new kube

Author: SoundGoof

enroll-user/00-namespace.yml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: enroll-user

enroll-user/enroll-user-certificate.yml

@@ -0,0 +1,19 @@
+apiVersion: certmanager.k8s.io/v1alpha1
+kind: Certificate
+metadata:
+  name: enroll-user
+  namespace: enroll-user
+spec:
+  secretName: enroll-user-ingress-tls
+  issuerRef:
+    name: letsencrypt
+    kind: ClusterIssuer
+  commonName: enroll.tech.dreamhack.se
+  dnsNames:
+  - enroll.tech.dreamhack.se
+  acme:
+    config:
+    - http01:
+        ingressClass: nginx
+      domains:
+      - enroll.tech.dreamhack.se

enroll-user/enroll-user-ingress.yml

@@ -0,0 +1,18 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: enroll-user
+  namespace: enroll-user
+spec:
+  tls:
+  - secretName: enroll-user-ingress-tls
+    hosts:
+    - enroll.tech.dreamhack.se
+  rules:
+  - host: enroll.tech.dreamhack.se
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: enroll-user
+          servicePort: 8080

enroll-user/enroll-user-svc.yml

@@ -0,0 +1,17 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: enroll-user
+  namespace: enroll-user
+  labels:
+    k8s-app: enroll-user
+spec:
+  ports:
+  - port: 8080
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    k8s-app: enroll-user
+  type: ClusterIP
+

enroll-user/enroll-user.yml

@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: Deployment 
+metadata:
+    labels:
+        k8s-app: enroll-user
+    name: enroll-user
+    namespace: enroll-user
+spec:
+    replicas: 1
+    selector:
+      matchLabels:
+        k8s-app: enroll-user
+    template:
+        metadata:
+            labels:
+                k8s-app: enroll-user
+        spec:
+            containers:
+            - image: quay.io/dhtech/enroll-user
+              imagePullPolicy: Always
+              name: enroll-user
+            - image: quay.io/dhtech/dhauth
+              imagePullPolicy: Always
+              name: dhauth
+              env:
+              - name: APACHE_PROXY_PORT
+                value: "8080" 
+              - name: LDAP_GROUP
+                value: "cn=tech-dhs18,ou=groups,dc=tech,dc=dreamhack,dc=se"
+            restartPolicy: Always
+            volumes:
+                - name: enroll-user-config
+                  configMap:
+                    name: enroll-user-config