neu way of manifestos

2023-11-16 19:52:51 +10:00
parent 1eaf295724
commit d0c9250c30
41 changed files with 36 additions and 517 deletions
--- a/check/ahoy-hw.yaml
+++ b/check/ahoy-hw.yaml
@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: ahoy
-  namespace: default
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: ahoy-hw.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: ahoy-hello-world
-            port:
-              name: app
--- a/check/bgp-policy.yaml
+++ b/check/bgp-policy.yaml
@@ -1,17 +0,0 @@
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumBGPPeeringPolicy
-metadata:
- name: 01-bgp-peering-policy
-spec:
- nodeSelector:
-   matchLabels:
-     bgp-policy: a
- virtualRouters:
- - localASN: 64512
-   exportPodCIDR: true
-   neighbors:
-    - peerAddress: '192.168.0.105/32'
-      peerASN: 64512
-   serviceSelector:
-     matchExpressions:
-       - {key: somekey, operator: NotIn, values: ['never-used-value']}
--- a/check/config-pool.yaml
+++ b/check/config-pool.yaml
@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  namespace: metallb-system
-  name: config
-data:
-  config: |
-    address-pools:
-    - name: default
-      protocol: layer2
-      addresses:
-      - 192.168.0.105-192.168.0.105
--- a/check/default-ingress.yaml
+++ b/check/default-ingress.yaml
@@ -1,17 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: redirect
-  namespace: weave
-spec:
-  ingressClassName: cilium
-  rules:
-  - http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: weave-scope-app
-            port:
-              name: app
--- a/check/deployment-flask-htmx-board-dev.yaml
+++ b/check/deployment-flask-htmx-board-dev.yaml
@@ -1,41 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flask-htmx-dev
-  namespace: vdk2ch 
-spec:
-  revisionHistoryLimit: 5
-  replicas: 2
-  selector:
-    matchLabels:
-      app: flask-htmx-dev
-  template:
-    metadata:
-      labels:
-        app: flask-htmx-dev
-    spec:
-      containers:
-      - name: flask-htmx-dev
-        image: harbor.guaranteedstruggle.host/library/flask-htmx-board1:dev
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 5000
-
-        #### таймауты и прочее взяты с потолка
-        #livenessProbe:
-        #  httpGet:
-        #    path: /liveness
-        #    port: 5000
-        #  initialDelaySeconds: 2
-        #  timeoutSeconds: 2
-        #  periodSeconds: 5
-        #  failureThreshold: 2
-        #readinessProbe:
-        #  httpGet:
-        #    path: /readiness
-        #    port: 5000
-        #  initialDelaySeconds: 3
-        #  timeoutSeconds: 3
-        #  periodSeconds: 10
-        #  failureThreshold: 3
-
--- a/check/deployment-flask-htmx-board-master.yaml
+++ b/check/deployment-flask-htmx-board-master.yaml
@@ -1,41 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flask-htmx-master
-  namespace: vdk2ch 
-spec:
-  revisionHistoryLimit: 5
-  replicas: 2
-  selector:
-    matchLabels:
-      app: flask-htmx-master
-  template:
-    metadata:
-      labels:
-        app: flask-htmx-master
-    spec:
-      containers:
-      - name: flask-htmx-master
-        image: harbor.guaranteedstruggle.host/library/flask-htmx-board1:master-of-slaves
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 5000
-
-        #### таймауты и прочее взяты с потолка
-        #livenessProbe:
-        #  httpGet:
-        #    path: /liveness
-        #    port: 5000
-        #  initialDelaySeconds: 2
-        #  timeoutSeconds: 2
-        #  periodSeconds: 5
-        #  failureThreshold: 2
-        #readinessProbe:
-        #  httpGet:
-        #    path: /readiness
-        #    port: 5000
-        #  initialDelaySeconds: 3
-        #  timeoutSeconds: 3
-        #  periodSeconds: 10
-        #  failureThreshold: 3
-
--- a/check/deployment-flask-htmx-board-our-style.yaml
+++ b/check/deployment-flask-htmx-board-our-style.yaml
@@ -1,41 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flask-htmx-our-style
-  namespace: vdk2ch 
-spec:
-  revisionHistoryLimit: 5
-  replicas: 2
-  selector:
-    matchLabels:
-      app: flask-htmx-our-style
-  template:
-    metadata:
-      labels:
-        app: flask-htmx-our-style
-    spec:
-      containers:
-      - name: flask-htmx-our-style
-        image: harbor.guaranteedstruggle.host/library/flask-htmx-board1:our-style
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 5000
-
-        #### таймауты и прочее взяты с потолка
-        #livenessProbe:
-        #  httpGet:
-        #    path: /liveness
-        #    port: 5000
-        #  initialDelaySeconds: 2
-        #  timeoutSeconds: 2
-        #  periodSeconds: 5
-        #  failureThreshold: 2
-        #readinessProbe:
-        #  httpGet:
-        #    path: /readiness
-        #    port: 5000
-        #  initialDelaySeconds: 3
-        #  timeoutSeconds: 3
-        #  periodSeconds: 10
-        #  failureThreshold: 3
-
--- a/check/httproute-ahoy.yaml
+++ b/check/httproute-ahoy.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-ahoy
-  namespace: default
-spec:
-  hostnames:
-  - ahoy.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: ahoy-hello-world
-      port: 80
--- a/check/httproute-artifactory.yaml
+++ b/check/httproute-artifactory.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-artifactory
-  namespace: artifactory
-spec:
-  hostnames:
-  - artifactory.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: artifactory-artifactory-nginx
-      port: 80
--- a/check/httproute-dashy.yaml
