110 lines
2.4 KiB
YAML
110 lines
2.4 KiB
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: proxmox
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: proxmox-proxy-deployment
|
|
namespace: proxmox
|
|
labels:
|
|
app: proxmox-proxy
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: proxmox-proxy
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: proxmox-proxy
|
|
spec:
|
|
nodeSelector:
|
|
kubernetes.io/hostname: premhome-falcon-1
|
|
containers:
|
|
- name: tcp-proxy
|
|
image: harbor.yadunut.dev/yadunut/tcp_proxy:sha-85ed592-1748014668 # {"$imagepolicy": "flux-system:tcp-proxy"}
|
|
env:
|
|
- name: LISTEN_ADDR
|
|
value: "0.0.0.0:8443"
|
|
- name: UPSTREAM_ADDR
|
|
value: "10.0.0.5:8006"
|
|
ports:
|
|
- containerPort: 8443
|
|
name: https
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: ServersTransport
|
|
metadata:
|
|
name: proxmox-insecure
|
|
namespace: proxmox
|
|
spec:
|
|
insecureSkipVerify: true
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: proxmox-proxy
|
|
namespace: proxmox
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.middlewares: authentik-system-authentik@kubernetescrd
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: proxmox.i.yadunut.dev
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: proxmox-proxy
|
|
port:
|
|
name: https
|
|
tls:
|
|
- hosts:
|
|
- proxmox.i.yadunut.dev
|
|
secretName: wildcard-cert-i.yadunut.dev-prod
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: proxmox-proxy
|
|
namespace: proxmox
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/service.serversscheme: https
|
|
traefik.ingress.kubernetes.io/service.serverstransport: proxmox-proxmox-insecure@kubernetescrd
|
|
spec:
|
|
selector:
|
|
app: proxmox-proxy
|
|
ports:
|
|
- name: https
|
|
port: 8443
|
|
targetPort: https
|
|
type: ClusterIP
|
|
---
|
|
apiVersion: image.toolkit.fluxcd.io/v1
|
|
kind: ImageRepository
|
|
metadata:
|
|
name: tcp-proxy
|
|
namespace: flux-system
|
|
spec:
|
|
image: harbor.yadunut.dev/yadunut/tcp_proxy
|
|
interval: 1m0s
|
|
---
|
|
apiVersion: image.toolkit.fluxcd.io/v1
|
|
kind: ImagePolicy
|
|
metadata:
|
|
name: tcp-proxy
|
|
namespace: flux-system
|
|
spec:
|
|
imageRepositoryRef:
|
|
name: tcp-proxy
|
|
filterTags:
|
|
pattern: "^sha-[a-fA-F0-9]+-(?P<ts>.*)"
|
|
extract: "$ts"
|
|
policy:
|
|
numerical:
|
|
order: asc
|