config.ts

@@ -48,3 +48,7 @@ export const gcloudConfig = {
  * Example: /Users/ggilmore/dev/go/src/github.com/sourcegraph/deploy-sourcegraph
  */
 export const deploySourcegraphRoot = config.require('deploySourcegraphRoot')
+
+export const certificate = config.require('certificate')
+export const key = config.require('key')
+export const htpassword = config.require('htpassword')

index.ts

@@ -4,7 +4,7 @@ import * as path from 'path'
 import * as k8s from '@pulumi/kubernetes'
 
 import { k8sProvider } from './cluster'
-import { deploySourcegraphRoot, gcloudConfig } from './config'
+import { certificate, deploySourcegraphRoot, gcloudConfig, htpassword, key } from './config'
 
 const clusterAdmin = new k8s.rbac.v1.ClusterRoleBinding(
     'cluster-admin-role-binding',
@@ -47,14 +47,47 @@ const storageClass = new k8s.storage.v1.StorageClass(
     { provider: k8sProvider }
 )
 
+const tls = new k8s.core.v1.Secret(
+    'sourcegraph-tls',
+    {
+        metadata: {
+            name: 'sourcegraph-tls',
+        },
+
+        data: {
+            'tls.crt': Buffer.from(certificate).toString('base64'),
+            'tls.key': Buffer.from(key).toString('base64'),
+        },
+
+        type: 'kubernetes.io/tls',
+    },
+    { provider: k8sProvider }
+)
+
+const langserverAuth = new k8s.core.v1.Secret(
+    'langserver-auth',
+    {
+        metadata: {
+            name: 'langserver-auth',
+        },
+
+        data: {
+            auth: Buffer.from(htpassword).toString('base64'),
+        },
+
+        type: 'Opaque',
+    },
+    { provider: k8sProvider }
+)
+
 const baseDeployment = new k8s.yaml.ConfigGroup(
     'base',
     {
         files: `${path.posix.join(deploySourcegraphRoot, 'base')}/**/*.yaml`,
     },
     {
         providers: { kubernetes: k8sProvider },
-        dependsOn: [clusterAdmin, storageClass],
+        dependsOn: [clusterAdmin, storageClass, tls],
     }
 )
 
@@ -66,6 +99,32 @@ const ingressNginx = new k8s.yaml.ConfigGroup(
     { providers: { kubernetes: k8sProvider }, dependsOn: clusterAdmin }
 )
 
+const langGo = new k8s.yaml.ConfigGroup(
+    'lang-go',
+    {
+        files: `${path.posix.join(deploySourcegraphRoot, 'configure', 'lang', 'go')}/**/*.yaml`,
+    },
+    {
+        providers: {
+            kubernetes: k8sProvider,
+        },
+        dependsOn: [langserverAuth],
+    }
+)
+
+const langTypescript = new k8s.yaml.ConfigGroup(
+    'lang-typescript',
+    {
+        files: `${path.posix.join(deploySourcegraphRoot, 'configure', 'lang', 'typescript')}/**/*.yaml`,
+    },
+    {
+        providers: {
+            kubernetes: k8sProvider,
+        },
+        dependsOn: [langserverAuth],
+    }
+)
+
 export const ingressIPs = ingressNginx
     .getResource('v1/Service', 'ingress-nginx', 'ingress-nginx')
     .apply(svc => svc.status.apply(status => status.loadBalancer.ingress.map(i => i.ip)))