+++ b/check/httproute-dashy.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-dashy
-  namespace: dashy
-spec:
-  hostnames:
-  - dashy.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: dashy
-      port: 10310
--- a/check/httproute-flask-htmx-board-dev.yaml
+++ b/check/httproute-flask-htmx-board-dev.yaml
@@ -1,21 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-flask-htmx-board-dev
-  namespace: vdk2ch
-spec:
-  hostnames:
-  #- board.guaranteedstruggle.host
-  - dev.board.vdk2ch.ru
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: flask-htmx-dev-service
-      port: 5000
--- a/check/httproute-flask-htmx-board-master.yaml
+++ b/check/httproute-flask-htmx-board-master.yaml
@@ -1,21 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-flask-htmx-board-master
-  namespace: vdk2ch
-spec:
-  hostnames:
-  #- board.guaranteedstruggle.host
-  - master.board.vdk2ch.ru
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: flask-htmx-master-service
-      port: 5000
--- a/check/httproute-flask-htmx-board-our-style.yaml
+++ b/check/httproute-flask-htmx-board-our-style.yaml
@@ -1,21 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-flask-htmx-board-our-style
-  namespace: vdk2ch
-spec:
-  hostnames:
-  #- board.guaranteedstruggle.host
-  - our-style.board.vdk2ch.ru
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: flask-htmx-our-style-service
-      port: 5000
--- a/check/httproute-harbor.yaml
+++ b/check/httproute-harbor.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-harbor
-  namespace: default
-spec:
-  hostnames:
-  - harbor.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: harbor
-      port: 80
--- a/check/httproute-hubble.yaml
+++ b/check/httproute-hubble.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-hubble
-  namespace: kube-system
-spec:
-  hostnames:
-  - hubble.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: hubble-ui
-      port: 80
--- a/check/httproute-longhorn.yaml
+++ b/check/httproute-longhorn.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-longhorn
-  namespace: longhorn-system
-spec:
-  hostnames:
-  - longhorn.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: longhorn-frontend
-      port: 80
--- a/check/httproute-rancher.yaml
+++ b/check/httproute-rancher.yaml
@@ -1,28 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-app-1
-  namespace: default
-spec:
-  hostnames:
-  - rancher.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    filters:
-    - type: RequestHeaderModifier
-      requestHeaderModifier:
-        set:
-        - name:  X-Forwarded-Proto
-          value: https
-#        - name: Host
-#          value: rancher.guaranteedstruggle.host
-    backendRefs:
-    - name: myrancher
-      port: 80
--- a/check/httproute-weave.yaml
+++ b/check/httproute-weave.yaml
@@ -1,20 +0,0 @@
---
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-app-2
-  namespace: weave
-spec:
-  hostnames:
-  - weave.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: weave-scope-app
-      port: 80
--- a/check/longhorn.yaml
+++ b/check/longhorn.yaml
@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: longhorn
-  namespace: longhorn-system
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: longhorn.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: longhorn-frontend
-            port:
-              name: http
--- a/check/network-policy-wut.yaml
+++ b/check/network-policy-wut.yaml
@@ -1,16 +0,0 @@
-apiVersion: "cilium.io/v2"
-kind: CiliumNetworkPolicy
-#description: "Allow to access backends only on TCP/80"
-metadata:
-  name: "frontend-backend"
-spec:
-  endpointSelector:
-    matchLabels:
-      namespace: longhorn-system
-  ingress:
-  - toPorts:
-    - ports:
-      - port: '80'
-        protocol: TCP
-  - fromCIDR:
-    - 0.0.0.0/0
--- a/check/rancher.yaml
+++ b/check/rancher.yaml
@@ -1,20 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: rancher
-  namespace: default
-  annotations:
-    ingress.cilium.io/insecure-node-port: "80"
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: rancher.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: myrancher
-            port:
-              name: http
--- a/check/svc-flask-htmx-board-dev.yaml
+++ b/check/svc-flask-htmx-board-dev.yaml
@@ -1,15 +0,0 @@
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: flask-htmx-dev-service
-  namespace: vdk2ch
-spec:
-  selector:
-    app: flask-htmx-dev
-  ports:
-    - protocol: TCP
-      name: board
-      port: 5000
-      targetPort: 5000
-
--- a/check/svc-flask-htmx-board-master.yaml
+++ b/check/svc-flask-htmx-board-master.yaml
@@ -1,15 +0,0 @@
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: flask-htmx-master-service
-  namespace: vdk2ch
-spec:
-  selector:
-    app: flask-htmx-master
-  ports:
-    - protocol: TCP
-      name: board
-      port: 5000
-      targetPort: 5000
-
--- a/check/svc-flask-htmx-board-our-style.yaml
+++ b/check/svc-flask-htmx-board-our-style.yaml
@@ -1,15 +0,0 @@
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: flask-htmx-our-style-service
-  namespace: vdk2ch
-spec:
-  selector:
-    app: flask-htmx-our-style
-  ports:
-    - protocol: TCP
-      name: board
-      port: 5000
-      targetPort: 5000
-
--- a/check/weave.yaml
+++ b/check/weave.yaml
@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: weave
-  namespace: weave
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: weave.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: weave-scope-app
-            port:
-              name: app