apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-ui-proxy
  namespace: vault
data:
  default.conf: |
    server {
      listen 8200;
      location / {
        proxy_pass http://vault-ui.vault.svc.cluster.local:8200;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto http;
      }
    }
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vault-ui-proxy
  namespace: vault
spec:
  replicas: 1
  selector:
    matchLabels:
      app: vault-ui-proxy
  template:
    metadata:
      labels:
        app: vault-ui-proxy
    spec:
      nodeName: prod102
      containers:
        - name: proxy
          image: nginx:latest
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8200
              hostPort: 8200
          volumeMounts:
            - name: conf
              mountPath: /etc/nginx/conf.d
      volumes:
        - name: conf
          configMap:
            name: vault-ui-proxy