Fix Traefik dashboard cert issuer: step-ca-acme
This commit is contained in:
Andrew M. Stoltz
274
apps/andrew/andrew.yaml
Normal file
274
apps/andrew/andrew.yaml
Normal file
@@ -0,0 +1,274 @@
|
||||
# Andrew Tenant — bluejay.dev
|
||||
# Placeholder landing page served by nginx
|
||||
# ArgoCD managed - BlueJay Lab
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: tenant-andrew
|
||||
labels:
|
||||
app.kubernetes.io/part-of: bluejay-infra
|
||||
flowercore.io/tenant: andrew
|
||||
---
|
||||
# NOTE: The TLS secret cf-origin-bluejay-dev must be created in this namespace
|
||||
# separately from a Cloudflare Origin Certificate covering *.bluejay.dev.
|
||||
# Create with: kubectl create secret tls cf-origin-bluejay-dev \
|
||||
# --cert=bluejay-dev-origin.pem --key=bluejay-dev-origin-key.pem \
|
||||
# -n tenant-andrew
|
||||
---
|
||||
# Landing page HTML
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: andrew-web-html
|
||||
namespace: tenant-andrew
|
||||
data:
|
||||
index.html: |
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>Blue Jay — bluejay.dev</title>
|
||||
<style>
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
||||
background: #0A1628;
|
||||
color: #e0e8f0;
|
||||
min-height: 100vh;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
overflow: hidden;
|
||||
}
|
||||
.bg {
|
||||
position: fixed;
|
||||
inset: 0;
|
||||
background:
|
||||
radial-gradient(ellipse 80% 60% at 50% 0%, rgba(43,138,255,0.15) 0%, transparent 70%),
|
||||
radial-gradient(ellipse 60% 50% at 80% 100%, rgba(43,138,255,0.08) 0%, transparent 60%),
|
||||
linear-gradient(135deg, #0A1628 0%, #111E36 50%, #0A1628 100%);
|
||||
z-index: 0;
|
||||
}
|
||||
.container {
|
||||
position: relative;
|
||||
z-index: 1;
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
max-width: 640px;
|
||||
width: 100%;
|
||||
}
|
||||
.badge {
|
||||
display: inline-block;
|
||||
background: rgba(43,138,255,0.12);
|
||||
border: 1px solid rgba(43,138,255,0.25);
|
||||
border-radius: 20px;
|
||||
padding: 0.4rem 1.2rem;
|
||||
font-size: 0.8rem;
|
||||
color: #2B8AFF;
|
||||
letter-spacing: 0.08em;
|
||||
text-transform: uppercase;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.icon {
|
||||
font-size: 4rem;
|
||||
margin-bottom: 1.5rem;
|
||||
filter: drop-shadow(0 0 30px rgba(43,138,255,0.3));
|
||||
}
|
||||
h1 {
|
||||
font-size: 2.8rem;
|
||||
font-weight: 700;
|
||||
background: linear-gradient(135deg, #2B8AFF 0%, #6BB3FF 100%);
|
||||
-webkit-background-clip: text;
|
||||
-webkit-text-fill-color: transparent;
|
||||
background-clip: text;
|
||||
margin-bottom: 0.5rem;
|
||||
}
|
||||
.domain {
|
||||
font-size: 1.1rem;
|
||||
color: #6BB3FF;
|
||||
font-weight: 300;
|
||||
font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
|
||||
margin-bottom: 2.5rem;
|
||||
}
|
||||
.status {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.5rem;
|
||||
background: rgba(43,138,255,0.08);
|
||||
border: 1px solid rgba(43,138,255,0.15);
|
||||
border-radius: 8px;
|
||||
padding: 1rem 2rem;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.status .dot {
|
||||
width: 8px;
|
||||
height: 8px;
|
||||
background: #2B8AFF;
|
||||
border-radius: 50%;
|
||||
animation: pulse 2s ease-in-out infinite;
|
||||
}
|
||||
@keyframes pulse {
|
||||
0%, 100% { opacity: 0.4; }
|
||||
