Change 'vpn-pods' to 'qbittorrent' and move it inside the download ns
This commit is contained in:
parent
da721e4244
commit
0ffcd5414e
|
@ -1,21 +1,21 @@
|
||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
name: vpn-pods
|
name: qbittorrent
|
||||||
namespace: vpn
|
namespace: download
|
||||||
|
|
||||||
labels:
|
labels:
|
||||||
app: vpn-pods
|
app: qbittorrent
|
||||||
kubernetes.io/name: "vpn-pods"
|
kubernetes.io/name: "qbittorrent"
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: vpn-pods
|
app: qbittorrent
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: vpn-pods
|
app: qbittorrent
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: qbittorrent
|
- name: qbittorrent
|
|
@ -1,8 +1,8 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
name: vpn-pods-ingress
|
name: qbittorrent-ingress
|
||||||
namespace: vpn
|
namespace: download
|
||||||
annotations:
|
annotations:
|
||||||
cert-manager.io/cluster-issuer: "letsencrypt-production"
|
cert-manager.io/cluster-issuer: "letsencrypt-production"
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||||
|
@ -16,6 +16,6 @@ spec:
|
||||||
pathType: Prefix
|
pathType: Prefix
|
||||||
backend:
|
backend:
|
||||||
service:
|
service:
|
||||||
name: vpn-pods
|
name: qbittorrent
|
||||||
port:
|
port:
|
||||||
name: http
|
name: http
|
|
@ -1,8 +1,8 @@
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Secret
|
kind: Secret
|
||||||
metadata:
|
metadata:
|
||||||
name: vpnconfig
|
name: qbittorrent
|
||||||
namespace: vpn
|
namespace: download
|
||||||
stringData:
|
stringData:
|
||||||
VPN_SERVICE_PROVIDER: ENC[AES256_GCM,data:R8/w2f+rPQ==,iv:jy1iVRtJq9l/fYKjCdSrSneNZh8V9/LHVopGWdjtpNY=,tag:HkzAyAuflvqEcdHGF6jnfw==,type:str]
|
VPN_SERVICE_PROVIDER: ENC[AES256_GCM,data:R8/w2f+rPQ==,iv:jy1iVRtJq9l/fYKjCdSrSneNZh8V9/LHVopGWdjtpNY=,tag:HkzAyAuflvqEcdHGF6jnfw==,type:str]
|
||||||
VPN_TYPE: ENC[AES256_GCM,data:Dff2qD9mAVX7,iv:jhLEkfAulvPxN/uRdSF3MR9GbxnRt2cSLqDOkXO7qPA=,tag:dMB6aEhwLssc3JPKdFULTQ==,type:str]
|
VPN_TYPE: ENC[AES256_GCM,data:Dff2qD9mAVX7,iv:jhLEkfAulvPxN/uRdSF3MR9GbxnRt2cSLqDOkXO7qPA=,tag:dMB6aEhwLssc3JPKdFULTQ==,type:str]
|
||||||
|
@ -16,8 +16,8 @@ sops:
|
||||||
azure_kv: []
|
azure_kv: []
|
||||||
hc_vault: []
|
hc_vault: []
|
||||||
age: []
|
age: []
|
||||||
lastmodified: "2023-04-06T15:52:45Z"
|
lastmodified: "2023-04-08T18:52:53Z"
|
||||||
mac: ENC[AES256_GCM,data:tXyfA8DwqQCjcG+Iah7BiO5y/jGAqiuqOBKebJHABKEjr44HnEKT+LnZFRPRVlIuZZ545ZeyU2Bzhpr6WBz6NVjk2b+ab+bHDYYOGMOwLAvXtLsNqhDXsRtqj9jfr5tubfRmAcMcdgCZE+qOlJt/yjRevzvUgs+cAtrO4xAcldU=,iv:YRNS67GjORbBBj8Fyps3PWzugzsDP1kFrR6/TiCSYe0=,tag:h3kFZuuKygDKWMp1htW66A==,type:str]
|
mac: ENC[AES256_GCM,data:s8/Cii5c9LXJLN6WtBswLwd6UEJtxa48jVYyKFN014CAiP+hCyv0q17JMjXjrrQdpNZt3nXuhZRsIJiPg4p7jcz9wqdfLws5DFj5Je5ZuYD7KYWABMoiUnNHB6E7x/WU5A0JkFYDJbyALzifv8rNNAl8A14zkT3hfKEl/Lf4Z4g=,iv:A+aLnHYBvh2AO2crSNap1HtCjrInqAjbMhZvJ4ww6BQ=,tag:vysZl5tg3noWA+8DvEFRoQ==,type:str]
|
||||||
pgp:
|
pgp:
|
||||||
- created_at: "2023-04-06T03:41:51Z"
|
- created_at: "2023-04-06T03:41:51Z"
|
||||||
enc: |
|
enc: |
|
|
@ -0,0 +1,16 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: qbittorrent
|
||||||
|
namespace: download
|
||||||
|
|
||||||
|
labels:
|
||||||
|
app: qbittorrent
|
||||||
|
kubernetes.io/name: "qbittorrent"
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: qbittorrent
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
port: 8080
|
||||||
|
targetPort: 8080
|
|
@ -1,6 +0,0 @@
|
||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: vpn
|
|
||||||
labels:
|
|
||||||
name: vpn
|
|
|
@ -1,25 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: NetworkPolicy
|
|
||||||
metadata:
|
|
||||||
name: deny-most-allow-some
|
|
||||||
namespace: vpn
|
|
||||||
spec:
|
|
||||||
# Apply to all pods in this namespace
|
|
||||||
podSelector: {}
|
|
||||||
ingress:
|
|
||||||
- from:
|
|
||||||
# Allow all pods in this namespace
|
|
||||||
- namespaceSelector:
|
|
||||||
matchLabels:
|
|
||||||
name: "vpn"
|
|
||||||
# - podSelector: {}
|
|
||||||
|
|
||||||
# Allow traefik pods
|
|
||||||
- namespaceSelector:
|
|
||||||
matchLabels:
|
|
||||||
name: "traefik"
|
|
||||||
|
|
||||||
# Allow all pods with this label
|
|
||||||
- podSelector:
|
|
||||||
matchLabels:
|
|
||||||
needsVPN: "yes"
|
|
|
@ -1,16 +0,0 @@
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: vpn-pods
|
|
||||||
namespace: vpn
|
|
||||||
|
|
||||||
labels:
|
|
||||||
app: vpn-pods
|
|
||||||
kubernetes.io/name: "vpn-pods"
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: vpn-pods
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
port: 8080
|
|
||||||
targetPort: 8080
|
|
Loading…
Reference in New Issue