Create a proxy using Nginx Controller in kubernetes

Use Case: I needed to create a proxy which redirects my traffic to my internal service in eks mainly to expose it publicly and i already had a nginx controller installed within my kubernetes cluster. It also supports all of the nginx features like ip whitelisting, lua scripts etc

apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

annotations:

kubernetes.io/ingress.class: nginx

kubernetes.io/tls-acme: "true"

meta.helm.sh/release-name: "nginx-proxy"

meta.helm.sh/release-namespace: default

nginx.ingress.kubernetes.io/cors-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

nginx.ingress.kubernetes.io/cors-allow-origin: '*'

nginx.ingress.kubernetes.io/enable-cors: "true"

nginx.ingress.kubernetes.io/server-snippet: |

##### Allow Traffic from specific Ips #####

#allow x.x.x.x;

#allow x.x.x.x;

#deny all;

##### redirect From http to https, comment if want http and https both #####

if ( $server_port = 80 ) {

return 301 https://$host$request_uri;

}

location ~ "^/(.*)" {

proxy_pass https://192.168.0.1; # Change the Proxy Upstream here URL

# proxy_set_header Host "api.example.com"; #if a custom Host header needs to be set update here

proxy_ssl_verify off;

proxy_ssl_verify_depth 0;

proxy_intercept_errors on;

default_type text/plain;

##### Below section helps you to override the response 200 for all requests and forward the original status in a Header #####

# access_by_lua_block {

# ngx.header['X-forwarded-status'] = ''

# }

# header_filter_by_lua_block {

# local orig_status = ngx.status

# if orig_status == 429 then
# ngx.header['x-forwarded-status'] = orig_status
# else
# ngx.status = 200
# ngx.header['x-forwarded-status'] = orig_status
# end

# }

}

labels:

app.kubernetes.io/instance: nginx-proxy

app.kubernetes.io/name: nginx-proxy

name: nginx-proxy

namespace: default

spec:

rules:

- host: example.com

tls:

- hosts:

- example.com

secretName: nginx-proxy-com