50% { opacity: 1; box-shadow: 0 0 8px rgba(43,138,255,0.6); }
|
||||
}
|
||||
.status p {
|
||||
font-size: 0.95rem;
|
||||
color: #8aa8c4;
|
||||
}
|
||||
.divider {
|
||||
width: 40px;
|
||||
height: 2px;
|
||||
background: linear-gradient(90deg, transparent, rgba(43,138,255,0.4), transparent);
|
||||
margin: 2rem auto;
|
||||
}
|
||||
.footer {
|
||||
color: #3a5570;
|
||||
font-size: 0.75rem;
|
||||
line-height: 1.6;
|
||||
}
|
||||
.footer a {
|
||||
color: #4a7a9e;
|
||||
text-decoration: none;
|
||||
}
|
||||
@media (max-width: 480px) {
|
||||
h1 { font-size: 2rem; }
|
||||
.icon { font-size: 3rem; }
|
||||
.container { padding: 1.5rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="bg"></div>
|
||||
<div class="container">
|
||||
<div class="badge">Andrew's Space</div>
|
||||
<div class="icon">🐦</div>
|
||||
<h1>Blue Jay</h1>
|
||||
<p class="domain">bluejay.dev</p>
|
||||
<div class="status">
|
||||
<span class="dot"></span>
|
||||
<p>Coming Soon</p>
|
||||
</div>
|
||||
<div class="divider"></div>
|
||||
<p class="footer">
|
||||
Powered by <a href="https://flowercore.io">FlowerCore</a>
|
||||
</p>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
---
|
||||
# nginx configuration
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: andrew-web-nginx-conf
|
||||
namespace: tenant-andrew
|
||||
data:
|
||||
default.conf: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
location /healthz {
|
||||
access_log off;
|
||||
return 200 "ok";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
---
|
||||
# Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: andrew-web
|
||||
namespace: tenant-andrew
|
||||
labels:
|
||||
app: andrew-web
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: andrew-web
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: andrew-web
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- containerPort: 80
|
||||
name: http
|
||||
volumeMounts:
|
||||
- name: nginx-conf
|
||||
mountPath: /etc/nginx/conf.d/default.conf
|
||||
subPath: default.conf
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
resources:
|
||||
requests:
|
||||
memory: 32Mi
|
||||
cpu: 10m
|
||||
limits:
|
||||
memory: 64Mi
|
||||
cpu: 50m
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 5
|
||||
volumes:
|
||||
- name: nginx-conf
|
||||
configMap:
|
||||
name: andrew-web-nginx-conf
|
||||
- name: html
|
||||
configMap:
|
||||
name: andrew-web-html
|
||||
---
|
||||
# Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: andrew-web
|
||||
namespace: tenant-andrew
|
||||
spec:
|
||||
selector:
|
||||
app: andrew-web
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
name: http
|
||||
---
|
||||
# Traefik IngressRoute — public via Cloudflare
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: andrew-web
|
||||
namespace: tenant-andrew
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`bluejay.dev`) || Host(`www.bluejay.dev`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: andrew-web
|
||||
port: 80
|
||||
tls:
|
||||
secretName: cf-origin-bluejay-dev
|
||||
274
apps/dustin/dustin.yaml
Normal file
274
apps/dustin/dustin.yaml
Normal file
@@ -0,0 +1,274 @@
|
||||
# Dustin Tenant — timeforta.co
|
||||
# Placeholder landing page served by nginx
|
||||
# ArgoCD managed - BlueJay Lab
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: tenant-dustin
|
||||
labels:
