diff --git a/hackerspace/inventory.yaml b/hackerspace/inventory.yaml index dd2d300..93ee802 100644 --- a/hackerspace/inventory.yaml +++ b/hackerspace/inventory.yaml @@ -2,18 +2,20 @@ apiVersion: apps/v1 kind: Deployment metadata: - name: inventory + name: inventory-app namespace: hackerspace + labels: + app: signs-webpage spec: replicas: 1 revisionHistoryLimit: 0 selector: matchLabels: - app.kubernetes.io/name: inventory + app: inventory-app template: metadata: labels: - app.kubernetes.io/name: inventory + app: inventory-app spec: containers: - image: harbor.k-space.ee/k-space/inventory-app:latest @@ -54,7 +56,7 @@ spec: name: oidc-client-inventory-app-owner-secrets - secretRef: name: inventory-mongodb - name: inventory + name: inventory-app ports: - containerPort: 5000 name: http @@ -78,8 +80,7 @@ spec: dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler - serviceAccount: inventory - serviceAccountName: inventory + serviceAccountName: inventory-svcacc terminationGracePeriodSeconds: 30 volumes: - name: tmp @@ -88,9 +89,9 @@ apiVersion: v1 kind: Service metadata: name: inventory-app - labels: - app: inventory-app + namespace: hackerspace spec: + type: ClusterIP selector: app: inventory-app ports: @@ -101,13 +102,14 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: inventory-app + namespace: hackerspace annotations: + kubernetes.io/ingress.class: traefik traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.tls: "true" external-dns.alpha.kubernetes.io/target: traefik.k-space.ee - external-dns.alpha.kubernetes.io/hostname: members.k-space.ee,inventory.k-space.ee + external-dns.alpha.kubernetes.io/hostname: inventory.k-space.ee,members.k-space.ee spec: - ingressClassName: shared rules: - host: inventory.k-space.ee http: @@ -127,6 +129,7 @@ apiVersion: codemowers.cloud/v1beta1 kind: OIDCClient metadata: name: inventory-app + namespace: hackerspace spec: uri: 'https://inventory.k-space.ee' redirectUris: @@ -145,7 +148,8 @@ spec: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: inventory + name: inventory-role + namespace: hackerspace rules: - verbs: - get @@ -160,17 +164,19 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: inventory + name: inventory-roles + namespace: hackerspace roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: inventory + name: inventory-role subjects: - kind: ServiceAccount - name: inventory + name: inventory-svcacc namespace: hackerspace --- apiVersion: v1 kind: ServiceAccount metadata: - name: inventory + name: inventory-svcacc + namespace: hackerspace