k8s-gateway helm

k8s_gateway is a CoreDNS plugin that resolves all types of external Kubernetes resources.

It will gather all domains from all services, ingresses, and HTTPRoutes resources and create a DNS record for each of them, corresponding to the service IPs. This ensures that all external resources are resolved from within the cluster, and traffic is not leaving the cluster.

Most people deploy the k8s_gateway together with CoreDNS and call the Helm Release 'k8s-gateway'. This can be supplimenting along side the kube-dns or default CoreDNS from k3s.

More popular helm chart found

k8s-gateway from ori-edge is more popular with 71 repositories.

Install

Install with:

helm repo add bjw-s https://bjw-s.github.io/helm-charts/
helm install k8s-gateway bjw-s/app-template -f values.yaml

Top Repositories (3 out of 12)

See examples from other people.

NameRepoStarsVersionTimestamp
k8s-gatewayauricom/home-ops1242.3.04 days ago
k8s-gatewayharaldkoch/kochhaus-home691.3.1a month ago
k8s-gatewayxUnholy/k8s-gitops4041.5.16 months ago

Values

See the most popular values for this chart:

KeyTypes
service.main.ports.http.enabled (12)
false
boolean
service.main.ports.dns.enabled (11)
true
boolean
service.main.ports.dns.port (11)
53
number
service.main.ports.dns.protocol (11)
UDP
string
service.main.ports.dns.targetPort (11)
1053
number
service.main.ports.metrics.enabled (8)
true
boolean
service.main.ports.metrics.port (8)
9153
number
service.main.ports.dnstcp.enabled (1)
true
boolean
service.main.ports.dnstcp.port (1)
53
number
service.main.ports.dnstcp.protocol (1)
TCP
string
service.main.ports.dnstcp.targetPort (1)
1053
number
service.main.ports.dnsudp.enabled (1)
true
boolean
service.main.ports.dnsudp.port (1)
53
number
service.main.ports.dnsudp.protocol (1)
UDP
string
service.main.ports.dnsudp.targetPort (1)
1053
number
service.main.type (12)
LoadBalancer
string
service.main.externalTrafficPolicy (11)
Local
string
service.main.annotations."io.cilium/lb-ipam-ips" (4)
${SVC_K8S_GATEWAY_ADDR}
string
service.main.annotations."metallb.universe.tf/loadBalancerIPs" (2)
${SVC_K8S_GATEWAY_ADDR}
string
service.main.externalIPs[] (3)
- ${LB_K8S_GATEWAY}
string
service.main.loadBalancerIP (3)
${CLUSTER_LB_K8SGATEWAY}
string
service.main.ipFamilyPolicy (1)
PreferDualStack
string
service.main.labels."io.cilium/lb-ipam-layer2" (1)
true
string
serviceAccount.create (12)
true
boolean
serviceAccount.name (12)
k8s-gateway
string
args[] (10)
- -conf
- /etc/coredns/Corefile
string
image.repository (10)
quay.io/oriedge/k8s_gateway
string
image.tag (10)
v0.3.4
string
image.pullPolicy (4)
IfNotPresent
string
probes.liveness.custom (10)
true
boolean
probes.liveness.spec.httpGet.path (10)
/health
string
probes.liveness.spec.httpGet.port (10)
8080
number
probes.liveness.spec.httpGet.scheme (4)
HTTP
string
probes.readiness.custom (10)
true
boolean
probes.readiness.spec.httpGet.path (10)
/ready
string
probes.readiness.spec.httpGet.port (10)
8181
number
probes.readiness.spec.httpGet.scheme (4)
HTTP
string
probes.startup.enabled (6)
false
boolean
probes.startup.custom (4)
true
boolean
probes.startup.spec.httpGet.path (4)
/ready
string
probes.startup.spec.httpGet.port (4)
8181
number
probes.startup.spec.httpGet.scheme (4)
HTTP
string
serviceMonitor.main.enabled (9)
true
boolean
serviceMonitor.main.endpoints[].interval (9)
1m
string
serviceMonitor.main.endpoints[].path (9)
/metrics
string
serviceMonitor.main.endpoints[].port (9)
metrics
string
serviceMonitor.main.endpoints[].scheme (9)
http
string
serviceMonitor.main.endpoints[].scrapeTimeout (9)
10s
string
persistence.config.enabled (8)
true
boolean
persistence.config.name (8)
k8s-gateway-configmap
string
persistence.config.type (8)
configMap
string
persistence.config.mountPath (7)
/etc/coredns/Corefile
string
persistence.config.readOnly (7)
true
boolean
persistence.config.subPath (5)
Corefile
string
persistence.config.advancedMounts.main.main[].path (1)
/etc/coredns
string
persistence.config.advancedMounts.main.main[].readOnly (1)
true