|
||||
app.kubernetes.io/part-of: bluejay-infra
|
||||
flowercore.io/tenant: dustin
|
||||
---
|
||||
# NOTE: The TLS secret cf-origin-timeforta-co must be created in this namespace
|
||||
# separately from a Cloudflare Origin Certificate covering *.timeforta.co.
|
||||
# Create with: kubectl create secret tls cf-origin-timeforta-co \
|
||||
# --cert=timeforta-co-origin.pem --key=timeforta-co-origin-key.pem \
|
||||
# -n tenant-dustin
|
||||
---
|
||||
# Landing page HTML
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: dustin-web-html
|
||||
namespace: tenant-dustin
|
||||
data:
|
||||
index.html: |
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>Time For Taco — timeforta.co</title>
|
||||
<style>
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
||||
background: #0A1628;
|
||||
color: #e0e8f0;
|
||||
min-height: 100vh;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
overflow: hidden;
|
||||
}
|
||||
.bg {
|
||||
position: fixed;
|
||||
inset: 0;
|
||||
background:
|
||||
radial-gradient(ellipse 80% 60% at 50% 0%, rgba(43,138,255,0.15) 0%, transparent 70%),
|
||||
radial-gradient(ellipse 60% 50% at 80% 100%, rgba(43,138,255,0.08) 0%, transparent 60%),
|
||||
linear-gradient(135deg, #0A1628 0%, #111E36 50%, #0A1628 100%);
|
||||
z-index: 0;
|
||||
}
|
||||
.container {
|
||||
position: relative;
|
||||
z-index: 1;
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
max-width: 640px;
|
||||
width: 100%;
|
||||
}
|
||||
.badge {
|
||||
display: inline-block;
|
||||
background: rgba(43,138,255,0.12);
|
||||
border: 1px solid rgba(43,138,255,0.25);
|
||||
border-radius: 20px;
|
||||
padding: 0.4rem 1.2rem;
|
||||
font-size: 0.8rem;
|
||||
color: #2B8AFF;
|
||||
letter-spacing: 0.08em;
|
||||
text-transform: uppercase;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.icon {
|
||||
font-size: 4rem;
|
||||
margin-bottom: 1.5rem;
|
||||
filter: drop-shadow(0 0 30px rgba(43,138,255,0.3));
|
||||
}
|
||||
h1 {
|
||||
font-size: 2.8rem;
|
||||
font-weight: 700;
|
||||
background: linear-gradient(135deg, #2B8AFF 0%, #6BB3FF 100%);
|
||||
-webkit-background-clip: text;
|
||||
-webkit-text-fill-color: transparent;
|
||||
background-clip: text;
|
||||
margin-bottom: 0.5rem;
|
||||
}
|
||||
.domain {
|
||||
font-size: 1.1rem;
|
||||
color: #6BB3FF;
|
||||
font-weight: 300;
|
||||
font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
|
||||
margin-bottom: 2.5rem;
|
||||
}
|
||||
.status {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.5rem;
|
||||
background: rgba(43,138,255,0.08);
|
||||
border: 1px solid rgba(43,138,255,0.15);
|
||||
border-radius: 8px;
|
||||
padding: 1rem 2rem;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.status .dot {
|
||||
width: 8px;
|
||||
height: 8px;
|
||||
background: #2B8AFF;
|
||||
border-radius: 50%;
|
||||
animation: pulse 2s ease-in-out infinite;
|
||||
}
|
||||
@keyframes pulse {
|
||||
0%, 100% { opacity: 0.4; }
|
||||
50% { opacity: 1; box-shadow: 0 0 8px rgba(43,138,255,0.6); }
|
||||
}
|
||||
.status p {
|
||||
font-size: 0.95rem;
|
||||
color: #8aa8c4;
|
||||
}
|
||||
.divider {
|
||||
width: 40px;
|
||||
height: 2px;
|
||||
background: linear-gradient(90deg, transparent, rgba(43,138,255,0.4), transparent);
|
||||
margin: 2rem auto;
|
||||
}
|
||||
.footer {
|
||||
color: #3a5570;
|
||||
font-size: 0.75rem;
|
||||
line-height: 1.6;
|
||||
}
|
||||
.footer a {
|
||||
color: #4a7a9e;
|
||||
text-decoration: none;
|
||||
}
|
||||
@media (max-width: 480px) {
|
||||
h1 { font-size: 2rem; }
|
||||
.icon { font-size: 3rem; }
|
||||
.container { padding: 1.5rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="bg"></div>
|
||||
<div class="container">
|
||||
<div class="badge">Dustin's Space</div>
|
||||
<div class="icon">🌮</div>
|
||||
<h1>Time For Taco</h1>
|
||||
<p class="domain">timeforta.co</p>
|
||||
<div class="status">
|
||||
<span class="dot"></span>
|
||||
<p>Coming Soon</p>
|
||||
</div>
|
||||
<div class="divider"></div>
|
||||
<p class="footer">
|
||||
Powered by <a href="https://flowercore.io">FlowerCore</a>
|
||||
</p>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
---
|
||||
# nginx configuration
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: dustin-web-nginx-conf
|
||||
namespace: tenant-dustin
|
||||
data:
|
||||
default.conf: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
location /healthz {
|
||||
access_log off;
|
||||
return 200 "ok";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
---
|
||||
# Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: dustin-web
|
||||
namespace: tenant-dustin
|
||||
labels:
|
||||
app: dustin-web
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: dustin-web
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: dustin-web
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- containerPort: 80
|
||||
name: http
|
||||
volumeMounts:
|
||||
- name: nginx-conf
|
||||
mountPath: /etc/nginx/conf.d/default.conf
|
||||
subPath: default.conf
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
resources:
|
||||
requests:
|
||||
memory: 32Mi
|
||||
cpu: 10m
|
||||
limits:
|
||||
memory: 64Mi
|
||||
cpu: 50m
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 5
|
||||
volumes:
|
||||
- name: nginx-conf
|
||||
configMap:
|
||||
name: dustin-web-nginx-conf
|
||||
- name: html
|
||||
configMap:
|
||||
name: dustin-web-html
|
||||
---
|
||||
# Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: dustin-web
|
||||
namespace: tenant-dustin
|
||||
spec:
|
||||
selector:
|
||||
app: dustin-web
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
name: http
|
||||
---
|
||||
# Traefik IngressRoute — public via Cloudflare
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: dustin-web
|
||||
namespace: tenant-dustin
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`timeforta.co`) || Host(`www.timeforta.co`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: dustin-web
|
||||
port: 80
|
||||
tls:
|
||||
secretName: cf-origin-timeforta-co
|
||||
274
apps/erik/erik.yaml
Normal file
274
apps/erik/erik.yaml
Normal file
@@ -0,0 +1,274 @@
|
||||
# Erik Tenant — erckak.dev
|
||||
# Placeholder landing page served by nginx
|
||||
# ArgoCD managed - BlueJay Lab
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: tenant-erik
|
||||
labels:
|
||||
app.kubernetes.io/part-of: bluejay-infra
|
||||
flowercore.io/tenant: erik
|
||||
---
|
||||
# NOTE: The TLS secret cf-origin-erckak-dev must be created in this namespace
|
||||
# separately from a Cloudflare Origin Certificate covering *.erckak.dev.
|
||||
# Create with: kubectl create secret tls cf-origin-erckak-dev \
|
||||
# --cert=erckak-dev-origin.pem --key=erckak-dev-origin-key.pem \
|
||||
# -n tenant-erik
|
||||
---
|
||||
# Landing page HTML
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: erik-web-html
|
||||
namespace: tenant-erik
|
||||
data:
|
||||
index.html: |
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>Erckak — erckak.dev</title>
|
||||
<style>
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
||||
background: #0A1628;
|
||||
color: #e0e8f0;
|
||||
min-height: 100vh;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
overflow: hidden;
|
||||
}
|
||||
.bg {
|
||||
position: fixed;
|
||||
inset: 0;
|
||||
background:
|
||||
radial-gradient(ellipse 80% 60% at 50% 0%, rgba(43,138,255,0.15) 0%, transparent 70%),
|
||||
radial-gradient(ellipse 60% 50% at 80% 100%, rgba(43,138,255,0.08) 0%, transparent 60%),
|
||||
linear-gradient(135deg, #0A1628 0%, #111E36 50%, #0A1628 100%);
|
||||
z-index: 0;
|
||||
}
|
||||
.container {
|
||||
position: relative;
|
||||
z-index: 1;
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
max-width: 640px;
|
||||
width: 100%;
|
||||
}
|
||||
.badge {
|
||||
display: inline-block;
|
||||
background: rgba(43,138,255,0.12);
|
||||
border: 1px solid rgba(43,138,255,0.25);
|
||||
border-radius: 20px;
|
||||
padding: 0.4rem 1.2rem;
|
||||
font-size: 0.8rem;
|
||||
color: #2B8AFF;
|
||||
letter-spacing: 0.08em;
|
||||
text-transform: uppercase;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.icon {
|
||||
font-size: 4rem;
|
||||
margin-bottom: 1.5rem;
|
||||
filter: drop-shadow(0 0 30px rgba(43,138,255,0.3));
|
||||
}
|
||||
h1 {
|
||||
font-size: 2.8rem;
|
||||
font-weight: 700;
|
||||
background: linear-gradient(135deg, #2B8AFF 0%, #6BB3FF 100%);
|
||||
-webkit-background-clip: text;
|
||||
-webkit-text-fill-color: transparent;
|
||||
background-clip: text;
|
||||
margin-bottom: 0.5rem;
|
||||
}
|
||||
.domain {
|
||||
font-size: 1.1rem;
|
||||
color: #6BB3FF;
|
||||
font-weight: 300;
|
||||
font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
|
||||
margin-bottom: 2.5rem;
|
||||
}
|
||||
.status {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.5rem;
|
||||
background: rgba(43,138,255,0.08);
|
||||
border: 1px solid rgba(43,138,255,0.15);
|
||||
border-radius: 8px;
|
||||
padding: 1rem 2rem;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.status .dot {
|
||||
width: 8px;
|
||||
height: 8px;
|
||||
background: #2B8AFF;
|
||||
border-radius: 50%;
|
||||
animation: pulse 2s ease-in-out infinite;
|
||||
}
|
||||
@keyframes pulse {
|
||||
0%, 100% { opacity: 0.4; }
|
||||
50% { opacity: 1; box-shadow: 0 0 8px rgba(43,138,255,0.6); }
|
||||
}
|
||||
.status p {
|
||||
font-size: 0.95rem;
|
||||
color: #8aa8c4;
|
||||
}
|
||||
.divider {
|
||||
width: 40px;
|
||||
height: 2px;
|
||||
background: linear-gradient(90deg, transparent, rgba(43,138,255,0.4), transparent);
|
||||
margin: 2rem auto;
|
||||
}
|
||||
.footer {
|
||||
color: #3a5570;
|
||||
font-size: 0.75rem;
|
||||
line-height: 1.6;
|
||||
}
|
||||
.footer a {
|
||||
color: #4a7a9e;
|
||||
text-decoration: none;
|
||||
}
|
||||
@media (max-width: 480px) {
|
||||
h1 { font-size: 2rem; }
|
||||
.icon { font-size: 3rem; }
|
||||
.container { padding: 1.5rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="bg"></div>
|
||||
<div class="container">
|
||||
<div class="badge">Erik's Space</div>
