From c5cc90ca1f28be071cb56566d6299266810150b3 Mon Sep 17 00:00:00 2001 From: Patrick Spek Date: Wed, 5 Apr 2023 15:23:28 +0200 Subject: Deploy invidious to hurzak --- .../public-services/invidious/deployment.yaml | 34 ++++++++++++++++++++++ .../public-services/invidious/ingress.yaml | 31 ++++++++++++++++++++ .../public-services/invidious/sealed-secret.yaml | 21 +++++++++++++ .../public-services/invidious/service.yaml | 24 +++++++++++++++ 4 files changed, 110 insertions(+) create mode 100644 data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml create mode 100644 data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml create mode 100644 data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml create mode 100644 data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml (limited to 'data.d/k3s-hurzak/manifests.d/public-services') diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml new file mode 100644 index 0000000..66c7912 --- /dev/null +++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/deployment.yaml @@ -0,0 +1,34 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: invidious + namespace: public-services +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/created-by: tyil + app.kubernetes.io/managed-by: manual + app.kubernetes.io/name: invidious + app.kubernetes.io/part-of: public-services + template: + metadata: + labels: + app.kubernetes.io/created-by: tyil + app.kubernetes.io/managed-by: manual + app.kubernetes.io/name: invidious + app.kubernetes.io/part-of: public-services + spec: + containers: + - name: invidious + image: quay.io/invidious/invidious:latest + ports: + - containerPort: 8080 + env: + - name: INVIDIOUS_CONFIG + valueFrom: + secretKeyRef: + name: invidious-config + key: config.yml +... diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml new file mode 100644 index 0000000..cb675a9 --- /dev/null +++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/ingress.yaml @@ -0,0 +1,31 @@ +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: invidious + namespace: public-services + annotations: + cert-manager.io/cluster-issuer: "letsencrypt-production" + labels: + app.kubernetes.io/created-by: tyil + app.kubernetes.io/managed-by: manual + app.kubernetes.io/name: invidious + app.kubernetes.io/part-of: public-services +spec: + ingressClassName: "traefik" + tls: + - hosts: + - youtube.alt.tyil.nl + secretName: tls-nl.tyil.alt.youtube + rules: + - host: youtube.alt.tyil.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: invidious-http + port: + number: 80 +... diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml new file mode 100644 index 0000000..013d172 --- /dev/null +++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/sealed-secret.yaml @@ -0,0 +1,21 @@ +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + creationTimestamp: null + name: invidious-config + namespace: public-services +spec: + encryptedData: + config.yml: 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 + template: + metadata: + creationTimestamp: null + labels: + app.kubernetes.io/created-by: tyil + app.kubernetes.io/managed-by: manual + app.kubernetes.io/name: invidious-config + app.kubernetes.io/part-of: invidious + name: invidious-config + namespace: public-services + type: Opaque + diff --git a/data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml b/data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml new file mode 100644 index 0000000..e4f95be --- /dev/null +++ b/data.d/k3s-hurzak/manifests.d/public-services/invidious/service.yaml @@ -0,0 +1,24 @@ +--- +apiVersion: v1 +kind: Service +metadata: + # Funfact: if this name is set to "invidious", things will break! + # https://github.com/iv-org/invidious/issues/2970 + name: invidious-http + namespace: public-services + labels: + app.kubernetes.io/created-by: tyil + app.kubernetes.io/managed-by: manual + app.kubernetes.io/name: invidious + app.kubernetes.io/part-of: public-services +spec: + selector: + app.kubernetes.io/created-by: tyil + app.kubernetes.io/managed-by: manual + app.kubernetes.io/name: invidious + app.kubernetes.io/part-of: public-services + ports: + - protocol: TCP + port: 80 + targetPort: 3000 +... -- cgit v1.1