Add whoami

flux/cluster/apps/misc/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - pinbot
   - registry-creds.yaml
+  - whoami

flux/cluster/apps/misc/whoami/deployment.yaml

@@ -0,0 +1,25 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: whoami-deployment
+  namespace: misc
+  labels:
+    app: whoami-deployment
+    keel.sh/policy: force
+    keel.sh/match-tag: "true"
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: whoami-deployment
+  template:
+    metadata:
+      labels:
+        app: whoami-deployment
+    spec:
+      containers:
+        - name: whoami-deployment
+          imagePullPolicy: Always
+          image: containous/whoami
+          ports:
+            - containerPort: 80

flux/cluster/apps/misc/whoami/ingress.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: whoami-deployment-ingress
+  namespace: misc
+spec:
+  rules:
+    - host: "whoami.asraphiel.dev"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: whoami-deployment-service
+                port:
+                  number: 80

flux/cluster/apps/misc/whoami/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - deployment.yaml
+  - ingress.yaml
+  - service.yaml

flux/cluster/apps/misc/whoami/service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: whoami-deployment-service
+  namespace: misc
+spec:
+  selector:
+    app: whoami-deployment
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 80

flux/cluster/apps/networking/traefik/helm.yaml

@@ -27,9 +27,9 @@ spec:
     globalArguments: []
     additionalArguments:
       - "--entryPoints.web.forwardedHeaders.insecure=true"
-      - "--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32,10.42.0.0/16"
+      - "--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32,10.0.0.0/8"
       - "--entryPoints.websecure.forwardedHeaders.insecure=true"
-      - "--entryPoints.websecure.forwardedHeaders.trustedIPs=127.0.0.1/32,10.42.0.0/16"
+      - "--entryPoints.websecure.forwardedHeaders.trustedIPs=127.0.0.1/32,10.0.0.0/8"
     ports:
       traefik:
         port: 9000

nixos/machines/nginx/default.nix

@@ -64,6 +64,7 @@ in {
     virtualHosts."vaultwarden.asraphiel.dev" =
       proxy "http://vaultwarden.lxd:8000/";
     virtualHosts."analytics.asraphiel.dev" = k8sProxy;
+    virtualHosts."whoami.asraphiel.dev" = k8sProxy;
 
     virtualHosts."groenehartansichtkaarten.nl" = k8sProxy;
     virtualHosts."ansichtkaarten.asraphiel.dev" = k8sProxy;
@@ -79,6 +80,8 @@ in {
       globalRedirect = "galerievanslagmaat.nl";
     };
 
+    virtualHosts."test.asraphiel.dev" = proxy "http://hosting-test.lxd:8080/";
+
   };
 
   security.acme.email = "acme@voidcorp.nl";