Merge pull request 'new file: akashop/deployment.yml' (#1) from k8s into main

Reviewed-on: #1

akashop/deployment.yml

@@ -0,0 +1,108 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wp 
+  namespace: akashop
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: wp
+  template:
+    metadata:
+      labels:
+        app: wp
+    spec:
+      containers:
+      - name: wp
+        image: wordpress
+        imagePullPolicy: Always
+        resources:
+          limits:
+            cpu: "1"
+            memory: "1Gi"
+          requests:
+            cpu: "0.5"
+            memory: "200Mi"
+        ports:
+        - name: http
+          containerPort: 80
+        env: 
+          - name: WORDPRESS_DB_HOST 
+            value: "db" 
+          - name: WORDPRESS_DB_USER
+            value: "wordpress"
+          - name: WORDPRESS_DB_PASSWORD
+            value: "examplepass"
+          - name: WORDPRESS_DB_NAME
+            value: "wordpress"
+          # - name: secret
+          #   valueFrom: # Specify value from a secret (more secure)
+          #     secretKeyRef:
+          #       name: my-secret # Name of the secret containing the variable
+          #       key: VAR2_KEY
+        # livenessProbe:
+        #   httpGet:
+        #     path: /
+        #     port: 80
+        #   initialDelaySeconds: 5
+        #   periodSeconds: 10
+        volumeMounts:
+          - name: wp-data
+            mountPath: /var/www/html
+      volumes:
+        - name: wp-data
+          persistentVolumeClaim:
+            claimName: wp-data-pvc
+
+---
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: db 
+  namespace: akashop
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: db
+  template:
+    metadata:
+      labels:
+        app: db
+    spec:
+      containers:
+      - name: db
+        image: mysql
+        imagePullPolicy: Always
+        resources:
+          limits:
+            cpu: "1"
+            memory: "1Gi"
+          requests:
+            cpu: "0.5"
+            memory: "200Mi"
+        ports:
+        - containerPort: 3306
+        env: 
+          - name: MYSQL_DATABASE 
+            value: "wordpress" 
+          - name: MYSQL_USER
+            value: "wordpress"
+          - name: MYSQL_PASSWORD
+            value: "examplepass"
+          - name: MYSQL_RANDOM_ROOT_PASSWORD
+            value: "1"
+          # - name: secret
+          #   valueFrom: # Specify value from a secret (more secure)
+          #     secretKeyRef:
+          #       name: my-secret # Name of the secret containing the variable
+          #       key: VAR2_KEY
+        volumeMounts:
+          - name: db-data
+            mountPath: /var/lib/mysql
+      volumes:
+        - name: db-data
+          persistentVolumeClaim:
+            claimName: db-data-pvc

akashop/ingress.yml

@@ -0,0 +1,65 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: wp-https
+  namespace: akashop
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.tls.certresolver: le
+spec:
+  rules:
+  - host: whoami.172.233.168.9.nip.io
+    http:
+      paths:
+      - path: / 
+        pathType: Prefix
+        backend:
+          service: 
+            name: wp
+            port:
+              number: 80 
+
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: wp-http
+  namespace: akashop
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: web
+spec:
+  rules:
+  - host: whoami.172.233.168.9.nip.io
+    http:
+      paths:
+      - path: / 
+        pathType: Prefix
+        backend:
+          service: 
+            name: wp
+            port:
+              number: 80 
+
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: wp-origin
+  namespace: akashop
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: web
+spec:
+  rules:
+  - host: origin-akashop.akamai-lab.com
+    http:
+      paths:
+      - path: / 
+        pathType: Prefix
+        backend:
+          service: 
+            name: wp
+            port:
+              number: 80 

akashop/nginx-ext.yml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx
+  namespace: akashop
+spec:
+  type: ExternalName
+  externalName: nginx.nginx.svc.cluster.local
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP

akashop/pv.yml

@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: wp-data
+  namespace: akashop
+spec:
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Recycle
+  storageClassName: ""
+  nfs:
+    path: /nfs/share/akashop/volumes/wp
+    server: 10.0.0.5
+
+---
+
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: db-data
+  namespace: akashop
+spec:
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Recycle
+  storageClassName: ""
+  nfs:
+    path: /nfs/share/akashop/volumes/db
+    server: 10.0.0.5

akashop/pvc.yml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: wp-data-pvc
+spec:
+  accessModes:
+    - ReadWriteMany
+  volumeMode: Filesystem
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 1Gi
+  volumeName: wp-data
+
+---
+
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: db-data-pvc
+spec:
+  accessModes:
+    - ReadWriteMany
+  volumeMode: Filesystem
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 1Gi
+  volumeName: db-data

akashop/service.yml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: wp
+  namespace: akashop
+spec:
+  selector:
+    app: wp
+  ports:
+  - protocol: TCP
+    port: 80
+    targetPort: http
+  type: ClusterIP
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: db
+  namespace: akashop
+spec:
+  selector:
+    app: db
+  ports:
+  - protocol: TCP
+    port: 3306
+    targetPort: 3306
+  type: ClusterIP

traefik/00-account.yml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: traefik-account

traefik/00-role.yml

@@ -0,0 +1,33 @@
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: traefik-role
+
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - services
+      - endpoints
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses
+      - ingressclasses
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses/status
+    verbs:
+      - update

traefik/01-role-binding.yml

@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: traefik-role-binding
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: traefik-role
+subjects:
+  - kind: ServiceAccount
+    name: traefik-account
+    # namespace: traefik
+    namespace: akashop

traefik/02-traefik-services.yml

@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-dashboard-service
+
+spec:
+  type: LoadBalancer
+  ports:
+    - port: 8080
+      targetPort: dashboard
+  selector:
+    app: traefik
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-web
+
+spec:
+  type: LoadBalancer
+  ports:
+    - name: http
+      targetPort: web
+      port: 80
+    - name: https
+      targetPort: websecure
+      port: 443
+  selector:
+    app: traefik

traefik/02-traefik.yml

@@ -0,0 +1,42 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: traefik-deployment
+  labels:
+    app: traefik
+
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: traefik
+  template:
+    metadata:
+      labels:
+        app: traefik
+    spec:
+      serviceAccountName: traefik-account
+      containers:
+        - name: traefik
+          image: traefik:latest
+          args:
+            - --api.insecure
+            - --accesslog
+            - --log.level=DEBUG
+            - --providers.kubernetesingress
+            - --providers.kubernetesingress.allowexternalnameservices=true
+            # - --providers.kubernetescrd
+            # - --providers.kubernetescrd.allowCrossNamespace=true
+            - --entrypoints.web.address=:80
+            - --entrypoints.websecure.address=:443
+            - --certificatesresolvers.le.acme.email=learn@akamai.com
+            - --certificatesresolvers.le.acme.storage=acme.json
+            - --certificatesresolvers.le.acme.tlschallenge=true
+            - --certificatesresolvers.le.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory
+          ports:
+            - name: web
+              containerPort: 80
+            - name: websecure
+              containerPort: 443
+            - name: dashboard
+              containerPort: 8080