hogweed1/k8s
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

new way of doin
Some checks failed
continuous-integration/drone/push Build is failing
Details

Browse Source
This commit is contained in:
root
2023-11-16 19:42:02 +10:00
parent 77ec717184
commit 1eaf295724
341 changed files with 19416 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
check/ahoy-hw.yaml Normal file
View File

@@ -0,0 +1,18 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: ahoy
namespace: default
spec:
ingressClassName: cilium
rules:
- host: ahoy-hw.guaranteedstruggle.host
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: ahoy-hello-world
port:
name: app

17
check/bgp-policy.yaml Normal file
View File

@@ -0,0 +1,17 @@
apiVersion: "cilium.io/v2alpha1"
kind: CiliumBGPPeeringPolicy
metadata:
name: 01-bgp-peering-policy
spec:
nodeSelector:
matchLabels:
bgp-policy: a
virtualRouters:
- localASN: 64512
exportPodCIDR: true
neighbors:
- peerAddress: '192.168.0.105/32'
peerASN: 64512
serviceSelector:
matchExpressions:
- {key: somekey, operator: NotIn, values: ['never-used-value']}

12
check/config-pool.yaml Normal file
View File

@@ -0,0 +1,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- 192.168.0.105-192.168.0.105

17
check/default-ingress.yaml Normal file
View File

@@ -0,0 +1,17 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: redirect
namespace: weave
spec:
ingressClassName: cilium
rules:
- http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: weave-scope-app
port:
name: app

41
check/deployment-flask-htmx-board-dev.yaml Normal file
View File

@@ -0,0 +1,41 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: flask-htmx-dev
namespace: vdk2ch
spec:
revisionHistoryLimit: 5
replicas: 2
selector:
matchLabels:
app: flask-htmx-dev
template:
metadata:
labels:
app: flask-htmx-dev
spec:
containers:
- name: flask-htmx-dev
image: harbor.guaranteedstruggle.host/library/flask-htmx-board1:dev
imagePullPolicy: Always
ports:
- containerPort: 5000
#### таймауты и прочее взяты с потолка
#livenessProbe:
# httpGet:
# path: /liveness
# port: 5000
# initialDelaySeconds: 2
# timeoutSeconds: 2
# periodSeconds: 5
# failureThreshold: 2
#readinessProbe:
# httpGet:
# path: /readiness
# port: 5000
# initialDelaySeconds: 3
# timeoutSeconds: 3
# periodSeconds: 10
# failureThreshold: 3

41
check/deployment-flask-htmx-board-master.yaml Normal file
View File

@@ -0,0 +1,41 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: flask-htmx-master
namespace: vdk2ch
spec:
revisionHistoryLimit: 5
replicas: 2
selector:
matchLabels:
app: flask-htmx-master
template:
metadata:
labels:
app: flask-htmx-master
spec:
containers:
- name: flask-htmx-master
image: harbor.guaranteedstruggle.host/library/flask-htmx-board1:master-of-slaves
imagePullPolicy: Always
ports:
- containerPort: 5000
#### таймауты и прочее взяты с потолка
#livenessProbe:
# httpGet:
# path: /liveness
# port: 5000
# initialDelaySeconds: 2
# timeoutSeconds: 2
# periodSeconds: 5
# failureThreshold: 2
#readinessProbe:
# httpGet:
# path: /readiness
# port: 5000
# initialDelaySeconds: 3
# timeoutSeconds: 3
# periodSeconds: 10
# failureThreshold: 3

41
check/deployment-flask-htmx-board-our-style.yaml Normal file
View File

@@ -0,0 +1,41 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: flask-htmx-our-style
namespace: vdk2ch
spec:
revisionHistoryLimit: 5
replicas: 2
selector:
matchLabels:
app: flask-htmx-our-style
template:
metadata:
labels:
app: flask-htmx-our-style
spec:
containers:
- name: flask-htmx-our-style
image: harbor.guaranteedstruggle.host/library/flask-htmx-board1:our-style
imagePullPolicy: Always
ports:
- containerPort: 5000
#### таймауты и прочее взяты с потолка
#livenessProbe:
# httpGet:
# path: /liveness
# port: 5000
# initialDelaySeconds: 2
# timeoutSeconds: 2
# periodSeconds: 5
# failureThreshold: 2
#readinessProbe:
# httpGet:
# path: /readiness
# port: 5000
# initialDelaySeconds: 3
# timeoutSeconds: 3
# periodSeconds: 10
# failureThreshold: 3

22
check/gateway-1.yaml Normal file
View File

@@ -0,0 +1,22 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: my-gateway
labels:
color: coral
spec:
gatewayClassName: cilium
addresses:
- value: "0.0.0.0"
- type: IPAddress
value: 192.168.0.105
- type: IPAddress
value: 10.0.10.251
listeners:
- protocol: HTTP
port: 80
name: web-gw
allowedRoutes:
namespaces:
from: All

20
check/httproute-ahoy.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-ahoy
namespace: default
spec:
hostnames:
- ahoy.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: ahoy-hello-world
port: 80

20
check/httproute-artifactory.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-artifactory
namespace: artifactory
spec:
hostnames:
- artifactory.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: artifactory-artifactory-nginx
port: 80

20
check/httproute-dashy.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-dashy
namespace: dashy
spec:
hostnames:
- dashy.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: dashy
port: 10310

21
check/httproute-flask-htmx-board-dev.yaml Normal file
View File

@@ -0,0 +1,21 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-flask-htmx-board-dev
namespace: vdk2ch
spec:
hostnames:
#- board.guaranteedstruggle.host
- dev.board.vdk2ch.ru
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: flask-htmx-dev-service
port: 5000

21
check/httproute-flask-htmx-board-master.yaml Normal file
View File

@@ -0,0 +1,21 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-flask-htmx-board-master
namespace: vdk2ch
spec:
hostnames:
#- board.guaranteedstruggle.host
- master.board.vdk2ch.ru
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: flask-htmx-master-service
port: 5000

21
check/httproute-flask-htmx-board-our-style.yaml Normal file
View File

@@ -0,0 +1,21 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-flask-htmx-board-our-style
namespace: vdk2ch
spec:
hostnames:
#- board.guaranteedstruggle.host
- our-style.board.vdk2ch.ru
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: flask-htmx-our-style-service
port: 5000

20
check/httproute-harbor.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-harbor
namespace: default
spec:
hostnames:
- harbor.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: harbor
port: 80

20
check/httproute-hubble.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-hubble
namespace: kube-system
spec:
hostnames:
- hubble.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: hubble-ui
port: 80

20
check/httproute-longhorn.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-longhorn
namespace: longhorn-system
spec:
hostnames:
- longhorn.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: longhorn-frontend
port: 80

28
check/httproute-rancher.yaml Normal file
View File

@@ -0,0 +1,28 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-app-1
namespace: default
spec:
hostnames:
- rancher.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
filters:
- type: RequestHeaderModifier
requestHeaderModifier:
set:
- name: X-Forwarded-Proto
value: https
# - name: Host
# value: rancher.guaranteedstruggle.host
backendRefs:
- name: myrancher
port: 80

20
check/httproute-weave.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: http-app-2
namespace: weave
spec:
hostnames:
- weave.guaranteedstruggle.host
parentRefs:
- name: my-gateway
namespace: default
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: weave-scope-app
port: 80

12
check/ippool.yaml Normal file
View File

@@ -0,0 +1,12 @@
---
apiVersion: "cilium.io/v2alpha1"
kind: CiliumLoadBalancerIPPool
metadata:
name: "the-pool"
spec:
cidrs:
- cidr: "192.168.0.105/30"
serviceSelector:
matchExpressions:
- {key: color, operator: In, values: [coral]}

9
check/ippool2.yaml Normal file
View File

@@ -0,0 +1,9 @@
apiVersion: "cilium.io/v2alpha1"
kind: CiliumLoadBalancerIPPool
metadata:
name: "lb-pool"
spec:
cidrs:
- cidr: "10.0.10.0/24"

18
check/longhorn.yaml Normal file
View File

@@ -0,0 +1,18 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: longhorn
namespace: longhorn-system
spec:
ingressClassName: cilium
rules:
- host: longhorn.guaranteedstruggle.host
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: longhorn-frontend
port:
name: http

16
check/network-policy-wut.yaml Normal file
View File

@@ -0,0 +1,16 @@
apiVersion: "cilium.io/v2"
kind: CiliumNetworkPolicy
#description: "Allow to access backends only on TCP/80"
metadata:
name: "frontend-backend"
spec:
endpointSelector:
matchLabels:
namespace: longhorn-system
ingress:
- toPorts:
- ports:
- port: '80'
protocol: TCP
- fromCIDR:
- 0.0.0.0/0

40
check/pv-pod.yaml Normal file
View File

@@ -0,0 +1,40 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: garbo
namespace: default
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 2Gi
---
apiVersion: v1
kind: Pod
metadata:
name: volume-test
namespace: default
spec:
restartPolicy: Always
containers:
- name: volume-test
image: nginx:stable-alpine
imagePullPolicy: IfNotPresent
livenessProbe:
exec:
command:
- ls
- /data/lost+found
initialDelaySeconds: 5
periodSeconds: 5
volumeMounts:
- name: volv
mountPath: /data
ports:
- containerPort: 80
volumes:
- name: volv
persistentVolumeClaim:
claimName: garbo

20
check/rancher.yaml Normal file
View File

@@ -0,0 +1,20 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: rancher
namespace: default
annotations:
ingress.cilium.io/insecure-node-port: "80"
spec:
ingressClassName: cilium
rules:
- host: rancher.guaranteedstruggle.host
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: myrancher
port:
name: http

15
check/svc-flask-htmx-board-dev.yaml Normal file
View File

@@ -0,0 +1,15 @@
---
apiVersion: v1
kind: Service
metadata:
name: flask-htmx-dev-service
namespace: vdk2ch
spec:
selector:
app: flask-htmx-dev
ports:
- protocol: TCP
name: board
port: 5000
targetPort: 5000

15
check/svc-flask-htmx-board-master.yaml Normal file
View File

@@ -0,0 +1,15 @@
---
apiVersion: v1
kind: Service
metadata:
name: flask-htmx-master-service
namespace: vdk2ch
spec:
selector:
app: flask-htmx-master
ports:
- protocol: TCP
name: board
port: 5000
targetPort: 5000

15
check/svc-flask-htmx-board-our-style.yaml Normal file
View File

@@ -0,0 +1,15 @@
---
apiVersion: v1
kind: Service
metadata:
name: flask-htmx-our-style-service
namespace: vdk2ch
spec:
selector:
app: flask-htmx-our-style
ports:
- protocol: TCP
name: board
port: 5000
targetPort: 5000

18
check/weave.yaml Normal file
View File

@@ -0,0 +1,18 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: weave
namespace: weave
spec:
ingressClassName: cilium
rules:
- host: weave.guaranteedstruggle.host
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: weave-scope-app
port:
name: app