diff --git a/stages/delivery/kustomization.yaml b/stages/delivery/kustomization.yaml index b48eabc..b6ee7ad 100644 --- a/stages/delivery/kustomization.yaml +++ b/stages/delivery/kustomization.yaml @@ -5,3 +5,7 @@ labels: - includeSelectors: true pairs: app.kubernetes.io/managed-by: Kustomize + + +resources: + - ./deployment.yaml \ No newline at end of file diff --git a/stages/identity/.envs/.vaultwarden-admin-token.template b/stages/identity/.envs/.vaultwarden-admin-token.template new file mode 100644 index 0000000..f23a4f2 --- /dev/null +++ b/stages/identity/.envs/.vaultwarden-admin-token.template @@ -0,0 +1 @@ +admin-token=16a6b142-bb39-4708-9de1-14157fee29d3 \ No newline at end of file diff --git a/stages/identity/kustomization.yaml b/stages/identity/kustomization.yaml new file mode 100644 index 0000000..24a9e9c --- /dev/null +++ b/stages/identity/kustomization.yaml @@ -0,0 +1,13 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +metadata: + name: identity + +secretGenerator: + - name: vaultwarden-secret + namespace: vaultwarden + envs: + - .envs/.vaultwarden-admin-token + +resources: + - ./resources/vaultwarden/ \ No newline at end of file diff --git a/stages/identity/resources/vaultwarden/deployment.yaml b/stages/identity/resources/vaultwarden/deployment.yaml new file mode 100644 index 0000000..4120974 --- /dev/null +++ b/stages/identity/resources/vaultwarden/deployment.yaml @@ -0,0 +1,36 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: vaultwarden +spec: + selector: + matchLabels: + app: vaultwarden + template: + metadata: + labels: + app: vaultwarden + spec: + volumes: + - name: vaultwarden-pvc + persistentVolumeClaim: + claimName: vaultwarden-pvc + containers: + - name: vaultwarden + image: vaultwarden/server + resources: + limits: + memory: 256Mi + cpu: 500m + ports: + - name: vw-http + containerPort: 80 + volumeMounts: + - mountPath: /data + name: vaultwarden-pvc + env: + - name: ADMIN_TOKEN + valueFrom: + secretKeyRef: + key: admin-token + name: vaultwarden-secret \ No newline at end of file diff --git a/stages/identity/resources/vaultwarden/ingress.yaml b/stages/identity/resources/vaultwarden/ingress.yaml new file mode 100644 index 0000000..6838a1b --- /dev/null +++ b/stages/identity/resources/vaultwarden/ingress.yaml @@ -0,0 +1,18 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: vaultwarden-ingress + labels: + name: vaultwarden-ingress +spec: + rules: + - host: pass.kropcloud.net + http: + paths: + - pathType: Prefix + path: / + backend: + service: + name: vaultwarden-svc + port: + number: 80 diff --git a/stages/identity/resources/vaultwarden/kustomization.yaml b/stages/identity/resources/vaultwarden/kustomization.yaml new file mode 100644 index 0000000..1ed32d1 --- /dev/null +++ b/stages/identity/resources/vaultwarden/kustomization.yaml @@ -0,0 +1,20 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: vaultwarden + +labels: +- pairs: + app.kubernetes.io/managed-by: Kustomize + app.kubernetes.io/part-of: vaultwarden + app.kubernetes.io/version: 1.33.2 + +resources: + - ./deployment.yaml + - ./pvc.yaml + - ./service.yaml + - ./ingress.yaml + - ./namespace.yaml + +images: + - name: vaultwarden/server + newTag: 1.33.2 \ No newline at end of file diff --git a/stages/identity/resources/vaultwarden/namespace.yaml b/stages/identity/resources/vaultwarden/namespace.yaml new file mode 100644 index 0000000..deea145 --- /dev/null +++ b/stages/identity/resources/vaultwarden/namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: vaultwarden \ No newline at end of file diff --git a/stages/identity/resources/vaultwarden/pvc.yaml b/stages/identity/resources/vaultwarden/pvc.yaml new file mode 100644 index 0000000..dd84576 --- /dev/null +++ b/stages/identity/resources/vaultwarden/pvc.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: vaultwarden-pvc +spec: + resources: + requests: + storage: 10Gi + volumeMode: Filesystem + accessModes: + - ReadWriteOnce diff --git a/stages/identity/resources/vaultwarden/service.yaml b/stages/identity/resources/vaultwarden/service.yaml new file mode 100644 index 0000000..646819e --- /dev/null +++ b/stages/identity/resources/vaultwarden/service.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: Service +metadata: + name: vaultwarden-svc +spec: + selector: + app: vaultwarden + ports: + - name: vaultwarden-http-svc + port: 80 + targetPort: vw-http