Commit e1ffc11b authored by Giuseppe Tudisco's avatar Giuseppe Tudisco
Browse files

argo: install canfar

parent 61178c48

apps/canfar/es-scienceportal.yaml

0 → 100644
+18 −0
Original line number Diff line number Diff line 
apiVersion: external-secrets.io/v1

kind: ExternalSecret

metadata:

  name: scienceportal-es

  namespace: skaha-system

spec:

  refreshInterval: 1h

  secretStoreRef:

    name: vault-backend

    kind: ClusterSecretStore

  target:

    name: scienceportal-credentials

    creationPolicy: Owner

  data:

  - secretKey: clientSecret

    remoteRef:

      key: canfar

      property: portalClientSecret

apps/canfar/ingress-canfar.yaml

0 → 100644
+25 −0
Original line number Diff line number Diff line 
apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  name: canfar-entrypoint

  namespace: skaha-system

  annotations:

    cert-manager.io/cluster-issuer: letsencrypt-prod

    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"

spec:

  ingressClassName: nginx

  rules:

  - host: canfar.itsrc.ext.cineca.it

    http:

      paths:

      - path: /

        pathType: Prefix

        backend:

          service:

            name: canfar-traefik

            port:

              name: websecure

  tls:

  - hosts:

    - canfar.itsrc.ext.cineca.it

    secretName: canfar-tls

apps/canfar/pv-skaha-system.yaml

0 → 100644
+22 −0
Original line number Diff line number Diff line 
---

apiVersion: v1

kind: PersistentVolume

metadata:

  annotations:

    pv.kubernetes.io/provisioned-by: nfs.csi.k8s.io

  name: pv-skaha-system

spec:

  capacity:

    storage: 10Gi

  accessModes:

    - ReadWriteMany

  persistentVolumeReclaimPolicy: Retain

  storageClassName: nfs-csi

  mountOptions:

    - nfsvers=4.2

  csi:

    driver: nfs.csi.k8s.io

    volumeHandle: itsrc.novalocal/pv-skaha-system

    volumeAttributes:

      server: itsrc.novalocal

      share: /storage/skaha

apps/canfar/pv-skaha-workload.yaml

0 → 100644
+22 −0
Original line number Diff line number Diff line 
---

apiVersion: v1

kind: PersistentVolume

metadata:

  annotations:

    pv.kubernetes.io/provisioned-by: nfs.csi.k8s.io

  name: pv-skaha-workload

spec:

  capacity:

    storage: 10Gi

  accessModes:

    - ReadWriteMany

  persistentVolumeReclaimPolicy: Retain

  storageClassName: nfs-csi

  mountOptions:

    - nfsvers=4.2

  csi:

    driver: nfs.csi.k8s.io

    volumeHandle: itsrc.novalocal/pv-skaha-workload

    volumeAttributes:

      server: itsrc.novalocal

      share: /storage/skaha

apps/canfar/pvc-skaha-system.yaml

0 → 100644
+14 −0
Original line number Diff line number Diff line 
---

kind: PersistentVolumeClaim

apiVersion: v1

metadata:

  name: skaha-pvc

  namespace: skaha-system

spec:

  accessModes:

    - ReadWriteMany

  resources:

    requests:

      storage: 10Gi

  volumeName: pv-skaha-system

  storageClassName: nfs-csi