neu way of manifestos

apply_all_yamls.sh

@@ -2,3 +2,5 @@
 
 
 #ls /etc/k8s/manifests/**/*.yaml | xargs -n 1 bash -c 'minikube kubectl -- apply -f $0'
+
+ls /etc/k8s/manifests/**/*.yaml | xargs -n 1 bash -c 'kubectl apply -f $0'

check/ahoy-hw.yaml

@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: ahoy
-  namespace: default
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: ahoy-hw.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: ahoy-hello-world
-            port:
-              name: app

check/bgp-policy.yaml

@@ -1,17 +0,0 @@
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumBGPPeeringPolicy
-metadata:
- name: 01-bgp-peering-policy
-spec:
- nodeSelector:
-   matchLabels:
-     bgp-policy: a
- virtualRouters:
- - localASN: 64512
-   exportPodCIDR: true
-   neighbors:
-    - peerAddress: '192.168.0.105/32'
-      peerASN: 64512
-   serviceSelector:
-     matchExpressions:
-       - {key: somekey, operator: NotIn, values: ['never-used-value']}

check/config-pool.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  namespace: metallb-system
-  name: config
-data:
-  config: |
-    address-pools:
-    - name: default
-      protocol: layer2
-      addresses:
-      - 192.168.0.105-192.168.0.105

check/default-ingress.yaml

@@ -1,17 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: redirect
-  namespace: weave
-spec:
-  ingressClassName: cilium
-  rules:
-  - http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: weave-scope-app
-            port:
-              name: app

check/httproute-ahoy.yaml

@@ -1,20 +0,0 @@
----
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-ahoy
-  namespace: default
-spec:
-  hostnames:
-  - ahoy.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: ahoy-hello-world
-      port: 80

check/httproute-artifactory.yaml

@@ -1,20 +0,0 @@
----
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: HTTPRoute
-metadata:
-  name: http-artifactory
-  namespace: artifactory
-spec:
-  hostnames:
-  - artifactory.guaranteedstruggle.host
-  parentRefs:
-  - name: my-gateway
-    namespace: default
-  rules:
-  - matches:
-    - path:
-        type: PathPrefix
-        value: /
-    backendRefs:
-    - name: artifactory-artifactory-nginx
-      port: 80

check/longhorn.yaml

@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: longhorn
-  namespace: longhorn-system
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: longhorn.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: longhorn-frontend
-            port:
-              name: http

check/network-policy-wut.yaml

@@ -1,16 +0,0 @@
-apiVersion: "cilium.io/v2"
-kind: CiliumNetworkPolicy
-#description: "Allow to access backends only on TCP/80"
-metadata:
-  name: "frontend-backend"
-spec:
-  endpointSelector:
-    matchLabels:
-      namespace: longhorn-system
-  ingress:
-  - toPorts:
-    - ports:
-      - port: '80'
-        protocol: TCP
-  - fromCIDR:
-    - 0.0.0.0/0

check/rancher.yaml

@@ -1,20 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: rancher
-  namespace: default
-  annotations:
-    ingress.cilium.io/insecure-node-port: "80"
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: rancher.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: myrancher
-            port:
-              name: http

check/weave.yaml

@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: weave
-  namespace: weave
-spec:
-  ingressClassName: cilium
-  rules:
-  - host: weave.guaranteedstruggle.host
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: weave-scope-app
-            port:
-              name: app

manifests/00-system-stuff/gateway.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: Gateway
+metadata:
+  name: my-gateway
+  labels:
+    color: coral
+spec:
+  gatewayClassName: cilium
+  addresses:
+  - value: "0.0.0.0"
+  - type: IPAddress
+    value: 192.168.0.105
+  - type: IPAddress
+    value: 10.0.10.251
+  listeners:
+  - protocol: HTTP
+    port: 80
+    name: web-gw
+    allowedRoutes:
+      namespaces:
+        from: All

manifests/00-system-stuff/ippool.yaml

@@ -0,0 +1,9 @@
+apiVersion: "cilium.io/v2alpha1"
+kind: CiliumLoadBalancerIPPool
+metadata:
+  name: "lb-pool"
+spec:
+  cidrs:
+
+  - cidr: "10.0.10.0/24"
+

