diff --git a/manifests/_apps/twitter-to-airtable.yaml b/manifests/_apps/twitter-to-airtable.yaml new file mode 100644 index 0000000..d326961 --- /dev/null +++ b/manifests/_apps/twitter-to-airtable.yaml @@ -0,0 +1,28 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: twitter-to-airtable + namespace: argocd + finalizers: + - resources-finalizer.argocd.argoproj.io +spec: + project: cluster.fun + destination: + namespace: twitter-to-airtable + name: cluster-fun (scaleway) + source: + path: manifests/twitter-to-airtable + repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git" + targetRevision: HEAD + syncPolicy: + automated: {} + syncOptions: + - CreateNamespace=true + ignoreDifferences: + - kind: Secret + jsonPointers: + - /data + - group: apps + kind: Deployment + jqPathExpressions: + - .spec.template.spec.containers[]?.image diff --git a/manifests/twitter-to-airtable/twitter-to-airtable.yaml b/manifests/twitter-to-airtable/twitter-to-airtable.yaml new file mode 100644 index 0000000..ff6a4d9 --- /dev/null +++ b/manifests/twitter-to-airtable/twitter-to-airtable.yaml @@ -0,0 +1,141 @@ +apiVersion: v1 +kind: Secret +metadata: + name: docker-config + namespace: twitter-to-airtable + annotations: + kube-1password: i6ngbk5zf4k52xgwdwnfup5bby + kube-1password/vault: Kubernetes + kube-1password/secret-text-key: .dockerconfigjson +type: kubernetes.io/dockerconfigjson +data: + .dockerconfigjson: e30= +--- +apiVersion: v1 +kind: Secret +metadata: + name: twitter-to-airtable-auth + namespace: twitter-to-airtable + annotations: + kube-1password: mr6spkkx7n3memkbute6ojaarm + kube-1password/vault: Kubernetes +type: Opaque +--- +apiVersion: v1 +kind: Secret +metadata: + name: twitter-to-airtable + namespace: twitter-to-airtable + annotations: + kube-1password: 2fjbfe2titvezdh2ktsyhugatq + kube-1password/vault: Kubernetes + kube-1password/secret-text-parse: "true" +type: Opaque +--- +apiVersion: v1 +kind: Service +metadata: + name: twitter-to-airtable + namespace: twitter-to-airtable +spec: + type: ClusterIP + ports: + - port: 80 + targetPort: auth + name: web + selector: + app: twitter-to-airtable +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: twitter-to-airtable + namespace: twitter-to-airtable +spec: + replicas: 1 + selector: + matchLabels: + app: twitter-to-airtable + template: + metadata: + labels: + app: twitter-to-airtable + spec: + imagePullSecrets: + - name: docker-config + containers: + - args: + - --cookie-secure=false + - --provider=oidc + - --provider-display-name=Auth0 + - --upstream=http://localhost:8080 + - --http-address=$(HOST_IP):8000 + - --redirect-url=https://twitter-to-airtable.cluster.fun/oauth2/callback + - --email-domain=marcusnoble.co.uk + - --pass-basic-auth=false + - --pass-access-token=false + - --oidc-issuer-url=https://marcusnoble.eu.auth0.com/ + - --cookie-secret=KDGD6rrK6cBmryyZ4wcJ9xAUNW9AQNFT + env: + - name: HOST_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OAUTH2_PROXY_CLIENT_ID + valueFrom: + secretKeyRef: + key: username + name: twitter-to-airtable-auth + - name: OAUTH2_PROXY_CLIENT_SECRET + valueFrom: + secretKeyRef: + key: password + name: twitter-to-airtable-auth + image: quay.io/oauth2-proxy/oauth2-proxy:v7.2.1 + name: oauth-proxy + ports: + - containerPort: 8000 + protocol: TCP + name: auth + resources: + limits: + memory: 50Mi + requests: + memory: 50Mi + - name: web + image: docker.cluster.fun/private/twitter-to-airtable:latest + imagePullPolicy: Always + env: + - name: PORT + value: "8080" + ports: + - containerPort: 8080 + name: web + +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: twitter-to-airtable + namespace: twitter-to-airtable + annotations: + cert-manager.io/cluster-issuer: letsencrypt + nginx.ingress.kubernetes.io/force-ssl-redirect: "true" +spec: + ingressClassName: nginx + tls: + - hosts: + - twitter-to-airtable.cluster.fun + secretName: twitter-to-airtable-ingress + rules: + - host: twitter-to-airtable.cluster.fun + http: + paths: + - path: / + pathType: ImplementationSpecific + backend: + service: + name: twitter-to-airtable + port: + number: 80