boolean
persistence.config-file.name (4)
k8s-gateway-configmap
string
persistence.config-file.type (4)
configMap
string
persistence.config-file.enabled (3)
true
boolean
persistence.config-file.mountPath (3)
/etc/coredns/Corefile
string
persistence.config-file.readOnly (3)
true
boolean
persistence.config-file.subPath (3)
Corefile
string
persistence.config-file.globalMounts[].path (1)
/etc/coredns/Corefile
string
persistence.config-file.globalMounts[].readOnly (1)
true
boolean
persistence.config-file.globalMounts[].subPath (1)
Corefile
string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (7)
k8s-gateway
string
topologySpreadConstraints[].maxSkew (7)
1
number
topologySpreadConstraints[].topologyKey (7)
kubernetes.io/hostname
string
topologySpreadConstraints[].whenUnsatisfiable (7)
DoNotSchedule
string
controller.replicas (6)
3
number
controller.strategy (6)
RollingUpdate
string
controller.annotations."reloader.stakater.com/auto" (2)
true
string
controller.rollingUpdate.surge (1)
1
number
controller.rollingUpdate.unavailable (1)
1
number
controller.type (1)
statefulset
string
configMaps.config.data.Corefile (2)
.:1053 { errors log health { lameduck 5s } ready k8s_gateway ${INGRESS_DOMAIN} { apex k8s-gateway.networking resources Ingress Service ttl 300 } prometheus 0.0.0.0:9153 loop reload loadbalance }
string
configMaps.config.enabled (2)
true
boolean
controllers.main.containers.main.args[] (2)
- -conf
- /etc/coredns/Corefile
string
controllers.main.containers.main.image.repository (2)
quay.io/oriedge/k8s_gateway
string
controllers.main.containers.main.image.tag (2)
v0.4.0
string
controllers.main.containers.main.image.pullPolicy (1)
IfNotPresent
string
controllers.main.containers.main.probes.liveness.custom (2)
true
boolean
controllers.main.containers.main.probes.liveness.spec.httpGet.path (2)
/health
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (2)
8080
number
controllers.main.containers.main.probes.liveness.spec.httpGet.scheme (1)
HTTP
string
controllers.main.containers.main.probes.readiness.custom (2)
true
boolean
controllers.main.containers.main.probes.readiness.spec.httpGet.path (2)
/ready
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (2)
8181
number
controllers.main.containers.main.probes.readiness.spec.httpGet.scheme (1)
HTTP
string
controllers.main.containers.main.probes.startup.custom (1)
true
boolean
controllers.main.containers.main.probes.startup.enabled (1)
false
boolean
controllers.main.containers.main.probes.startup.spec.httpGet.path (1)
/ready
string
controllers.main.containers.main.probes.startup.spec.httpGet.port (1)
8181
number
controllers.main.containers.main.probes.startup.spec.httpGet.scheme (1)
HTTP
string
controllers.main.containers.main.env.TZ (1)
${TIMEZONE}
string
controllers.main.containers.main.resources.limits.memory (1)
6000M
string
controllers.main.containers.main.resources.requests.memory (1)
512M
string
controllers.main.replicas (2)
2
number
controllers.main.strategy (2)
RollingUpdate
string
controllers.main.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.main.pod.annotations."configmap.reloader.stakater.com/reload" (1)
k8s-gateway-config
string
podAnnotations."configmap.reloader.stakater.com/reload" (2)
k8s-gateway-config
string
configmap.config.data.Corefile (1)
.:1053 { errors log health { lameduck 5s } ready k8s_gateway ${SECRET_PUBLIC_DOMAIN} ${SECRET_PRIVATE_DOMAIN} ${SECRET_EMAIL_DOMAIN} { apex k8s-gateway.networking resources Ingress Service ttl 300 } prometheus 0.0.0.0:9153 loop reload loadbalance }
string
configmap.config.enabled (1)
true
boolean
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
k8s-gateway
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (1)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
global.nameOverride (1)
k8s-gateway
string
resources.limits.memory (1)
80M
string
resources.requests.cpu (1)
20m
string
resources.requests.memory (1)
80M
string
securityContext.capabilities.add[] (1)
- NET_ADMIN
- NET_BIND_SERVICE
string
securityContext.privileged (1)
true
boolean