k8s manifests with vars set up for fluxcd
tangled->knot naming
+33
-33
+3
-3
knot/certificate.yaml
+3
-3
knot/certificate.yaml
···
1
1
apiVersion: cert-manager.io/v1
2
2
kind: Certificate
3
3
metadata:
4
-
name: tangled-cert
5
-
namespace: tangled
4
+
name: knot-cert
5
+
namespace: knot
6
6
annotations:
7
7
cert-manager.io/cluster-issuer: letsencrypt-prod
8
8
spec:
9
-
secretName: tangled-ssl
9
+
secretName: knot-ssl
10
10
duration: 2160h
11
11
renewBefore: 360h
12
12
dnsNames:
+8
-8
knot/ingressroute.yaml
+8
-8
knot/ingressroute.yaml
···
1
1
apiVersion: traefik.io/v1alpha1
2
2
kind: IngressRoute
3
3
metadata:
4
-
name: tangled
5
-
namespace: tangled
4
+
name: knot
5
+
namespace: knot
6
6
spec:
7
7
entryPoints:
8
8
- websecure
···
10
10
- match: Host(`knot.${domain}`) && PathPrefix(`/`)
11
11
kind: Rule
12
12
services:
13
-
- name: tangled-http
13
+
- name: knot-http
14
14
port: 5555
15
15
tls:
16
-
secretName: tangled-ssl
16
+
secretName: knot-ssl
17
17
---
18
18
apiVersion: traefik.io/v1alpha1
19
19
kind: IngressRouteTCP
20
20
metadata:
21
-
name: tangled-ssh
22
-
namespace: tangled
21
+
name: knot-ssh
22
+
namespace: knot
23
23
spec:
24
24
entryPoints:
25
-
- tangled-ssh
25
+
- knot-ssh
26
26
routes:
27
27
- match: HostSNI(`*`)
28
28
services:
29
-
- name: tangled-ssh
29
+
- name: knot-ssh
30
30
port: 2223
+1
-1
knot/kustomization.yaml
+1
-1
knot/kustomization.yaml
+2
-2
knot/pvc.yaml
+2
-2
knot/pvc.yaml
+3
-3
knot/secrets.yaml
+3
-3
knot/secrets.yaml
···
1
1
apiVersion: external-secrets.io/v1
2
2
kind: ExternalSecret
3
3
metadata:
4
-
name: tangled-knot-secrets
5
-
namespace: tangled
4
+
name: knot-knot-secrets
5
+
namespace: knot
6
6
spec:
7
7
refreshInterval: "10m"
8
8
secretStoreRef:
9
9
name: vault
10
10
kind: ClusterSecretStore
11
11
target:
12
-
name: tangled-secrets
12
+
name: knot-secrets
13
13
dataFrom:
14
14
- extract:
15
15
key: kv/k8s/tangled/knot
+6
-6
knot/service.yaml
+6
-6
knot/service.yaml
···
1
1
apiVersion: v1
2
2
kind: Service
3
3
metadata:
4
-
name: tangled-http
5
-
namespace: tangled
4
+
name: knot-http
5
+
namespace: knot
6
6
spec:
7
7
selector:
8
-
app: tangled
8
+
app: knot
9
9
ports:
10
10
- name: http
11
11
protocol: TCP
···
16
16
apiVersion: v1
17
17
kind: Service
18
18
metadata:
19
-
name: tangled-ssh
20
-
namespace: tangled
19
+
name: knot-ssh
20
+
namespace: knot
21
21
spec:
22
22
selector:
23
-
app: tangled
23
+
app: knot
24
24
ports:
25
25
- name: ssh
26
26
protocol: TCP
+9
-9
knot/statefulset.yaml
+9
-9
knot/statefulset.yaml
···
1
1
apiVersion: apps/v1
2
2
kind: StatefulSet
3
3
metadata:
4
-
name: tangled
5
-
namespace: tangled
4
+
name: knot
5
+
namespace: knot
6
6
spec:
7
-
replicas: 1
8
-
serviceName: tangled
7
+
replicas: 0
8
+
serviceName: knot
9
9
selector:
10
10
matchLabels:
11
-
app: tangled
11
+
app: knot
12
12
template:
13
13
metadata:
14
14
labels:
15
-
app: tangled
15
+
app: knot
16
16
spec:
17
17
imagePullSecrets:
18
18
- name: gitea-pull-secret
···
35
35
- name: KNOT_SERVER_INTERNAL_LISTEN_ADDR
36
36
value: localhost:5444
37
37
- name: APPVIEW_ENDPOINT
38
-
value: https://tangled.org
38
+
value: https://knot.org
39
39
envFrom:
40
40
- secretRef:
41
-
name: tangled-secrets
41
+
name: knot-secrets
42
42
volumeMounts:
43
43
- mountPath: /etc/ssh/keys
44
44
name: data
···
59
59
volumes:
60
60
- name: data
61
61
persistentVolumeClaim:
62
-
claimName: tangled-data
62
+
claimName: knot-data