all repos — infra @ 0c2075ae8c175b6c20f4f406027aa1b54b651574

infrastructure manifests and setup notes

apps/legit/legit.yaml (view raw)

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 
apiVersion: apps/v1
kind: Deployment
metadata:
  name: legit
  labels:
    app: legit
spec:
  selector:
    matchLabels:
      app: legit
  replicas: 1
  strategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: legit
    spec:
      nodeSelector:
        kubernetes.io/hostname: denna
      containers:
        - name: legit
          image: sini:5000/legit:latest
          imagePullPolicy: Always
          ports:
            - containerPort: 5555
          args:
            - -config
            - /config.yaml
          volumeMounts:
            - name: repos
              mountPath: /var/www/git
              readOnly: true
      volumes:
        - name: repos
          hostPath:
            path: /home/git
---
apiVersion: v1
kind: Service
metadata:
  name: legit
spec:
  selector:
    app: legit
  ports:
    - name: legit-http
      port: 5555 
      targetPort: 5555
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: git.icyphox.sh
  namespace: default
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
spec:
  ingressClassName: nginx
  tls:
    - hosts:
      - git.icyphox.sh
      secretName: git-icyphox-sh-tls
  rules:
  - host: git.icyphox.sh
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: legit
            port:
              number: 5555