manifests/01-deployments/flask-htmx-dev.yaml

@@ -1,39 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flask-htmx-dev
-  namespace: vdk2ch 
-spec:
-  revisionHistoryLimit: 3 
-  replicas: 2
-  selector:
-    matchLabels:
-      app: flask-htmx-dev
-  template:
-    metadata:
-      labels:
-        app: flask-htmx-dev
-    spec:
-      containers:
-      - name: flask-htmx-dev
-        image: flask-htmx-board1:dev
-        ports:
-        - containerPort: 5000
-
-        #### таймауты и прочее взяты с потолка
-        livenessProbe:
-          httpGet:
-            path: /liveness
-            port: 5000
-          initialDelaySeconds: 2
-          timeoutSeconds: 2
-          periodSeconds: 5
-          failureThreshold: 2
-        readinessProbe:
-          httpGet:
-            path: /readiness
-            port: 5000
-          initialDelaySeconds: 3
-          timeoutSeconds: 3
-          periodSeconds: 10
-          failureThreshold: 3

manifests/01-deployments/flask-htmx-master.yaml

@@ -1,39 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flask-htmx-master
-  namespace: vdk2ch 
-spec:
-  revisionHistoryLimit: 5
-  replicas: 2
-  selector:
-    matchLabels:
-      app: flask-htmx-master
-  template:
-    metadata:
-      labels:
-        app: flask-htmx-master
-    spec:
-      containers:
-      - name: flask-htmx-master
-        image: flask-htmx-board1:master-of-slaves
-        ports:
-        - containerPort: 5000
-
-        #### таймауты и прочее взяты с потолка
-        livenessProbe:
-          httpGet:
-            path: /liveness
-            port: 5000
-          initialDelaySeconds: 2
-          timeoutSeconds: 2
-          periodSeconds: 5
-          failureThreshold: 2
-        readinessProbe:
-          httpGet:
-            path: /readiness
-            port: 5000
-          initialDelaySeconds: 3
-          timeoutSeconds: 3
-          periodSeconds: 10
-          failureThreshold: 3

manifests/01-deployments/flask-htmx-our-style.yaml

@@ -1,39 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flask-htmx-our-style
-  namespace: vdk2ch 
-spec:
-  revisionHistoryLimit: 3 
-  replicas: 2
-  selector:
-    matchLabels:
-      app: flask-htmx-our-style
-  template:
-    metadata:
-      labels:
-        app: flask-htmx-our-style
-    spec:
-      containers:
-      - name: flask-htmx-our-style
-        image: flask-htmx-board1:our-style
-        ports:
-        - containerPort: 5000
-
-        #### таймауты и прочее взяты с потолка
-        livenessProbe:
-          httpGet:
-            path: /liveness
-            port: 5000
-          initialDelaySeconds: 2
-          timeoutSeconds: 2
-          periodSeconds: 5
-          failureThreshold: 2
-        readinessProbe:
-          httpGet:
-            path: /readiness
-            port: 5000
-          initialDelaySeconds: 3
-          timeoutSeconds: 3
-          periodSeconds: 10
-          failureThreshold: 3

manifests/01-deployments/hw-hw.yaml

@@ -1,34 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: helloworld
-  namespace: vdk2ch
-  annotations:
-    description: 'my frontend running nginx'
-  labels:
-    labe1: my_test_label1
-    labe2: my_test_label
-spec:
-  revisionHistoryLimit: 0
-  selector:
-    matchLabels:
-      app: helloworld
-  replicas: 1 # tells deployment to run 1 pods matching the template
-  template: # create pods using pod definition in this template
-    metadata:
-      labels:
-        app: helloworld
-        what-ever-label-i-add-here: 'test_string-asfd14123UE.asdfeee333DS'
-        what/here.com: '312321' 
-        labe2: my_test_label
-        labe3: my_test_label3
-      annotations:
-        imageregistry: "https://hub.docker.com/"
-        what/here.com2: "https://github.com/"
-        anno: 'where it will stop??'
-    spec:
-      containers:
-      - name: helloworld
-        image: karthequian/helloworld:latest
-        ports:
-        - containerPort: 80 

manifests/02-services/flask-htmx-dev-service.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: flask-htmx-dev-service
-  namespace: vdk2ch
-spec:
-  selector:
-    app: flask-htmx-dev
-  ports:
-    - protocol: TCP
-      name: board
-      port: 5000
-      targetPort: 5000

