diff --git a/README.md b/README.md index e7d30db..d82c123 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,45 @@ # akashop +origin-akashop.akamai-lab.com + +## How to use HTTPS ## +- traefik/02-traefik.yml +``` +- --certificatesresolvers.le.acme.email=learn@akamai.com +- --certificatesresolvers.le.acme.storage=acme.json +- --certificatesresolvers.le.acme.tlschallenge=true +- --certificatesresolvers.le.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory +``` +- akashop/ingress.yml +``` +traefik.ingress.kubernetes.io/router.entrypoints: websecure +traefik.ingress.kubernetes.io/router.tls: "true" +traefik.ingress.kubernetes.io/router.tls.certresolver: le +``` + +## How to redirect HTTP to HTTPS ## +- akashop/redirect.yml +- akashop/ingress.yml +``` +traefik.ingress.kubernetes.io/router.middlewares: "http-to-https-redirecte@kubernetescrd" +``` + +## How to maintain Session Stickyness ## +- akashop/ingress.yml +``` +traefik.ingress.kubernetes.io/router.sticky.cookie: "sticky" +``` +- origin code (functions.php) +```php +// Define cookie name and value +$cookie_name = "sticky"; +$cookie_value = time(); + +// Set expiration time (optional, defaults to session end) +$expire = time() + 60 * 60 * 24; // Expires in 24 hours + +if(!isset($_COOKIE[$cookie_name])) { + // Set cookie with secure flag (recommended) + setcookie($cookie_name, $cookie_value, $expire, "/", "", true); +} +``` diff --git a/akashop/ingress.yml b/akashop/ingress.yml index 7dc3334..f4b48bf 100644 --- a/akashop/ingress.yml +++ b/akashop/ingress.yml @@ -30,6 +30,7 @@ metadata: namespace: akashop annotations: traefik.ingress.kubernetes.io/router.entrypoints: web + traefik.ingress.kubernetes.io/router.middlewares: "http-to-https-redirecte@kubernetescrd" spec: rules: - host: whoami.172.233.168.9.nip.io @@ -42,25 +43,3 @@ spec: name: wp port: number: 80 - ---- - -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: wp-origin - namespace: akashop - annotations: - traefik.ingress.kubernetes.io/router.entrypoints: web -spec: - rules: - - host: origin-akashop.akamai-lab.com - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: wp - port: - number: 80 diff --git a/akashop/nginx-ext.yml b/akashop/nginx-ext.yml deleted file mode 100644 index 424df54..0000000 --- a/akashop/nginx-ext.yml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: nginx - namespace: akashop -spec: - type: ExternalName - externalName: nginx.nginx.svc.cluster.local - ports: - - name: http - port: 80 - protocol: TCP \ No newline at end of file diff --git a/akashop/redirect.yml b/akashop/redirect.yml new file mode 100644 index 0000000..e0182e6 --- /dev/null +++ b/akashop/redirect.yml @@ -0,0 +1,8 @@ +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: http-to-https-redirect +spec: + redirectScheme: + scheme: https + permanent: true # Set to true for permanent (301) redirect \ No newline at end of file