Udo Waechter
4b2f5d8c9f
All checks were successful
continuous-integration/drone/push Build is passing
134 lines
3.7 KiB
YAML
134 lines
3.7 KiB
YAML
# ========================================================================
|
|
# Secret: CodeTogether License Values
|
|
# ========================================================================
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: codetogether-license
|
|
namespace: default
|
|
type: Opaque
|
|
stringData:
|
|
# Configure as needed for your deployment, should match your SSL certificate
|
|
CT_SERVER_URL: "https://cd.lan"
|
|
CT_TRUST_ALL_CERTS: "true"
|
|
# Provided by your Genuitec Sales Representative
|
|
# *values must match exactly
|
|
CT_LICENSEE: "Werkstatt"
|
|
CT_MAXCONNECTIONS: "0"
|
|
CT_EXPIRATION: "2022/10/01"
|
|
CT_SIGNATURE: "xXM4cwzG...619bef4"
|
|
---
|
|
# ========================================================================
|
|
# Secret: SSL Key and Certificate for SSL used by Ingress
|
|
# ========================================================================
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: codetogether-sslsecret
|
|
namespace: default
|
|
type: kubernetes.io/tls
|
|
data:
|
|
# value from "cat ssl.crt | base64 -w 0"
|
|
tls.crt: "LS0tLS1CRUdJTi...UZJQ0FURS0tLS0tDQo="
|
|
# value from "cat ssl.key | base64 -w 0"
|
|
tls.key: "LS0tLS1CRUdJTi...EUgS0VZLS0tLS0NCg=="
|
|
---
|
|
# ========================================================================
|
|
# Ingress: Expose the HTTPS service to the network
|
|
# ========================================================================
|
|
apiVersion: networking.k8s.io/v1beta1
|
|
kind: Ingress
|
|
metadata:
|
|
name: codetogether
|
|
spec:
|
|
tls:
|
|
- hosts:
|
|
- SERVERFQDN
|
|
secretName: codetogether-sslsecret
|
|
rules:
|
|
- host: SERVERFQDN
|
|
http:
|
|
paths:
|
|
- path: /
|
|
backend:
|
|
serviceName: codetogether
|
|
servicePort: 80
|
|
---
|
|
# ========================================================================
|
|
# Service: Map the HTTP port from the container
|
|
# ========================================================================
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: codetogether
|
|
labels:
|
|
run: codetogether
|
|
spec:
|
|
ports:
|
|
- port: 80
|
|
name: http
|
|
targetPort: 1080
|
|
protocol: TCP
|
|
selector:
|
|
run: codetogether
|
|
---
|
|
# ========================================================================
|
|
# Deployment: Configure the Container Deployment
|
|
# ========================================================================
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: codetogether
|
|
namespace: default
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
run: codetogether
|
|
replicas: 1
|
|
template:
|
|
metadata:
|
|
labels:
|
|
run: codetogether
|
|
spec:
|
|
containers:
|
|
- name: codetogether
|
|
image: hub.edge.codetogether.com/latest/codetogether:latest
|
|
imagePullPolicy: Always
|
|
ports:
|
|
- containerPort: 1080
|
|
env:
|
|
- name: CT_LOCATOR
|
|
value: "none"
|
|
- name: CT_SERVER_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: codetogether-license
|
|
key: CT_SERVER_URL
|
|
- name: CT_TRUST_ALL_CERTS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: codetogether-license
|
|
key: CT_TRUST_ALL_CERTS
|
|
- name: CT_LICENSEE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: codetogether-license
|
|
key: CT_LICENSEE
|
|
- name: CT_MAXCONNECTIONS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: codetogether-license
|
|
key: CT_MAXCONNECTIONS
|
|
- name: CT_EXPIRATION
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: codetogether-license
|
|
key: CT_EXPIRATION
|
|
- name: CT_SIGNATURE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: codetogether-license
|
|
key: CT_SIGNATURE
|
|
imagePullSecrets:
|
|
- name: ctcreds
|