Untitled

ingress:

  annotations:
    kubernetes.io/ingress.class: "nginx"
    #cert-manager.io/cluster-issuer: "clusterissuer"

    #nginx.ingress.kubernetes.io/ssl-redirect: "true"
    
    # Configure ModSecurity
    nginx.ingress.kubernetes.io/enable-modsecurity: "true"
    nginx.ingress.kubernetes.io/enable-owasp-core-rules: "true"
    nginx.ingress.kubernetes.io/modsecurity-snippet: |
       SecRequestBodyAccess On
    
    
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/cors-allow-origin: "capacitor://localhost, http://localhost, http://localhost:5173, https://*.domain.ru"
    nginx.ingress.kubernetes.io/cors-allow-headers: "Accept, Te, Referer, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Accept-Language, Accept-Encoding, Access-Control-Allow-Origin, Access-Control-Allow-Methods, DNT, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Range, Connection, Authorization, AppPlatform, Credentials, Sec-Fetch-Site, Withcredentials, apptype, visitor_id, "
    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, PUT, POST, DELETE, PATCH, OPTIONS"

    nginx.ingress.kubernetes.io/configuration-snippet: |
        more_set_headers "Access-Control-Allow-Origin: $http_origin";
        


spec:
  tls:
  - hosts:
    - dev.domain.ru
    secretName: ingress-cert
  rules:
  - host: dev.domain.ru
    http:
      paths:
      - backend:
          service:
            name: frontend-service
            port:
              number: 80
        path: /
        pathType: Prefix
      
      - backend:
          service:
            name: interaction-service
            port:
              number: 80
        path: /api/
        pathType: Prefix

      #- backend:
      #    service:
      #      name: authorization-ingress
      #      port:
      #        number: 7000
      #  path: /account
      #  pathType: Prefix


nginx (front):

upstream auth {
         server authorization-service.authorization.svc.cluster.local:7000;
    }


    server {
        listen 80;
        server_name  dev.domain.ru;

        root   /usr/share/nginx/html;
        index  index.html index.htm;

        location /account {
            proxy_pass http://auth;
        }