authのdeploymentを作成

piny940 · Oct 23, 2024 · ad95dd3 · ad95dd3
1 parent 7b96a86
commit ad95dd3
Show file tree

Hide file tree

Showing 11 changed files with 186 additions and 0 deletions.
diff --git a/kubernetes/apps/auth/base/deployment.yaml b/kubernetes/apps/auth/base/deployment.yaml
@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: auth
+  labels:
+    app: auth
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: auth
+  template:
+    metadata:
+      labels:
+        app: auth
+    spec:
+      serviceAccountName: auth
+      containers:
+        - name: app
+          image: auth
+          ports:
+            - containerPort: 8080
+          envFrom:
+            - configMapRef:
+                name: auth-conf
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: 8080
+            failureThreshold: 3
+            initialDelaySeconds: 15
+            periodSeconds: 20
+          readinessProbe:
+            httpGet:
+              path: /healthz
+              port: 8080
+            failureThreshold: 3
+            initialDelaySeconds: 5
+            periodSeconds: 5
diff --git a/kubernetes/apps/auth/base/image-repository.yaml b/kubernetes/apps/auth/base/image-repository.yaml
@@ -0,0 +1,7 @@
+apiVersion: image.toolkit.fluxcd.io/v1beta2
+kind: ImageRepository
+metadata:
+  name: auth
+spec:
+  image: ghcr.io/piny940/auth
+  interval: 3m
diff --git a/kubernetes/apps/auth/base/kustomization.yaml b/kubernetes/apps/auth/base/kustomization.yaml
@@ -0,0 +1,15 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - deployment.yaml
+  - image-repository.yaml
+  - service-account.yaml
+  - service.yaml
+configMapGenerator:
+  - name: auth-conf
+    literals:
+      - APP_DEBUG=false
+      - APP_PORT=8080
+      - ENV=
+configurations:
+  - kustomizeconfig.yaml
diff --git a/kubernetes/apps/auth/base/kustomizeconfig.yaml b/kubernetes/apps/auth/base/kustomizeconfig.yaml
@@ -0,0 +1,5 @@
+nameReference:
+  - kind: ImageRepository
+    fieldSpecs:
+      - kind: ImagePolicy
+        path: spec/imageRepositoryRef/name
diff --git a/kubernetes/apps/auth/base/service.yaml b/kubernetes/apps/auth/base/service.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: auth
+spec:
+  selector:
+    app: auth
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8080
+      targetPort: 8080
+  type: ClusterIP
diff --git a/kubernetes/apps/auth/production/image-policy.yaml b/kubernetes/apps/auth/production/image-policy.yaml
@@ -0,0 +1,11 @@
+apiVersion: image.toolkit.fluxcd.io/v1beta2
+kind: ImagePolicy
+metadata:
+  name: auth
+  namespace: default
+spec:
+  imageRepositoryRef:
+    name: auth
+  policy:
+    semver:
+      range: 1.0.x
diff --git a/kubernetes/apps/auth/production/ingress.yaml b/kubernetes/apps/auth/production/ingress.yaml
@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: auth
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - auth.piny940.com
+      secretName: cluster-tls
+  rules:
+    - host: auth.piny940.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: auth
+                port:
+                  number: 8080
diff --git a/kubernetes/apps/auth/production/kustomization.yaml b/kubernetes/apps/auth/production/kustomization.yaml
@@ -0,0 +1,20 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: default
+labels:
+  - includeSelectors: true
+    pairs:
+      env: production
+resources:
+  - ../base
+  - image-policy.yaml
+  - ingress.yaml
+images:
+  - name: auth
+    newName: ghcr.io/piny940/auth-backend # {"$imagepolicy": "default:auth:name"}
+    newTag: 1.0.2 # {"$imagepolicy": "default:auth:tag"}
+configMapGenerator:
+  - name: auth-conf
+    behavior: merge
+    literals:
+      - ENV=production
diff --git a/kubernetes/apps/auth/staging/image-policy.yaml b/kubernetes/apps/auth/staging/image-policy.yaml
@@ -0,0 +1,13 @@
+apiVersion: image.toolkit.fluxcd.io/v1beta2
+kind: ImagePolicy
+metadata:
+  name: auth
+spec:
+  imageRepositoryRef:
+    name: auth
+  filterTags:
+    pattern: "^stg-[a-z0-9]+-(?P<seq>[0-9]+)$"
+    extract: "$seq"
+  policy:
+    numerical:
+      order: asc
diff --git a/kubernetes/apps/auth/staging/ingress.yaml b/kubernetes/apps/auth/staging/ingress.yaml
@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: auth
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - stg-auth.piny940.com
+      secretName: cluster-tls
+  rules:
+    - host: stg-auth.piny940.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: auth
+                port:
+                  number: 8080
diff --git a/kubernetes/apps/auth/staging/kustomization.yaml b/kubernetes/apps/auth/staging/kustomization.yaml
@@ -0,0 +1,21 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: default
+labels:
+  - includeSelectors: true
+    pairs:
+      env: staging
+namePrefix: stg-
+resources:
+  - ../base
+  - image-policy.yaml
+  - ingress.yaml
+images:
+  - name: auth
+    newName: ghcr.io/piny940/auth-backend # {"$imagepolicy": "default:stg-auth:name"}
+    newTag: stg-8aace3efa57fcef01acce45cc4f6f695dec3d012-10 # {"$imagepolicy": "default:stg-auth:tag"}
+configMapGenerator:
+  - name: auth-conf
+    behavior: merge
+    literals:
+      - ENV=staging