Ingress-nginx Helm values reference#

Helm values reference table for the ingress-nginx application.

Key

Type

Default

Description

global.vaultSecretsPath

string

Set by Argo CD

Base path for Vault secrets

ingress-nginx.controller.config.compute-full-forwarded-for

string

"true"

Put the complete path in X-Forwarded-For, not just the last hop, so that the client IP will be exposed to Gafaelfawr

ingress-nginx.controller.config.large-client-header-buffers

string

"4 64k"

Increase the buffer size for client headers because we may have JWTs in the client request

ingress-nginx.controller.config.proxy-body-size

string

"100m"

Maximum size of the client request body (needs to be large enough to allow table uploads)

ingress-nginx.controller.config.proxy-buffer-size

string

"64k"

Increase the buffer size for responses from backend servers to allow for longer headers

ingress-nginx.controller.config.ssl-redirect

string

"true"

Redirect all non-SSL access to SSL.

ingress-nginx.controller.config.use-forwarded-headers

string

"true"

Enable the X-Forwarded-For processing

ingress-nginx.controller.metrics.enabled

bool

true

Enable metrics reporting via Prometheus

ingress-nginx.controller.podLabels

object

{"gafaelfawr.lsst.io/ingress":"true","hub.jupyter.org/network-access-proxy-http":"true"}

Add labels used by NetworkPolicy objects to restrict access to the ingress and thus ensure that auth subrequest handlers run

ingress-nginx.controller.service.externalTrafficPolicy

string

"Local"

Force traffic routing policy to Local so that the external IP in X-Forwarded-For will be correct

vaultCertificate.enabled

bool

false

Whether to store ingress TLS certificate via vault-secrets-operator. Typically “squareone” owns it instead in an RSP.