apiVersion: v1
kind: ServiceAccount
metadata:
  name: minecraft-ingress
  namespace: default
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: default
  name: minecraft-ingress
rules:
- apiGroups: ["apps", ""] # "" indicates the core API group
  resources: ["pods","deployments","services"]
  verbs: ["get", "list", "patch", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: minecraft-ingress
  namespace: default
subjects:
- kind: ServiceAccount
  name: minecraft-ingress
  namespace: default
roleRef:
  kind: Role
  name: minecraft-ingress
  apiGroup: rbac.authorization.k8s.io
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: minecraft-ingress
  labels:
    app: minecraft-ingress
spec:
  replicas: 1
  selector:
    matchLabels:
      app: minecraft-ingress
  template:
    metadata:
      labels:
        app: minecraft-ingress
    spec:
      serviceAccountName: minecraft-ingress
      terminationGracePeriodSeconds: 5
      containers:
      - name: minecraft-ingress
        image: git.tami.moe/tamipes/minecraft-ingress:latest
        env:
        - name: FILTER_CONN
          value: '(addr == "87.229.85.222") || (addr == "") || (addr == "ogmur.xyz") || (addr == "@mat:matdoes.dev (hi honeypots) ") || (addr == "@mat:matdoes.dev ") || (addr == "slowstack.tv")'
---
apiVersion: v1
kind: Service
metadata:
  name: minecraft-ingress
  labels:
    app: minecraft-ingress
spec:
  ports:
  - name: minecraft-ingress
    port: 25565
    nodePort: 30565
  selector:
    app: minecraft-ingress
  type: NodePort