imfreedom/k8s-cluster

e9ac2e1d1613
Parents 066d5bdd0b2e
Children 404648d4f655
update the keep manifests to include hgweb
--- a/50-keep.imfreedom.org.yaml Mon Nov 25 21:05:29 2019 -0600
+++ b/50-keep.imfreedom.org.yaml Wed Dec 18 00:06:15 2019 -0600
@@ -1,3 +1,55 @@
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ namespace: imfreedom
+ name: keep
+ annotations:
+ cert-manager.io/issuer: letsencrypt
+ nginx.ingress.kubernetes.io/configuration-snippet: |
+ more_set_headers "X-Frame-Options: SAMEORIGIN";
+ labels:
+ app: keep
+spec:
+ rules:
+ - host: keep.imfreedom.org
+ http:
+ paths:
+ - backend:
+ serviceName: keep-http
+ servicePort: 8080
+ path: /
+ tls:
+ - hosts:
+ - keep.imfreedom.org
+ secretName: keep-tls
+---
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
+metadata:
+ namespace: imfreedom
+ name: keep
+spec:
+ secretName: keep-tls
+ issuerRef:
+ name: letsencrypt
+ commonName: keep.imfreedom.org
+ dnsNames:
+ - keep.imfreedom.org
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: imfreedom
+ labels:
+ app: hgkeeper
+ name: keep-http
+spec:
+ ports:
+ - port: 8080
+ protocol: TCP
+ selector:
+ app: hgkeeper
---
apiVersion: v1
kind: Service
@@ -43,6 +95,8 @@
app: ingress
role: controller
ports:
+ - port: 8080
+ protocol: TCP
- port: 22222
protocol: TCP
---
@@ -68,6 +122,7 @@
initContainers:
- name: setup
image: docker.io/rwgrim/hgkeeper:latest
+ imagePullPolicy: Always
command: ["sh", "-c", "test -d /repos/hgkeeper || hgkeeper setup"]
env:
- name: HGK_ADMIN_USERNAME
@@ -97,6 +152,7 @@
- name: HGK_SSH_HOST_KEYS_PATH
value: /host-keys
ports:
+ - containerPort: 8080
- containerPort: 22222
resources:
limits: