fix
This commit is contained in:
@@ -5,7 +5,7 @@ resource "kubectl_manifest" "code-server-config" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
data:
|
||||
config.yml: |
|
||||
auth: none
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
locals {
|
||||
authentik_url = "http://authentik.${var.domain}-auth.svc"
|
||||
authentik_token = data.kubernetes_secret_v1.authentik.data["AUTHENTIK_BOOTSTRAP_TOKEN"]
|
||||
common-labels = {
|
||||
common_labels = {
|
||||
"vynil.solidite.fr/owner-name" = var.instance
|
||||
"vynil.solidite.fr/owner-namespace" = var.namespace
|
||||
"vynil.solidite.fr/owner-category" = var.category
|
||||
@@ -21,6 +21,6 @@ data "kubernetes_secret_v1" "authentik" {
|
||||
|
||||
data "kustomization_overlay" "data" {
|
||||
namespace = var.namespace
|
||||
common_labels = local.common-labels
|
||||
common_labels = local.common_labels
|
||||
resources = []
|
||||
}
|
||||
|
||||
@@ -5,16 +5,16 @@ resource "kubectl_manifest" "deploy" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
spec:
|
||||
replicas: 1
|
||||
hostname: "${var.component}-${var.instance}"
|
||||
subdomain: "${var.domain_name}"
|
||||
selector:
|
||||
matchLabels: ${jsonencode(local.common-labels)}
|
||||
matchLabels: ${jsonencode(local.common_labels)}
|
||||
template:
|
||||
metadata:
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
annotations:
|
||||
container.apparmor.security.beta.kubernetes.io/code-server: unconfined
|
||||
container.seccomp.security.alpha.kubernetes.io/code-server: unconfined
|
||||
|
||||
@@ -14,7 +14,7 @@ module "service" {
|
||||
component = var.component
|
||||
instance = var.instance
|
||||
namespace = var.namespace
|
||||
labels = local.common-labels
|
||||
labels = local.common_labels
|
||||
targets = ["http"]
|
||||
providers = {
|
||||
kubectl = kubectl
|
||||
@@ -28,7 +28,7 @@ module "ingress" {
|
||||
namespace = var.namespace
|
||||
issuer = var.issuer
|
||||
ingress_class = var.ingress_class
|
||||
labels = local.common-labels
|
||||
labels = local.common_labels
|
||||
dns_names = local.dns_names
|
||||
middlewares = [module.forward.middleware]
|
||||
services = [module.service.default_definition]
|
||||
@@ -67,7 +67,7 @@ module "forward" {
|
||||
domain = var.domain
|
||||
namespace = var.namespace
|
||||
ingress_class = var.ingress_class
|
||||
labels = local.common-labels
|
||||
labels = local.common_labels
|
||||
dns_names = local.dns_names
|
||||
service = module.service.default_definition
|
||||
icon = local.icon
|
||||
|
||||
@@ -18,7 +18,7 @@ resource "kubectl_manifest" "pvc" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
spec: ${jsonencode(local.pvc_spec)}
|
||||
EOF
|
||||
}
|
||||
|
||||
@@ -5,7 +5,7 @@ resource "kubectl_manifest" "sa" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
EOF
|
||||
}
|
||||
|
||||
@@ -17,7 +17,7 @@ resource "kubectl_manifest" "role" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
rules:
|
||||
- apiGroups: ['*']
|
||||
resources: ['*']
|
||||
@@ -32,7 +32,7 @@ resource "kubectl_manifest" "rb" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
@@ -51,7 +51,7 @@ resource "kubectl_manifest" "clusterrole" {
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: "${var.component}-${var.namespace}-${var.instance}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
rules:
|
||||
- apiGroups: ['*']
|
||||
resources: ['*']
|
||||
@@ -65,7 +65,7 @@ resource "kubectl_manifest" "crb" {
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: "${var.component}-${var.namespace}-${var.instance}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
|
||||
@@ -7,7 +7,7 @@ resource "kubectl_manifest" "prj_secret" {
|
||||
metadata:
|
||||
name: "${var.component}-${var.instance}"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.common-labels)}
|
||||
labels: ${jsonencode(local.common_labels)}
|
||||
spec:
|
||||
forceRegenerate: false
|
||||
data:
|
||||
|
||||
Reference in New Issue
Block a user