38 lines
1.1 KiB
INI
38 lines
1.1 KiB
INI
#---------------------------------------------------------------------
|
|
# Configure HAProxy for Kubernetes API Server
|
|
#---------------------------------------------------------------------
|
|
listen stats
|
|
bind *:9000
|
|
mode http
|
|
stats enable
|
|
stats hide-version
|
|
stats uri /stats
|
|
stats refresh 30s
|
|
stats realm Haproxy\ Statistics
|
|
stats auth Admin:Password
|
|
option httplog
|
|
|
|
# change haproxy.cfg file with the following
|
|
global
|
|
log stdout local0 debug
|
|
|
|
defaults
|
|
log global
|
|
option httplog
|
|
|
|
############## Configure HAProxy Secure Frontend #############
|
|
frontend k8s-api-https-proxy
|
|
bind 0.0.0.0:38443
|
|
mode tcp
|
|
tcp-request inspect-delay 5s
|
|
tcp-request content accept if { req.ssl_hello_type 1 }
|
|
default_backend k8s-api-https
|
|
|
|
############## Configure HAProxy SecureBackend #############
|
|
backend k8s-api-https
|
|
balance roundrobin
|
|
mode tcp
|
|
option tcplog
|
|
option tcp-check
|
|
default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
|
|
server k8s-api-1 192.168.49.2:8443 check |