feat: split up kubernetes yamls
This commit is contained in:
parent
a9a4e912f4
commit
6db804cdc1
3 changed files with 55 additions and 31 deletions
|
|
@ -1,33 +1,3 @@
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: minecraft-ingress
|
|
||||||
namespace: default
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
namespace: default
|
|
||||||
name: minecraft-ingress
|
|
||||||
rules:
|
|
||||||
- apiGroups: ["apps", ""] # "" indicates the core API group
|
|
||||||
resources: ["pods","deployments","services"]
|
|
||||||
verbs: ["get", "list", "patch", "watch"]
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: minecraft-ingress
|
|
||||||
namespace: default
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: minecraft-ingress
|
|
||||||
namespace: default
|
|
||||||
roleRef:
|
|
||||||
kind: Role
|
|
||||||
name: minecraft-ingress
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
---
|
|
||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
|
|
@ -48,7 +18,7 @@ spec:
|
||||||
terminationGracePeriodSeconds: 5
|
terminationGracePeriodSeconds: 5
|
||||||
containers:
|
containers:
|
||||||
- name: minecraft-ingress
|
- name: minecraft-ingress
|
||||||
image: git.tami.moe/tamipes/minecraft-ingress:latest
|
image: git.tami.moe/tamipes/minecraft-ingress:testing
|
||||||
env:
|
env:
|
||||||
- name: FILTER_CONN
|
- name: FILTER_CONN
|
||||||
value: '(addr == "87.229.85.222") || (addr == "") || (addr == "ogmur.xyz") || (addr == "@mat:matdoes.dev (hi honeypots) ") || (addr == "@mat:matdoes.dev ") || (addr == "slowstack.tv")'
|
value: '(addr == "87.229.85.222") || (addr == "") || (addr == "ogmur.xyz") || (addr == "@mat:matdoes.dev (hi honeypots) ") || (addr == "@mat:matdoes.dev ") || (addr == "slowstack.tv")'
|
||||||
29
kube/rbac.yaml
Normal file
29
kube/rbac.yaml
Normal file
|
|
@ -0,0 +1,29 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: minecraft-ingress
|
||||||
|
namespace: default
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
namespace: default
|
||||||
|
name: minecraft-ingress
|
||||||
|
rules:
|
||||||
|
- apiGroups: ["apps", ""] # "" indicates the core API group
|
||||||
|
resources: ["pods","deployments","services"]
|
||||||
|
verbs: ["get", "list", "patch", "watch"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: minecraft-ingress
|
||||||
|
namespace: default
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: minecraft-ingress
|
||||||
|
namespace: default
|
||||||
|
roleRef:
|
||||||
|
kind: Role
|
||||||
|
name: minecraft-ingress
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
25
kube/test-deployment.yaml
Normal file
25
kube/test-deployment.yaml
Normal file
|
|
@ -0,0 +1,25 @@
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: minecraft-ingress
|
||||||
|
labels:
|
||||||
|
app: minecraft-ingress
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: minecraft-ingress
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: minecraft-ingress
|
||||||
|
spec:
|
||||||
|
serviceAccountName: minecraft-ingress
|
||||||
|
terminationGracePeriodSeconds: 5
|
||||||
|
containers:
|
||||||
|
- name: minecraft-ingress
|
||||||
|
image: git.tami.moe/tamipes/minecraft-ingress:testing
|
||||||
|
env:
|
||||||
|
- name: FILTER_CONN
|
||||||
|
value: '(addr == "87.229.85.222") || (addr == "") || (addr == "ogmur.xyz") || (addr == "@mat:matdoes.dev (hi honeypots) ") || (addr == "@mat:matdoes.dev ") || (addr == "slowstack.tv")'
|
||||||
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue