nginx-redirect-prod.yaml

apiVersion: route.openshift.io/v1
kind: Route
metadata:
  annotations:
    router.cern.ch/network-visibility: Internet
    # Autogenerate cert with Let's encrypt: https://cern.service-now.com/service-portal?id=kb_article&n=KB0006299
    kubernetes.io/tls-acme: 'true'
    haproxy.router.openshift.io/ip_whitelist: ""
  labels:
    app: nginx-redirection
  name: nginx-redirection
spec:
  host: linux.cern.ch
  tls:
    insecureEdgeTerminationPolicy: Redirect
    termination: edge
  to:
    kind: Service
    name: nginx-redirection
    weight: 100
  wildcardPolicy: None

---

apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
  annotations:
    description: Redirects users from https://linux.cern.ch to https://linux.web.cern.ch
  labels:
    app: nginx-redirection
  name: nginx-redirection
spec:
  replicas: 1
  selector:
    app: nginx-redirection
    deploymentconfig: nginx-redirection
  strategy:
    type: Rolling
  template:
    metadata:
      annotations:
        openshift.io/container.nginx-redirection.image.entrypoint: '["nginx","-g","daemon
          off;"]'
        openshift.io/generated-by: OpenShiftNewApp
      labels:
        app: nginx-redirection
        deploymentconfig: nginx-redirection
    spec:
      containers:
      - image: nginx:stable-alpine
        imagePullPolicy: Always
        name: nginx-redirection
        ports:
        - containerPort: 8080
          protocol: TCP
        resources:
          limits:
            cpu: 100m
            memory: 20Mi
          requests:
            cpu: 50m
            memory: 10Mi
        volumeMounts:
        - mountPath: /etc/nginx/conf.d
          name: config
        - mountPath: /var/cache/nginx
          name: volume-cache
        - mountPath: /var/run
          name: volume-run
      restartPolicy: Always
      volumes:
      - configMap:
          defaultMode: 420
          name: nginx-redirection
        name: config
      - emptyDir: {}
        name: volume-cache
      - emptyDir: {}
        name: volume-run
  triggers:
  - type: ConfigChange

---

apiVersion: v1
kind: Service
metadata:
  labels:
    app: nginx-redirection
  name: nginx-redirection
spec:
  ports:
  - name: 8080-tcp
    port: 8080
    protocol: TCP
    targetPort: 8080
  selector:
    app: nginx-redirection
    deploymentconfig: nginx-redirection
  sessionAffinity: None
  type: ClusterIP

---

apiVersion: v1
data:
  redirect.conf: |
    server {
        listen       8080 default_server;
        server_name  linux.web.cern.ch;

        server_tokens off; ## Don't show the nginx version number, a security best practice
        return 301 https://$server_name$request_uri; # Make sure we redirect to the servername we want and not the host header sent by the client
        access_log  /dev/stdout;
        error_log   /dev/stdout;

        # redirect server error pages to the static page /50x.html
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   /usr/share/nginx/html;
        }
    }
kind: ConfigMap
metadata:
  labels:
    app: gitlab
  name: nginx-redirection