add config for cluster
This commit is contained in:
27
clusters/ontime-dev-doks/configs/cluster-issuer.yaml
Normal file
27
clusters/ontime-dev-doks/configs/cluster-issuer.yaml
Normal file
@@ -0,0 +1,27 @@
|
|||||||
|
apiVersion: cert-manager.io/v1
|
||||||
|
kind: ClusterIssuer
|
||||||
|
metadata:
|
||||||
|
name: lets-encrypt-staging
|
||||||
|
spec:
|
||||||
|
acme:
|
||||||
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
||||||
|
privateKeySecretRef:
|
||||||
|
name: lets-encrypt-staging-account-key
|
||||||
|
solvers:
|
||||||
|
- http01:
|
||||||
|
ingress:
|
||||||
|
ingressClassName: nginx
|
||||||
|
---
|
||||||
|
apiVersion: cert-manager.io/v1
|
||||||
|
kind: ClusterIssuer
|
||||||
|
metadata:
|
||||||
|
name: lets-encrypt-prod
|
||||||
|
spec:
|
||||||
|
acme:
|
||||||
|
server: https://acme-v02.api.letsencrypt.org/directory
|
||||||
|
privateKeySecretRef:
|
||||||
|
name: lets-encrypt-prod-account-key
|
||||||
|
solvers:
|
||||||
|
- http01:
|
||||||
|
ingress:
|
||||||
|
ingressClassName: nginx
|
||||||
5
clusters/ontime-dev-doks/configs/kustomization.yaml
Normal file
5
clusters/ontime-dev-doks/configs/kustomization.yaml
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
resources:
|
||||||
|
- cluster-issuer.yaml
|
||||||
|
- storageclass.yaml
|
||||||
19
clusters/ontime-dev-doks/configs/storageclass.yaml
Normal file
19
clusters/ontime-dev-doks/configs/storageclass.yaml
Normal file
@@ -0,0 +1,19 @@
|
|||||||
|
---
|
||||||
|
kind: StorageClass
|
||||||
|
apiVersion: storage.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: csi-s3
|
||||||
|
provisioner: ru.yandex.s3.csi
|
||||||
|
parameters:
|
||||||
|
mounter: geesefs
|
||||||
|
# you can set mount options here, for example limit memory cache size (recommended)
|
||||||
|
options: "--memory-limit 1000 --dir-mode 0777 --file-mode 0666"
|
||||||
|
bucket: stages-volume
|
||||||
|
csi.storage.k8s.io/provisioner-secret-name: csi-s3-secret
|
||||||
|
csi.storage.k8s.io/provisioner-secret-namespace: csi-s3
|
||||||
|
csi.storage.k8s.io/controller-publish-secret-name: csi-s3-secret
|
||||||
|
csi.storage.k8s.io/controller-publish-secret-namespace: csi-s3
|
||||||
|
csi.storage.k8s.io/node-stage-secret-name: csi-s3-secret
|
||||||
|
csi.storage.k8s.io/node-stage-secret-namespace: csi-s3
|
||||||
|
csi.storage.k8s.io/node-publish-secret-name: csi-s3-secret
|
||||||
|
csi.storage.k8s.io/node-publish-secret-namespace: csi-s3
|
||||||
Reference in New Issue
Block a user