fixes
This commit is contained in:
parent
7c734db80a
commit
9ea515e140
@ -8,7 +8,7 @@ resources:
|
|||||||
- nginx.deployment.yaml
|
- nginx.deployment.yaml
|
||||||
- nginx.service.yaml
|
- nginx.service.yaml
|
||||||
- nginx-auth.sealedsecret.yaml
|
- nginx-auth.sealedsecret.yaml
|
||||||
# - nginx.ingress.yaml
|
- nginx.ingress.yaml
|
||||||
- quartz-build.cronjob.yaml
|
- quartz-build.cronjob.yaml
|
||||||
- s3-credentials.sealedsecret.yaml
|
- s3-credentials.sealedsecret.yaml
|
||||||
|
|
||||||
@ -28,4 +28,6 @@ images:
|
|||||||
newName: public.ecr.aws/aws-cli/aws-cli
|
newName: public.ecr.aws/aws-cli/aws-cli
|
||||||
newTag: latest
|
newTag: latest
|
||||||
|
|
||||||
|
- name: nginx
|
||||||
|
newName: nginx
|
||||||
|
newTag: "1.25"
|
||||||
|
@ -1,18 +1,18 @@
|
|||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
name: quartz-physics
|
name: quartz
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: quartz-physics
|
app: quartz
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: quartz-physics
|
app: quartz
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: quartz-physics
|
- name: quartz
|
||||||
image: nginx
|
image: nginx
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
@ -22,12 +22,12 @@ spec:
|
|||||||
- containerPort: 80
|
- containerPort: 80
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /usr/share/nginx/html
|
- mountPath: /usr/share/nginx/html
|
||||||
name: quartz-physics
|
name: quartz
|
||||||
- mountPath: /etc/nginx/nginx.conf
|
- mountPath: /etc/nginx/nginx.conf
|
||||||
subPath: nginx.conf
|
subPath: nginx.conf
|
||||||
name: nginx
|
name: nginx
|
||||||
volumes:
|
volumes:
|
||||||
- name: quartz-physics
|
- name: quartz
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: quartz-nfs
|
claimName: quartz-nfs
|
||||||
- name: nginx
|
- name: nginx
|
||||||
|
@ -1,17 +1,17 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.containo.us/v1alpha1
|
||||||
kind: IngressRoute
|
kind: IngressRoute
|
||||||
metadata:
|
metadata:
|
||||||
name: quartz-physics-ingress
|
name: quartz-ingress
|
||||||
spec:
|
spec:
|
||||||
entryPoints:
|
entryPoints:
|
||||||
- websecure
|
- websecure
|
||||||
routes:
|
routes:
|
||||||
- match: Host(`physics.kluster.moll.re`)
|
- match: Host(`physics.kluster.moll.re`)
|
||||||
middlewares:
|
middlewares:
|
||||||
- name: quartz-physics-auth
|
- name: quartz-auth
|
||||||
kind: Rule
|
kind: Rule
|
||||||
services:
|
services:
|
||||||
- name: quartz-physics-web
|
- name: quartz-web
|
||||||
port: 80
|
port: 80
|
||||||
tls:
|
tls:
|
||||||
certResolver: default-tls
|
certResolver: default-tls
|
||||||
@ -20,7 +20,7 @@ spec:
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.containo.us/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: quartz-physics-auth
|
name: quartz-auth
|
||||||
spec:
|
spec:
|
||||||
basicAuth:
|
basicAuth:
|
||||||
secret: nginx-auth
|
secret: nginx-auth
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: quartz-physics-web
|
name: quartz-web
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
app: quartz-physics
|
app: quartz
|
||||||
ports:
|
ports:
|
||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 80
|
port: 80
|
||||||
|
@ -27,7 +27,7 @@ spec:
|
|||||||
- name: S3_REGION
|
- name: S3_REGION
|
||||||
value: us-west-1
|
value: us-west-1
|
||||||
command: ["/bin/sh", "-c"]
|
command: ["/bin/sh", "-c"]
|
||||||
args: ["aws --endpoint-url https://s3.kluster.moll.re s3 sync s3://$S3_BUCKET /config"]
|
args: ["aws --endpoint-url https://s3.kluster.moll.re s3 sync s3://$S3_BUCKET /vault"]
|
||||||
|
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: vault
|
- name: vault
|
||||||
@ -49,20 +49,22 @@ spec:
|
|||||||
- name: quartz-build
|
- name: quartz-build
|
||||||
image: node
|
image: node
|
||||||
command: ["/bin/sh", "-c"]
|
command: ["/bin/sh", "-c"]
|
||||||
args:
|
args:
|
||||||
- cd /config &&
|
- >-
|
||||||
- ln -s /vault content
|
cd /config &&
|
||||||
- npm ci &&
|
ln -s /vault content &&
|
||||||
- npx quartz build &&
|
npm ci &&
|
||||||
- rm -rfv /dist/* &&
|
npx quartz build &&
|
||||||
- cp --verbose -r public/* /dist
|
rm -rfv /dist/* &&
|
||||||
|
cp --verbose -r /config/public/* /dist
|
||||||
|
# can't just ln to the dist folder, because quartz deletes it before rebuilding
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: vault
|
- name: vault
|
||||||
mountPath: /vault
|
mountPath: /vault
|
||||||
- name: dist
|
- name: dist
|
||||||
mountPath: /dist
|
mountPath: /dist
|
||||||
|
- name: config
|
||||||
|
mountPath: /config
|
||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user