_header X-Content-Type-Options
nosniff; add_header X-XSS-Protection "1; mode=block"; proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id; proxy_hide_header x-amz-meta-server-side-encryption;
proxy_hide_header x-amz-server-side-encryption; proxy_hide_header Set-Cookie;
proxy_ignore_headers Set-Cookie; proxy_cache_valid 200 60s; proxy_intercept_errors
on; add_header Strict-Transport-Security 'max-age=31536000; includeSubdomains; always';
add_header Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache
'$upstream_cache_status $upstream_http_date'; expires -1;
upstreamVhost: coaching-devapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /checklist-ui/stencil/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /checklist-ui/lapps-dev/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /checklist-ui/staging/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /checklist-ui/prod-us/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com
UNIQUE ISTIO
configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection
"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /checklist-ui/prod/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /checklist-ui/integration/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /mt-uploader-ui/staging/sw/sw.js
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /mt-uploader-ui/prod-us/sw/sw.js
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /mt-uploader-ui/prod/sw/sw.js
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /mt-uploader-ui/integration/sw/sw.js
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

ingressClass: traefik

backendProtocol: h2c
ingressClass: traefik

ingressClass: nginx
proxyHttpVersion: '1.1'
rewriteTarget: /reinforcement-ui/coaching-dev/index.html
serverSnippet: proxy_set_header Connection ""; proxy_set_header Authorization
''; proxy_set_header Host s3-ap-southeast-1.amazonaws.com; add_header X-Content-Type-Options
nosniff; add_header X-XSS-Protection "1; mode=block"; proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id; proxy_hide_header x-amz-meta-server-side-encryption;
proxy_hide_header x-amz-server-side-encryption; proxy_hide_header Set-Cookie;
proxy_ignore_headers Set-Cookie; proxy_cache_valid 200 60s; proxy_intercept_errors
on; add_header Strict-Transport-Security 'max-age=31536000; includeSubdomains; always';
add_header Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache
'$upstream_cache_status $upstream_http_date'; expires -1;
upstreamVhost: coaching-devapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /reinforcement-ui/stencil/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /reinforcement-ui/staging/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /reinforcement-ui/prod-us/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /reinforcement-ui/prod/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /reinforcement-ui/integration/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: if ($http_x_mt_host = "admin.beta.mindtickle.com") { proxy_pass


http://alt-svc-api-beta.prod.svc.cluster.local:80; }
ingressClass: nginx

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /tag-ui/stencil/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /tag-ui/staging/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com
UNIQUE ISTIO
configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection
"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /tag-ui/prod-us/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /tag-ui/prod/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /tag-ui/integration/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /coaching-ui/coaching-dev/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /coaching-ui/stencil/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /coaching-ui/staging/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /coaching-ui/prod-us/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /coaching-ui/prod/index.html
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
rewriteTarget: /coaching-ui/integration/index.html
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-shell/stencil/sw.js
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-shell/lapps-dev/sw.js
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-shell/staging/sw.js
upstreamVhost: stagingapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-shell/prod-us/sw.js
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'includeSubdomains; always'; add_header Content-Security-Policy
"frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status $upstream_http_date';
expires -1;
ingressClass: nginx
rewriteTarget: /ui-shell/prod/sw.js
upstreamVhost: mtapps-cdn.mindtickle.com.s3-ap-southeast-1.amazonaws.com

ingressClass: nginx
proxyReadTimeout: 300

configurationSnippet: add_header Access-Control-Expose-Headers "Access-Control-Allow-Headers";


ingressClass: nginx

configurationSnippet: add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection


"1; mode=block"; proxy_cache_valid 200 60s; proxy_intercept_errors on; add_header
Strict-Transport-Security 'max-age=31536000; includeSubdomains; always'; add_header
Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache '$upstream_cache_status
$upstream_http_date'; expires -1;
ingressClass: nginx
nginx.ingress.kubernetes.io/use-regex: 'true'
rewriteTarget: /mt-user-management-ui/uma-dev/index.html
upstreamVhost: uma-devapps.mindtickle.com.s3-ap-south-1.amazonaws.com
UNIQUE ISTIO
ingressClass: nginx
nginx.ingress.kubernetes.io/use-regex: 'true'
proxyHttpVersion: '1.1'
rewriteTarget: /mt-user-management-ui/coaching-dev/index.html
serverSnippet: proxy_set_header Connection ""; proxy_set_header Authorization
''; proxy_set_header Host s3-ap-southeast-1.amazonaws.com; add_header X-Content-Type-Options
nosniff; add_header X-XSS-Protection "1; mode=block"; proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id; proxy_hide_header x-amz-meta-server-side-encryption;
proxy_hide_header x-amz-server-side-encryption; proxy_hide_header Set-Cookie;
proxy_ignore_headers Set-Cookie; proxy_cache_valid 200 60s; proxy_intercept_errors
on; add_header Strict-Transport-Security 'max-age=31536000; includeSubdomains; always';
add_header Content-Security-Policy "frame-ancestors 'self'"; add_header x-cache
'$upstream_cache_status $upstream_http_date'; expires -1;
upstreamVhost: coaching-devapps.mindtickle.com.s3-ap-south-1.amazonaws.com

configurationSnippet: return 301 https://$host/new/ui/admin/users$2?$args;


externalName: umg-svc-gkpr
ingressClass: nginx
nginx.ingress.kubernetes.io/use-regex: 'true'

configurationSnippet: if ($is_args = '') { return 301 https://$host/new/ui/admin/users$2;


} return 301 https://$host/new/ui/admin/users$2?$args;
externalName: umg-svc-gkpr
ingressClass: nginx
nginx.ingress.kubernetes.io/use-regex: 'true'

You might also like