merged

apps/pihole-deployment.yaml

@@ -1,227 +0,0 @@
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: pihole-password
-  namespace: live-env 
-type: Opaque
-data:
-  password: YWRtaW4yMDIw
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app: pihole
-  name: pihole
-spec:
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app: pihole
-  strategy:
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 1
-    type: RollingUpdate
-  template:
-    metadata:
-      annotations:
-      labels:
-        app: pihole
-    spec:
-      containers:
-      - env:
-        - name: TZ
-          value: Europe/Berlin
-        - name: WEB_PORT
-          value: "80"
-        - name: VIRTUAL_HOST
-          value: pihole.lan
-        - name: WEBPASSWORD
-          valueFrom:
-            secretKeyRef:
-              key: password
-              name: pihole-password
-        - name: DNS1
-          value: 208.67.222.222
-        - name: DNS2
-          value: 208.67.220.220
-        image: pihole/pihole:latest
-        imagePullPolicy: Always
-        livenessProbe:
-          failureThreshold: 10
-          httpGet:
-            path: /admin.index.php
-            port: http
-            scheme: HTTP
-          initialDelaySeconds: 60
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 5
-        name: pihole
-        ports:
-        - containerPort: 80
-          name: http
-          protocol: TCP
-        - containerPort: 53
-          name: dns
-          protocol: TCP
-        - containerPort: 53
-          name: dns-udp
-          protocol: UDP
-        - containerPort: 443
-          name: https
-          protocol: TCP
-        - containerPort: 67
-          name: client-udp
-          protocol: UDP
-        readinessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /admin.index.php
-            port: http
-            scheme: HTTP
-          initialDelaySeconds: 60
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 5
-        resources: {}
-        #  limits:
-        #    cpu: 100m
-        #    memory: 256Mi
-        #  requests:
-        #    cpu: 50m
-        #    memory: 100Mi
-        securityContext:
-          privileged: false
-        terminationMessagePath: /dev/termination-log
-        terminationMessagePolicy: File
-        volumeMounts:
-        - mountPath: /etc/pihole
-          name: config
-        - mountPath: /etc/dnsmasq.d/02-custom.conf
-          name: custom-dnsmasq
-          subPath: 02-custom.conf
-        - mountPath: /etc/addn-hosts
-          name: custom-dnsmasq
-          subPath: addn-hosts
-      dnsConfig:
-        nameservers:
-        - 208.67.222.222 
-        - 208.67.220.220
-      dnsPolicy: None
-      restartPolicy: Always
-      schedulerName: default-scheduler
-      securityContext: {}
-      terminationGracePeriodSeconds: 30
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: pihole-data
-      - configMap:
-          defaultMode: 420
-          name: pihole-custom-dnsmasq
-        name: custom-dnsmasq
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: pihole 
-spec:
-  rules:
-  - host: pihole.lan
-    http:
-        paths:
-        - path: /
-          pathType: ImplementationSpecific
-          backend:
-            service:
-              name: pihole-tcp
-              port: 
-                name: http
-          
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pihole-data 
-  annotations:
-    volume.beta.kubernetes.io/storage-class: "nfs-ssd"
-spec:
-    #storageClassName: csi-s3-slow
-  storageClassName: nfs-ssd 
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
----
-apiVersion: v1
-data:
-  02-custom.conf: |
-    address=/chaos/192.168.10.1
-kind: ConfigMap
-metadata:
-  name: pihole-custom-dnsmasq
----
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    kube-router.io/service.scheduler: sh
-    metallb.universe.tf/address-pool: default
-    metallb.universe.tf/allow-shared-ip: pihole-svc
-  labels:
-    app: pihole
-  name: pihole-tcp
-  namespace: live-env 
-spec:
-  type: LoadBalancer
-  loadBalancerIP: 172.23.255.253
-  externalTrafficPolicy: Cluster
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: 80
-  - name: https
-    port: 443
-    protocol: TCP
-    targetPort: 80
-  - name: dns
-    port: 53
-    protocol: TCP
-    targetPort: 53
-  selector:
-    app: pihole
-  sessionAffinity: None
----
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    kube-router.io/service.scheduler: sh
-    metallb.universe.tf/address-pool: default
-    metallb.universe.tf/allow-shared-ip: pihole-svc
-  labels:
-    app: pihole
-  name: pihole-udp
-  namespace: live-env 
-spec:
-  type: LoadBalancer
-  loadBalancerIP: 172.23.255.253
-  externalTrafficPolicy: Cluster
-  ports:
-  - name: dns-udp
-    port: 53
-    protocol: UDP
-    targetPort: 53
-  - name: client-udp
-    port: 67
-    protocol: UDP
-    targetPort: 67
-  selector:
-    app: pihole
-  sessionAffinity: None