k8s 차트 추가

Author: robin-maki

application.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: quesdon
+  namespace: argocd
+spec:
+  project: byulmaru
+  source:
+    repoURL: https://github.com/byulmaru/quesdon.git
+    targetRevision: HEAD
+    path: charts
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: quesdon
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true

charts/Chart.yaml

@@ -0,0 +1,4 @@
+apiVersion: v2
+name: quesdon
+type: application
+version: 1.0.0

charts/templates/app.yaml

@@ -0,0 +1,70 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: quesdon
+spec:
+  type: ClusterIP
+  ports:
+    - port: 17323
+      targetPort: 17323
+      name: web
+  selector:
+    app: quesdon
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: quesdon
+  annotations:
+    secrets.infisical.com/auto-reload: "true"
+  labels:
+    app: quesdon
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: quesdon
+  template:
+    metadata:
+      labels:
+        app: quesdon
+    spec:
+      enableServiceLinks: false
+      containers:
+        - name: quesdon
+          image: ghcr.io/byulmaru/quesdon
+          envFrom:
+            - secretRef:
+                name: env
+          resources:
+            requests:
+              cpu: "100m"
+              memory: "256Mi"
+            limits:
+              cpu: "500m"
+              memory: "1Gi"
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 1
+              preference:
+                matchExpressions:
+                  - key: oci.oraclecloud.com/oke-is-preemptible
+                    operator: Exists
+                    values: []
+      tolerations:
+        - key: "oci.oraclecloud.com/oke-is-preemptible"
+          operator: "Equal"
+          value: "present"
+          effect: "NoSchedule"
+      priorityClassName: preemptible
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: quesdon
+spec:
+  minAvailable: 0
+  selector:
+    matchLabels:
+      app: quesdon

charts/templates/certificate.yaml

@@ -0,0 +1,11 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: certificate
+spec:
+  secretName: certificate
+  issuerRef:
+    name: cert-issuer
+    kind: ClusterIssuer
+  dnsNames:
+    - quesdon.planet.moe

charts/templates/env.yaml

@@ -0,0 +1,23 @@
+apiVersion: secrets.infisical.com/v1alpha1
+kind: InfisicalSecret
+metadata:
+  name: env
+spec:
+  resyncInterval: 60
+  authentication:
+    kubernetesAuth:
+      identityId: 953a7c79-6486-44d6-a6be-04dd7eda1853
+      autoCreateServiceAccountToken: true
+      serviceAccountRef:
+        name: secret
+        namespace: infisical
+
+      secretsScope:
+        projectId: 1dccea80-64e0-4a62-af38-c85792f3456c
+        envSlug: prod
+        secretsPath: /
+  managedKubeSecretReferences:
+    - secretName: env
+      secretNamespace: quesdon
+      creationPolicy: Owner
+      secretType: Opaque

charts/templates/ingress.yaml

@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nginx
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - quesdon.planet.moe
+      secretName: certificate
+  rules:
+    - host: quesdon.planet.moe
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: quesdon
+                port:
+                  number: 17323