manifests/02-services/flask-htmx-master-service.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: flask-htmx-master-service
-  namespace: vdk2ch
-spec:
-  selector:
-    app: flask-htmx-master
-  ports:
-    - protocol: TCP
-      name: board
-      port: 5000
-      targetPort: 5000

manifests/02-services/flask-htmx-our-style-service.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: flask-htmx-our-style-service
-  namespace: vdk2ch
-spec:
-  selector:
-    app: flask-htmx-our-style
-  ports:
-    - protocol: TCP
-      name: board
-      port: 5000
-      targetPort: 5000

manifests/02-services/hw-service.yaml

@@ -1,24 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: hw-service
-  namespace: vdk2ch
-spec:
-  type: NodePort
-  selector:
-    app: helloworld
-  ports:
-    - port: 80
-      targetPort: 80
-      nodePort: 30001
-
-
-    # - protocol: TCP
-    #   port: 8080
-    #   targetPort: 8080
-    #   nodePort: 32129
-     #name: http
-      #protocol: TCP
-      
-      
-      #nodePort: 30001 

manifests/03-ingress/flask-htmx-ingress.yaml

@@ -1,51 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: flask-htmx-ingress
-  namespace: vdk2ch
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /$1
-    #nginx.ingress.kubernetes.io/app-root: /
-spec:
-  rules:
-    - host: master.board.vdk2ch.ru
-      http:
-        paths:
-          - path: /(.*)
-            pathType: Prefix
-            backend:
-              service:
-                name: flask-htmx-master-service 
-                port: 
-                  number: 5000
-    - host: dev.board.vdk2ch.ru
-      http:
-        paths:
-          - path: /(.*)
-            pathType: Prefix
-            backend:
-              service:
-                name: flask-htmx-dev-service
-                port: 
-                  number: 5000 
-    - host: our-style.board.vdk2ch.ru
-      http:
-        paths:
-          - path: /(.*)
-            pathType: Prefix
-            backend:
-              service:
-                name: flask-htmx-our-style-service
-                port: 
-                  number: 5000
-    - host: q.q.vdk2ch.ru
-      http:
-        paths:
-          - path: /(.*)
-            pathType: Prefix
-            backend:
-              service:
-                name: flask-htmx-our-style-service
-                port: 
-                  number: 5000

manifests/03-ingress/hw-ingress.yaml

@@ -1,27 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: hw-ingress
-  namespace: vdk2ch
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /$1
-spec:
-  rules:
-    - host: asdf.vdk2ch.ru
-      http:
-        paths:
-          - path: /v1
-            pathType: Prefix
-            backend:
-              service:
-                name:      hw-service 
-                port: 
-                  number: 80
-          # - path: /
-          #   pathType: Prefix
-          #   backend:
-          #     service:
-          #       name: hw-service
-          #       port:
-          #         number: 80

manifests/03-ingress/minikube-dashboard-ingress.yaml

@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: minikube-dashboard-ingress
-  namespace: kubernetes-dashboard
-  annotations:
-    #nginx.ingress.kubernetes.io/rewrite-target: /$1
-    nginx.ingress.kubernetes.io/rewrite-target: /
-    nginx.ingress.kubernetes.io/enable-cors: "false"
-spec:
-  rules:
-    - host: minikube.guaranteedstruggle.host
-      http:
-        paths: 
-        - path: /
-          pathType: Prefix
-          backend:
-            service:
-              name:     kubernetes-dashboard
-              port:
-                number: 80
-  

manifests/03-ingress/web2-ingress.yaml

@@ -1,19 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: example-ingress
-  namespace: vdk2ch
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /$1
-spec:
-  rules:
-    - host: asdf.vdk2ch.ru
-      http:
-        paths: 
-        - path: /v2
-          pathType: Prefix
-          backend:
-            service:
-              name:      web2 
-              port:
-                number: 8080

manifests/04-httproutes/httproute-rancher.yaml

@@ -2,7 +2,7 @@
 apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
-  name: http-app-1
+  name: http-rancher
   namespace: default
 spec:
   hostnames:
@@ -21,8 +21,6 @@ spec:
         set:
         - name:  X-Forwarded-Proto
           value: https
-#        - name: Host
-#          value: rancher.guaranteedstruggle.host
     backendRefs:
     - name: myrancher
       port: 80

manifests/04-httproutes/httproute-weave.yaml

@@ -2,7 +2,7 @@
 apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
-  name: http-app-2
+  name: http-weave
   namespace: weave
 spec:
   hostnames: