unkin-agent
200a241d42
Add apps/base/repospawner with namespace, service account, job-spawning RBAC, the server Deployment, oauth2-proxy front door, internal and external gateways, and the VaultStaticSecrets backing them. Register the overlay in the platform ApplicationSet and AppProject.
37 lines
686 B
YAML
37 lines
686 B
YAML
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: repospawner
|
|
namespace: repospawner
|
|
spec:
|
|
internalTrafficPolicy: Cluster
|
|
ports:
|
|
- name: http
|
|
port: 8080
|
|
protocol: TCP
|
|
targetPort: http
|
|
selector:
|
|
app: repospawner
|
|
sessionAffinity: None
|
|
type: ClusterIP
|
|
---
|
|
# Front-door entry Service: both HTTPRoutes target this; all traffic enters via
|
|
# oauth2-proxy.
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: repospawner-oauth2
|
|
namespace: repospawner
|
|
spec:
|
|
internalTrafficPolicy: Cluster
|
|
ports:
|
|
- name: http
|
|
port: 4180
|
|
protocol: TCP
|
|
targetPort: http
|
|
selector:
|
|
app: repospawner-oauth2
|
|
sessionAffinity: None
|
|
type: ClusterIP
|