k8s manifests with vars set up for fluxcd
spindle baseline
+151
-10
certificate.yaml
knot/certificate.yaml
certificate.yaml
knot/certificate.yaml
ingressroute.yaml
knot/ingressroute.yaml
ingressroute.yaml
knot/ingressroute.yaml
+9
knot/kustomization.yaml
+9
knot/kustomization.yaml
+2
-8
kustomization.yaml
+2
-8
kustomization.yaml
pvc.yaml
knot/pvc.yaml
pvc.yaml
knot/pvc.yaml
+2
-2
secrets.yaml
knot/secrets.yaml
+2
-2
secrets.yaml
knot/secrets.yaml
···
1
1
apiVersion: external-secrets.io/v1
2
2
kind: ExternalSecret
3
3
metadata:
4
-
name: tangled-secrets
4
+
name: tangled-knot-secrets
5
5
namespace: tangled
6
6
spec:
7
7
refreshInterval: "10m"
···
12
12
name: tangled-secrets
13
13
dataFrom:
14
14
- extract:
15
-
key: kv/k8s/tangled
15
+
key: kv/k8s/tangled/knot
service.yaml
knot/service.yaml
service.yaml
knot/service.yaml
+14
spindle/certificate.yaml
+14
spindle/certificate.yaml
···
1
+
apiVersion: cert-manager.io/v1
2
+
kind: Certificate
3
+
metadata:
4
+
name: spindle-cert
5
+
namespace: tangled
6
+
spec:
7
+
secretName: spindle-ssl
8
+
duration: 2160h
9
+
renewBefore: 360h
10
+
dnsNames:
11
+
- spindle.${domain}
12
+
issuerRef:
13
+
name: ${cert_issuer}
14
+
kind: ClusterIssuer
+16
spindle/ingressroute.yaml
+16
spindle/ingressroute.yaml
···
1
+
apiVersion: traefik.io/v1alpha1
2
+
kind: IngressRoute
3
+
metadata:
4
+
name: spindle
5
+
namespace: tangled
6
+
spec:
7
+
entryPoints:
8
+
- websecure
9
+
routes:
10
+
- match: Host(`spindle.${domain}`) && PathPrefix(`/`)
11
+
kind: Rule
12
+
services:
13
+
- name: spindle
14
+
port: 6555
15
+
tls:
16
+
secretName: spindle-ssl
+9
spindle/kustomization.yaml
+9
spindle/kustomization.yaml
+12
spindle/pvc.yaml
+12
spindle/pvc.yaml
+15
spindle/secrets.yaml
+15
spindle/secrets.yaml
···
1
+
apiVersion: external-secrets.io/v1
2
+
kind: ExternalSecret
3
+
metadata:
4
+
name: tangled-spindle-secrets
5
+
namespace: tangled
6
+
spec:
7
+
refreshInterval: "10m"
8
+
secretStoreRef:
9
+
name: vault
10
+
kind: ClusterSecretStore
11
+
target:
12
+
name: spindle-secrets
13
+
dataFrom:
14
+
- extract:
15
+
key: kv/k8s/tangled/spindle
+14
spindle/service.yaml
+14
spindle/service.yaml
+58
spindle/statefulset.yaml
+58
spindle/statefulset.yaml
···
1
+
apiVersion: apps/v1
2
+
kind: StatefulSet
3
+
metadata:
4
+
name: spindle
5
+
namespace: tangled
6
+
spec:
7
+
replicas: 1
8
+
serviceName: spindle
9
+
selector:
10
+
matchLabels:
11
+
app: spindle
12
+
template:
13
+
metadata:
14
+
labels:
15
+
app: spindle
16
+
spec:
17
+
imagePullSecrets:
18
+
- name: atcr-pull-secret
19
+
containers:
20
+
- name: spindle
21
+
image: atcr.io/tangled.org/spindle:latest
22
+
imagePullPolicy: Always
23
+
ports:
24
+
- name: http
25
+
containerPort: 6555
26
+
env:
27
+
- name: SPINDLE_SERVER_LISTEN_ADDR
28
+
value: "0.0.0.0:6555"
29
+
- name: SPINDLE_SERVER_HOSTNAME
30
+
value: spindle.${domain}
31
+
- name: SPINDLE_SERVER_DB_PATH
32
+
value: /data/spindle.db
33
+
- name: SPINDLE_PIPELINES_LOG_DIR
34
+
value: /data/logs
35
+
- name: DOCKER_HOST
36
+
value: tcp://localhost:2375
37
+
envFrom:
38
+
- secretRef:
39
+
name: spindle-secrets
40
+
volumeMounts:
41
+
- mountPath: /data
42
+
name: data
43
+
- name: dind
44
+
image: docker:dind
45
+
securityContext:
46
+
privileged: true
47
+
env:
48
+
- name: DOCKER_TLS_CERTDIR
49
+
value: ""
50
+
volumeMounts:
51
+
- mountPath: /var/lib/docker
52
+
name: docker-storage
53
+
volumes:
54
+
- name: data
55
+
persistentVolumeClaim:
56
+
claimName: spindle-data
57
+
- name: docker-storage
58
+
emptyDir: {}
statefulset.yaml
knot/statefulset.yaml
statefulset.yaml
knot/statefulset.yaml