add annotation to configure ALB ingress

citizensadvice · Oct 11, 2024 · dc64a24 · dc64a24
1 parent adb6bb3
commit dc64a24
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cdk/app/chart.py b/cdk/app/chart.py
@@ -280,6 +280,12 @@ def _expose_v0_api(self, host: str, app_service: Service):
         ingress = Ingress(self, "LocalOfficeSearchApiV0Ingress", class_name="alb")
         ingress.add_host_rule(host, "/api/v0/", IngressBackend.from_service(app_service))
 
+        ingress.metadata.add_annotation("alb.ingress.kubernetes.io/scheme", "internet-facing")
+        ingress.metadata.add_annotation("alb.ingress.kubernetes.io/healthcheck-path", "/status")
+        ingress.metadata.add_annotation("alb.ingress.kubernetes.io/actions.ssl-redirect", json.dumps({"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}))
+        ingress.metadata.add_annotation("alb.ingress.kubernetes.io/ssl-policy", "ELBSecurityPolicy-TLS-1-2-2017-01")
+        ingress.metadata.add_annotation("alb.ingress.kubernetes.io/tags", f"Environment={self._labels['env']},Product=corporate_site,Component=local_office_search_api,TechnicalOwner=contentplatform@citizensadvice.org.uk")
+
     def _configure_autoscaler(self, deployment: Deployment):
         HorizontalPodAutoscaler(
             self,