This commit is contained in:
2024-05-12 12:03:32 +02:00
parent 599d175f82
commit 2890064fd4
191 changed files with 893 additions and 1068 deletions

View File

@@ -5,7 +5,7 @@ resource "kubectl_manifest" "code-server-config" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
data:
config.yml: |
auth: none

View File

@@ -1,7 +1,7 @@
locals {
authentik_url = "http://authentik.${var.domain}-auth.svc"
authentik_token = data.kubernetes_secret_v1.authentik.data["AUTHENTIK_BOOTSTRAP_TOKEN"]
common-labels = {
common_labels = {
"vynil.solidite.fr/owner-name" = var.instance
"vynil.solidite.fr/owner-namespace" = var.namespace
"vynil.solidite.fr/owner-category" = var.category
@@ -21,6 +21,6 @@ data "kubernetes_secret_v1" "authentik" {
data "kustomization_overlay" "data" {
namespace = var.namespace
common_labels = local.common-labels
common_labels = local.common_labels
resources = []
}

View File

@@ -5,16 +5,16 @@ resource "kubectl_manifest" "deploy" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
spec:
replicas: 1
hostname: "${var.component}-${var.instance}"
subdomain: "${var.domain_name}"
selector:
matchLabels: ${jsonencode(local.common-labels)}
matchLabels: ${jsonencode(local.common_labels)}
template:
metadata:
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
annotations:
container.apparmor.security.beta.kubernetes.io/code-server: unconfined
container.seccomp.security.alpha.kubernetes.io/code-server: unconfined

View File

@@ -14,7 +14,7 @@ module "service" {
component = var.component
instance = var.instance
namespace = var.namespace
labels = local.common-labels
labels = local.common_labels
targets = ["http"]
providers = {
kubectl = kubectl
@@ -28,7 +28,7 @@ module "ingress" {
namespace = var.namespace
issuer = var.issuer
ingress_class = var.ingress_class
labels = local.common-labels
labels = local.common_labels
dns_names = local.dns_names
middlewares = [module.forward.middleware]
services = [module.service.default_definition]
@@ -67,7 +67,7 @@ module "forward" {
domain = var.domain
namespace = var.namespace
ingress_class = var.ingress_class
labels = local.common-labels
labels = local.common_labels
dns_names = local.dns_names
service = module.service.default_definition
icon = local.icon

View File

@@ -18,7 +18,7 @@ resource "kubectl_manifest" "pvc" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
spec: ${jsonencode(local.pvc_spec)}
EOF
}

View File

@@ -5,7 +5,7 @@ resource "kubectl_manifest" "sa" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
EOF
}
@@ -17,7 +17,7 @@ resource "kubectl_manifest" "role" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
rules:
- apiGroups: ['*']
resources: ['*']
@@ -32,7 +32,7 @@ resource "kubectl_manifest" "rb" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
@@ -51,7 +51,7 @@ resource "kubectl_manifest" "clusterrole" {
kind: ClusterRole
metadata:
name: "${var.component}-${var.namespace}-${var.instance}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
rules:
- apiGroups: ['*']
resources: ['*']
@@ -65,7 +65,7 @@ resource "kubectl_manifest" "crb" {
kind: ClusterRoleBinding
metadata:
name: "${var.component}-${var.namespace}-${var.instance}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole

View File

@@ -7,7 +7,7 @@ resource "kubectl_manifest" "prj_secret" {
metadata:
name: "${var.component}-${var.instance}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common-labels)}
labels: ${jsonencode(local.common_labels)}
spec:
forceRegenerate: false
data: