1
0
Fork 0

q3k: random stuff from local git checkout

Change-Id: I497a3ca080ac2124d05f49bb8bee5766254134b4
master
q3k 2021-08-29 18:21:39 +02:00
parent e3ea97b76b
commit 39942ccc50
2 changed files with 121 additions and 0 deletions

61
personal/q3k/ppsa.jsonnet Normal file
View File

@ -0,0 +1,61 @@
local kube = import "../../kube/kube.libsonnet";
{
local top = self,
ns: kube.Namespace("personal-q3k"),
deploy: top.ns.Contain(kube.Deployment("ppsa-jsonapi")) {
spec+: {
template+: {
spec+: {
containers_: {
default: kube.Container("default") {
image: "registry.k0.hswaw.net/q3k/ppsa-jsonapi:1615508489",
ports_: {
http: { containerPort: 8080 },
},
resources: {
requests: {
cpu: "10m",
memory: "64M",
},
limits: {
cpu: "100m",
memory: "256M",
},
},
},
},
},
},
},
},
svc: top.ns.Contain(kube.Service("ppsa-jsonapi")) {
target_pod:: top.deploy.spec.template,
},
ingress: top.ns.Contain(kube.Ingress("ppsa-jsonapi")) {
metadata+: {
annotations+: {
"kubernetes.io/tls-acme": "true",
"certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
"nginx.ingress.kubernetes.io/proxy-body-size": "0",
},
},
spec+: {
tls: [
{ hosts: [ "ppsa.app.q3k.org"], secretName: "ppsa-jsonapi-tls", },
],
rules: [
{
host: "ppsa.app.q3k.org",
http: {
paths: [
{ path: "/", backend: top.svc.name_port },
],
},
},
],
},
},
}

60
personal/q3k/rc3.jsonnet Normal file
View File

@ -0,0 +1,60 @@
local kube = import "../../kube/kube.libsonnet";
{
local rc3 = self,
deploy: kube.Deployment("rc3-data") {
metadata+: {
namespace: "personal-q3k",
},
spec+: {
template+: {
spec+: {
containers_: {
default: kube.Container("default") {
image: "registry.k0.hswaw.net/q3k/rc3-data:1610640062",
ports_: {
http: { containerPort: 8080 },
},
},
},
securityContext: {
// nginx:nginx
runAsUser: 101,
runAsGroup: 101,
},
},
},
},
},
svc: kube.Service("rc3-data") {
metadata+: {
namespace: "personal-q3k",
},
target_pod:: rc3.deploy.spec.template,
},
ingress: kube.Ingress("rc3-data") {
metadata+: {
namespace: "personal-q3k",
annotations+: {
"kubernetes.io/tls-acme": "true",
"certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
"nginx.ingress.kubernetes.io/proxy-body-size": "0",
},
},
spec+: {
tls: [
{ hosts: [ "rc3-data.q3k.org"], secretName: "rc3-data-tls", },
],
rules: [
{
host: "rc3-data.q3k.org",
http: {
paths: [
{ path: "/", backend: rc3.svc.name_port },
],
},
},
],
},
},
}