use internal IPs for GKE LBs

This commit is contained in:
Ryan Richard
2025-06-30 10:51:38 -07:00
parent 1eecad61b4
commit 282cc4ba9b

View File

@@ -495,6 +495,7 @@ metadata:
app: ${supervisor_app_name}
annotations:
kapp.k14s.io/disable-default-label-scoping-rules: ""
networking.gke.io/load-balancer-type: "Internal"
spec:
type: LoadBalancer
selector:
@@ -523,6 +524,7 @@ metadata:
app: dex
annotations:
kapp.k14s.io/disable-default-label-scoping-rules: ""
networking.gke.io/load-balancer-type: "Internal"
spec:
type: LoadBalancer
selector:
@@ -1196,6 +1198,7 @@ metadata:
name: ${supervisor_app_name}
namespace: ${supervisor_namespace}
annotations:
kubernetes.io/ingress.class: "gce-internal"
kubernetes.io/ingress.allow-http: "false"
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
# TODO Re-enable backend TLS cert verification once the Supervisor's default TLS cert is generated by automation in this script.