++

apps/django/base/nginx-configmap.yaml

@@ -5,50 +5,83 @@ metadata:
   namespace: django
 data:
   nginx.conf: |
-    user  nginx;
+    worker_processes auto;
-    worker_processes  auto;
-
-    error_log  stderr warn;
-    pid        /var/run/nginx.pid;
 
+    pid /var/run/nginx.pid;
 
     events {
-        worker_connections  1024;
+        use epoll;
+        worker_connections 1024;
     }
 
-
     http {
-        include       /etc/nginx/mime.types;
-        default_type  application/octet-stream;
 
-        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+        # Basic Settings
+        large_client_header_buffers 8 128k;
+        sendfile on;
+        tcp_nopush on;
+        tcp_nodelay on;
+        keepalive_timeout 300;
+        types_hash_max_size 2048;
+        client_max_body_size 5000M;
+        client_header_buffer_size 5M;
+        # server_tokens off;
+        # server_names_hash_bucket_size 64;
+        # server_name_in_redirect off;
+        include /etc/nginx/mime.types;
+        default_type application/octet-stream;
+
+        # Logging Settings
+        access_log /var/log/nginx/access.log;
+        error_log /var/log/nginx/error.log;
+
+        # GZIP Settings
+        gzip on;
+        gzip_vary on;
+        gzip_proxied any;
+        gzip_comp_level 6;
+        gzip_buffers 16 8k;
+        gzip_http_version 1.1;
+        gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
+        log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                         '$status $body_bytes_sent "$http_referer" '
                         '"$http_user_agent" "$http_x_forwarded_for"';
 
-        access_log  /dev/stdout  main;
-
-        sendfile        on;
-
-        keepalive_timeout  65;
-
-        gzip  on;
-
         server {
-            client_header_buffer_size 16k;
+            listen 80;
-            large_client_header_buffers 4 16k;
+            listen [::]:80;
-            listen       80;
+            root /opt/react_client/;
-            server_name  localhost;
+
-            root /opt/react_client;
+            add_header 'Access-Control-Allow-Origin' '*' always;
-            expires off;
+            add_header 'Access-Control-Allow-Methods' '*' always;
+            add_header 'Access-Control-Allow-Headers' '*' always;
 
             location = /static/index.bundle.js {
                 add_header Cache-Control 'no-store no-cache, must-revalidate, proxy-revalidate, max-age=0';
                 if_modified_since off;
                 expires off;
             }
+            location ~^/api/pm/ {
+                #rewrite /api/(.+) /$1 break;
+                proxy_set_header Host $host;
+                proxy_pass http://backend-svc.pm.svc.cluster.local:8000;
+            }
 
-            location / {
+            location ~^/api/v1/documents/ {
-                try_files $uri @index;
+                #rewrite /api/(.+) /$1 break;
+                proxy_set_header Host $host;
+                proxy_pass http://backend-filestream-svc.documentations.svc.cluster.local:80;
+            }
+
+            # location ~^/(api|admin)/ {
+            #     proxy_set_header Host $host;
+            #     proxy_pass http://backend-svc.django.svc.cluster.local:80;
+            # }
+            
+            location ~^/workspaces-v2/(.+).js {
+                rewrite /workspaces-v2/(.+) /$1 break;
+                proxy_pass http://frontend-svc.workspaces.svc.cluster.local:80;
             }
 
             location @index {
@@ -58,13 +91,16 @@ data:
                 try_files /static/index.html =404;
             }
             
+            # location ~^/workflows/(.+).js {
+            #     rewrite /workflows/(.+) /$1 break;
+            #     proxy_pass http://frontend-svc.processing.svc.cluster.local:80;
+            # }
             location /service-worker.js {
                 try_files /static/$uri @index;
             }
 
-
+            location / {
-            location = /ping {
+                try_files $uri @index;
-                return 200 '{"result": "ok"}';
             }
         }
     }

clusters/yc-k8s-test/infrastructure/patches/istio-config.yaml

@@ -325,19 +325,19 @@ spec:
                   rewrite: /api/
                   service: backend-svc.workspaces.svc.cluster.local
                   port: 80
-            workspaces-frontend:
+            # workspaces-frontend:
-              name: workspaces-frontend-virt-service
+            #   name: workspaces-frontend-virt-service
-              namespace: gateway
+            #   namespace: gateway
-              hosts:
+            #   hosts:
-                - sarex.contour.infra.sarex.tech
+            #     - sarex.contour.infra.sarex.tech
-              gateways:
+            #   gateways:
-                - gateway/platform-gateway
+            #     - gateway/platform-gateway
-              routes:
+            #   routes:
-                - path:
+            #     - path:
-                    prefix: /workspaces-v2/
+            #         prefix: /workspaces-v2/
-                  rewrite: /
+            #       rewrite: /
-                  service: frontend-svc.workspaces.svc.cluster.local
+            #       service: frontend-svc.workspaces.svc.cluster.local
-                  port: 80
+            #       port: 80
             documentations-frontend:
               name: documentations-frontend-virt-service
               namespace: gateway