This commit is contained in:
Remy Moll 2024-02-04 00:52:25 +01:00
parent 7c734db80a
commit 9ea515e140
5 changed files with 28 additions and 24 deletions

View File

@ -8,7 +8,7 @@ resources:
- nginx.deployment.yaml - nginx.deployment.yaml
- nginx.service.yaml - nginx.service.yaml
- nginx-auth.sealedsecret.yaml - nginx-auth.sealedsecret.yaml
# - nginx.ingress.yaml - nginx.ingress.yaml
- quartz-build.cronjob.yaml - quartz-build.cronjob.yaml
- s3-credentials.sealedsecret.yaml - s3-credentials.sealedsecret.yaml
@ -28,4 +28,6 @@ images:
newName: public.ecr.aws/aws-cli/aws-cli newName: public.ecr.aws/aws-cli/aws-cli
newTag: latest newTag: latest
- name: nginx
newName: nginx
newTag: "1.25"

View File

@ -1,18 +1,18 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: quartz-physics name: quartz
spec: spec:
selector: selector:
matchLabels: matchLabels:
app: quartz-physics app: quartz
template: template:
metadata: metadata:
labels: labels:
app: quartz-physics app: quartz
spec: spec:
containers: containers:
- name: quartz-physics - name: quartz
image: nginx image: nginx
resources: resources:
limits: limits:
@ -22,12 +22,12 @@ spec:
- containerPort: 80 - containerPort: 80
volumeMounts: volumeMounts:
- mountPath: /usr/share/nginx/html - mountPath: /usr/share/nginx/html
name: quartz-physics name: quartz
- mountPath: /etc/nginx/nginx.conf - mountPath: /etc/nginx/nginx.conf
subPath: nginx.conf subPath: nginx.conf
name: nginx name: nginx
volumes: volumes:
- name: quartz-physics - name: quartz
persistentVolumeClaim: persistentVolumeClaim:
claimName: quartz-nfs claimName: quartz-nfs
- name: nginx - name: nginx

View File

@ -1,17 +1,17 @@
apiVersion: traefik.containo.us/v1alpha1 apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute kind: IngressRoute
metadata: metadata:
name: quartz-physics-ingress name: quartz-ingress
spec: spec:
entryPoints: entryPoints:
- websecure - websecure
routes: routes:
- match: Host(`physics.kluster.moll.re`) - match: Host(`physics.kluster.moll.re`)
middlewares: middlewares:
- name: quartz-physics-auth - name: quartz-auth
kind: Rule kind: Rule
services: services:
- name: quartz-physics-web - name: quartz-web
port: 80 port: 80
tls: tls:
certResolver: default-tls certResolver: default-tls
@ -20,7 +20,7 @@ spec:
apiVersion: traefik.containo.us/v1alpha1 apiVersion: traefik.containo.us/v1alpha1
kind: Middleware kind: Middleware
metadata: metadata:
name: quartz-physics-auth name: quartz-auth
spec: spec:
basicAuth: basicAuth:
secret: nginx-auth secret: nginx-auth

View File

@ -1,10 +1,10 @@
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
metadata: metadata:
name: quartz-physics-web name: quartz-web
spec: spec:
selector: selector:
app: quartz-physics app: quartz
ports: ports:
- protocol: TCP - protocol: TCP
port: 80 port: 80

View File

@ -27,7 +27,7 @@ spec:
- name: S3_REGION - name: S3_REGION
value: us-west-1 value: us-west-1
command: ["/bin/sh", "-c"] command: ["/bin/sh", "-c"]
args: ["aws --endpoint-url https://s3.kluster.moll.re s3 sync s3://$S3_BUCKET /config"] args: ["aws --endpoint-url https://s3.kluster.moll.re s3 sync s3://$S3_BUCKET /vault"]
volumeMounts: volumeMounts:
- name: vault - name: vault
@ -49,20 +49,22 @@ spec:
- name: quartz-build - name: quartz-build
image: node image: node
command: ["/bin/sh", "-c"] command: ["/bin/sh", "-c"]
args: args:
- cd /config && - >-
- ln -s /vault content cd /config &&
- npm ci && ln -s /vault content &&
- npx quartz build && npm ci &&
- rm -rfv /dist/* && npx quartz build &&
- cp --verbose -r public/* /dist rm -rfv /dist/* &&
cp --verbose -r /config/public/* /dist
# can't just ln to the dist folder, because quartz deletes it before rebuilding
volumeMounts: volumeMounts:
- name: vault - name: vault
mountPath: /vault mountPath: /vault
- name: dist - name: dist
mountPath: /dist mountPath: /dist
- name: config
mountPath: /config
restartPolicy: Never restartPolicy: Never
volumes: volumes: