Deployment of kuard demo successful in large parts.
This commit is contained in:
parent
a420e03ef3
commit
35f63edb42
|
|
@ -11,6 +11,7 @@ This folder holds all the services required for my private infrastructure. Follo
|
||||||
```yaml
|
```yaml
|
||||||
k create ns flux
|
k create ns flux
|
||||||
k create ns cert-manager
|
k create ns cert-manager
|
||||||
|
k create ns nginx-ingress
|
||||||
k create ns infrapuzzle
|
k create ns infrapuzzle
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
@ -33,7 +34,7 @@ $ helm upgrade -i helm-operator fluxcd/helm-operator \
|
||||||
Apply with helm-operator:
|
Apply with helm-operator:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
$ kubectl apply -f infrapuzzle/ingress.yaml -n flux
|
$ kubectl apply -f nginx-ingress/ingress.yaml
|
||||||
```
|
```
|
||||||
|
|
||||||
## [cert-manager](https://cert-manager.io/docs/tutorials/acme/ingress/)
|
## [cert-manager](https://cert-manager.io/docs/tutorials/acme/ingress/)
|
||||||
|
|
@ -42,5 +43,7 @@ Apply with helm-operator:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
$ kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/master/deploy/manifests/00-crds.yaml
|
$ kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/master/deploy/manifests/00-crds.yaml
|
||||||
$ kubectl apply -f infrapuzzle/cert-manager.yaml -n flux
|
$ kubectl apply -f cert-manager/cert-manager.yaml
|
||||||
|
$ kubectl apply -f cert-manager/staging-issuer.yaml
|
||||||
|
$ kubectl apply -f cert-manager/production-issuer.yaml
|
||||||
```
|
```
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,27 @@
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: nginx
|
||||||
|
name: nginx
|
||||||
|
namespace: blub
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: nginx
|
||||||
|
strategy: {}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: nginx
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- image: nginx
|
||||||
|
name: nginx
|
||||||
|
resources: {}
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
status: {}
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
apiVersion: networking.k8s.io/v1beta1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: nginx
|
||||||
|
namespace: blub
|
||||||
|
annotations:
|
||||||
|
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||||
|
spec:
|
||||||
|
rules:
|
||||||
|
- host: blub.haumdaucher.de
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
backend:
|
||||||
|
serviceName: nginx
|
||||||
|
servicePort: 80
|
||||||
|
|
@ -0,0 +1,20 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: "2020-04-05T08:37:56Z"
|
||||||
|
labels:
|
||||||
|
app: nginx
|
||||||
|
name: nginx
|
||||||
|
namespace: blub
|
||||||
|
spec:
|
||||||
|
clusterIP: 10.233.34.90
|
||||||
|
ports:
|
||||||
|
- port: 80
|
||||||
|
protocol: TCP
|
||||||
|
targetPort: 80
|
||||||
|
selector:
|
||||||
|
app: nginx
|
||||||
|
sessionAffinity: None
|
||||||
|
type: ClusterIP
|
||||||
|
status:
|
||||||
|
loadBalancer: {}
|
||||||
|
|
@ -9,9 +9,9 @@ metadata:
|
||||||
|
|
||||||
spec:
|
spec:
|
||||||
tls:
|
tls:
|
||||||
- hosts:
|
- hosts:
|
||||||
- kuard.haumdaucher.de
|
- "kuard.haumdaucher.de"
|
||||||
secretName: kuard-haumdaucher
|
secretName: kuard-haumdaucher
|
||||||
rules:
|
rules:
|
||||||
- host: kuard.haumdaucher.de
|
- host: kuard.haumdaucher.de
|
||||||
http:
|
http:
|
||||||
|
|
|
||||||
|
|
@ -5,14 +5,16 @@ metadata:
|
||||||
namespace: flux
|
namespace: flux
|
||||||
spec:
|
spec:
|
||||||
releaseName: nginx-ingress
|
releaseName: nginx-ingress
|
||||||
targetNamespace: infrapuzzle
|
targetNamespace: nginx-ingress
|
||||||
chart:
|
chart:
|
||||||
repository: https://kubernetes-charts.storage.googleapis.com
|
repository: https://kubernetes-charts.storage.googleapis.com
|
||||||
version: 1.35.0
|
version: 1.35.0
|
||||||
name: nginx-ingress
|
name: nginx-ingress
|
||||||
values:
|
values:
|
||||||
controller:
|
controller:
|
||||||
#hostNetwork: true
|
hostNetwork: true
|
||||||
kind: DaemonSet
|
kind: DaemonSet
|
||||||
daemonset:
|
daemonset:
|
||||||
useHostPort: true
|
useHostPort: true
|
||||||
|
dnsPolicy: ClusterFirstWithHostNet
|
||||||
|
reportNodeInternalIp: true
|
||||||
Loading…
Reference in New Issue