summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPatrick Spek <p.spek@tyil.nl>2023-04-05 15:23:28 +0200
committerPatrick Spek <p.spek@tyil.nl>2023-04-05 15:23:28 +0200
commitc5cc90ca1f28be071cb56566d6299266810150b3 (patch)
treeeaf3f40fe20e7c5799b6055eb81095a24b9502ce
parentb9010cebcf5a4403c53c9622d7aa66dece4c782f (diff)
Deploy invidious to hurzak
-rw-r--r--data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml34
-rw-r--r--data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml31
-rw-r--r--data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml21
-rw-r--r--data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml24
4 files changed, 110 insertions, 0 deletions
diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml
new file mode 100644
index 0000000..66c7912
--- /dev/null
+++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: invidious
+ namespace: public-services
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/created-by: tyil
+ app.kubernetes.io/managed-by: manual
+ app.kubernetes.io/name: invidious
+ app.kubernetes.io/part-of: public-services
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/created-by: tyil
+ app.kubernetes.io/managed-by: manual
+ app.kubernetes.io/name: invidious
+ app.kubernetes.io/part-of: public-services
+ spec:
+ containers:
+ - name: invidious
+ image: quay.io/invidious/invidious:latest
+ ports:
+ - containerPort: 8080
+ env:
+ - name: INVIDIOUS_CONFIG
+ valueFrom:
+ secretKeyRef:
+ name: invidious-config
+ key: config.yml
+...
diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml
new file mode 100644
index 0000000..cb675a9
--- /dev/null
+++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: invidious
+ namespace: public-services
+ annotations:
+ cert-manager.io/cluster-issuer: "letsencrypt-production"
+ labels:
+ app.kubernetes.io/created-by: tyil
+ app.kubernetes.io/managed-by: manual
+ app.kubernetes.io/name: invidious
+ app.kubernetes.io/part-of: public-services
+spec:
+ ingressClassName: "traefik"
+ tls:
+ - hosts:
+ - youtube.alt.tyil.nl
+ secretName: tls-nl.tyil.alt.youtube
+ rules:
+ - host: youtube.alt.tyil.nl
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: invidious-http
+ port:
+ number: 80
+...
diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml
new file mode 100644
index 0000000..013d172
--- /dev/null
+++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml
@@ -0,0 +1,21 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+ creationTimestamp: null
+ name: invidious-config
+ namespace: public-services
+spec:
+ encryptedData:
+ config.yml: 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
+ template:
+ metadata:
+ creationTimestamp: null
+ labels:
+ app.kubernetes.io/created-by: tyil
+ app.kubernetes.io/managed-by: manual
+ app.kubernetes.io/name: invidious-config
+ app.kubernetes.io/part-of: invidious
+ name: invidious-config
+ namespace: public-services
+ type: Opaque
+
diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml
new file mode 100644
index 0000000..e4f95be
--- /dev/null
+++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml
@@ -0,0 +1,24 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+ # Funfact: if this name is set to "invidious", things will break!
+ # https://github.com/iv-org/invidious/issues/2970
+ name: invidious-http
+ namespace: public-services
+ labels:
+ app.kubernetes.io/created-by: tyil
+ app.kubernetes.io/managed-by: manual
+ app.kubernetes.io/name: invidious
+ app.kubernetes.io/part-of: public-services
+spec:
+ selector:
+ app.kubernetes.io/created-by: tyil
+ app.kubernetes.io/managed-by: manual
+ app.kubernetes.io/name: invidious
+ app.kubernetes.io/part-of: public-services
+ ports:
+ - protocol: TCP
+ port: 80
+ targetPort: 3000
+...