Change 'vpn-pods' to 'qbittorrent' and move it inside the download ns

This commit is contained in:
SeanOMik 2023-04-08 14:54:22 -04:00
parent da721e4244
commit 0ffcd5414e
Signed by: SeanOMik
GPG Key ID: 568F326C7EB33ACB
8 changed files with 29 additions and 60 deletions

View File

@ -1,21 +1,21 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: vpn-pods name: qbittorrent
namespace: vpn namespace: download
labels: labels:
app: vpn-pods app: qbittorrent
kubernetes.io/name: "vpn-pods" kubernetes.io/name: "qbittorrent"
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
app: vpn-pods app: qbittorrent
template: template:
metadata: metadata:
labels: labels:
app: vpn-pods app: qbittorrent
spec: spec:
containers: containers:
- name: qbittorrent - name: qbittorrent

View File

@ -1,8 +1,8 @@
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:
name: vpn-pods-ingress name: qbittorrent-ingress
namespace: vpn namespace: download
annotations: annotations:
cert-manager.io/cluster-issuer: "letsencrypt-production" cert-manager.io/cluster-issuer: "letsencrypt-production"
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
@ -16,6 +16,6 @@ spec:
pathType: Prefix pathType: Prefix
backend: backend:
service: service:
name: vpn-pods name: qbittorrent
port: port:
name: http name: http

View File

@ -1,8 +1,8 @@
apiVersion: v1 apiVersion: v1
kind: Secret kind: Secret
metadata: metadata:
name: vpnconfig name: qbittorrent
namespace: vpn namespace: download
stringData: stringData:
VPN_SERVICE_PROVIDER: ENC[AES256_GCM,data:R8/w2f+rPQ==,iv:jy1iVRtJq9l/fYKjCdSrSneNZh8V9/LHVopGWdjtpNY=,tag:HkzAyAuflvqEcdHGF6jnfw==,type:str] VPN_SERVICE_PROVIDER: ENC[AES256_GCM,data:R8/w2f+rPQ==,iv:jy1iVRtJq9l/fYKjCdSrSneNZh8V9/LHVopGWdjtpNY=,tag:HkzAyAuflvqEcdHGF6jnfw==,type:str]
VPN_TYPE: ENC[AES256_GCM,data:Dff2qD9mAVX7,iv:jhLEkfAulvPxN/uRdSF3MR9GbxnRt2cSLqDOkXO7qPA=,tag:dMB6aEhwLssc3JPKdFULTQ==,type:str] VPN_TYPE: ENC[AES256_GCM,data:Dff2qD9mAVX7,iv:jhLEkfAulvPxN/uRdSF3MR9GbxnRt2cSLqDOkXO7qPA=,tag:dMB6aEhwLssc3JPKdFULTQ==,type:str]
@ -16,8 +16,8 @@ sops:
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: [] age: []
lastmodified: "2023-04-06T15:52:45Z" lastmodified: "2023-04-08T18:52:53Z"
mac: ENC[AES256_GCM,data:tXyfA8DwqQCjcG+Iah7BiO5y/jGAqiuqOBKebJHABKEjr44HnEKT+LnZFRPRVlIuZZ545ZeyU2Bzhpr6WBz6NVjk2b+ab+bHDYYOGMOwLAvXtLsNqhDXsRtqj9jfr5tubfRmAcMcdgCZE+qOlJt/yjRevzvUgs+cAtrO4xAcldU=,iv:YRNS67GjORbBBj8Fyps3PWzugzsDP1kFrR6/TiCSYe0=,tag:h3kFZuuKygDKWMp1htW66A==,type:str] mac: ENC[AES256_GCM,data:s8/Cii5c9LXJLN6WtBswLwd6UEJtxa48jVYyKFN014CAiP+hCyv0q17JMjXjrrQdpNZt3nXuhZRsIJiPg4p7jcz9wqdfLws5DFj5Je5ZuYD7KYWABMoiUnNHB6E7x/WU5A0JkFYDJbyALzifv8rNNAl8A14zkT3hfKEl/Lf4Z4g=,iv:A+aLnHYBvh2AO2crSNap1HtCjrInqAjbMhZvJ4ww6BQ=,tag:vysZl5tg3noWA+8DvEFRoQ==,type:str]
pgp: pgp:
- created_at: "2023-04-06T03:41:51Z" - created_at: "2023-04-06T03:41:51Z"
enc: | enc: |

View File

@ -0,0 +1,16 @@
apiVersion: v1
kind: Service
metadata:
name: qbittorrent
namespace: download
labels:
app: qbittorrent
kubernetes.io/name: "qbittorrent"
spec:
selector:
app: qbittorrent
ports:
- name: http
port: 8080
targetPort: 8080

View File

@ -1,6 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: vpn
labels:
name: vpn

View File

@ -1,25 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: deny-most-allow-some
namespace: vpn
spec:
# Apply to all pods in this namespace
podSelector: {}
ingress:
- from:
# Allow all pods in this namespace
- namespaceSelector:
matchLabels:
name: "vpn"
# - podSelector: {}
# Allow traefik pods
- namespaceSelector:
matchLabels:
name: "traefik"
# Allow all pods with this label
- podSelector:
matchLabels:
needsVPN: "yes"

View File

@ -1,16 +0,0 @@
apiVersion: v1
kind: Service
metadata:
name: vpn-pods
namespace: vpn
labels:
app: vpn-pods
kubernetes.io/name: "vpn-pods"
spec:
selector:
app: vpn-pods
ports:
- name: http
port: 8080
targetPort: 8080