|
||||
<div class="icon">🚀</div>
|
||||
<h1>Erckak</h1>
|
||||
<p class="domain">erckak.dev</p>
|
||||
<div class="status">
|
||||
<span class="dot"></span>
|
||||
<p>Coming Soon</p>
|
||||
</div>
|
||||
<div class="divider"></div>
|
||||
<p class="footer">
|
||||
Powered by <a href="https://flowercore.io">FlowerCore</a>
|
||||
</p>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
---
|
||||
# nginx configuration
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: erik-web-nginx-conf
|
||||
namespace: tenant-erik
|
||||
data:
|
||||
default.conf: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
location /healthz {
|
||||
access_log off;
|
||||
return 200 "ok";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
---
|
||||
# Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: erik-web
|
||||
namespace: tenant-erik
|
||||
labels:
|
||||
app: erik-web
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: erik-web
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: erik-web
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- containerPort: 80
|
||||
name: http
|
||||
volumeMounts:
|
||||
- name: nginx-conf
|
||||
mountPath: /etc/nginx/conf.d/default.conf
|
||||
subPath: default.conf
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
resources:
|
||||
requests:
|
||||
memory: 32Mi
|
||||
cpu: 10m
|
||||
limits:
|
||||
memory: 64Mi
|
||||
cpu: 50m
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 5
|
||||
volumes:
|
||||
- name: nginx-conf
|
||||
configMap:
|
||||
name: erik-web-nginx-conf
|
||||
- name: html
|
||||
configMap:
|
||||
name: erik-web-html
|
||||
---
|
||||
# Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: erik-web
|
||||
namespace: tenant-erik
|
||||
spec:
|
||||
selector:
|
||||
app: erik-web
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
name: http
|
||||
---
|
||||
# Traefik IngressRoute — public via Cloudflare
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: erik-web
|
||||
namespace: tenant-erik
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`erckak.dev`) || Host(`www.erckak.dev`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: erik-web
|
||||
port: 80
|
||||
tls:
|
||||
secretName: cf-origin-erckak-dev
|
||||
274
apps/fit/fit.yaml
Normal file
274
apps/fit/fit.yaml
Normal file
@@ -0,0 +1,274 @@
|
||||
# FIT Tenant — flowerinsider.xyz
|
||||
# Placeholder landing page served by nginx
|
||||
# ArgoCD managed - BlueJay Lab
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: tenant-fit
|
||||
labels:
|
||||
app.kubernetes.io/part-of: bluejay-infra
|
||||
flowercore.io/tenant: fit
|
||||
---
|
||||
# NOTE: The TLS secret cf-origin-flowerinsider-xyz must be created in this namespace
|
||||
# separately from a Cloudflare Origin Certificate covering *.flowerinsider.xyz.
|
||||
# Create with: kubectl create secret tls cf-origin-flowerinsider-xyz \
|
||||
# --cert=flowerinsider-xyz-origin.pem --key=flowerinsider-xyz-origin-key.pem \
|
||||
# -n tenant-fit
|
||||
---
|
||||
# Landing page HTML
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: fit-web-html
|
||||
namespace: tenant-fit
|
||||
data:
|
||||
index.html: |
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>Flower Insider — flowerinsider.xyz</title>
|
||||
<style>
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
||||
background: #0A1628;
|
||||
color: #e0e8f0;
|
||||
min-height: 100vh;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
overflow: hidden;
|
||||
}
|
||||
.bg {
|
||||
position: fixed;
|
||||
inset: 0;
|
||||
background:
|
||||
radial-gradient(ellipse 80% 60% at 50% 0%, rgba(43,138,255,0.15) 0%, transparent 70%),
|
||||
radial-gradient(ellipse 60% 50% at 80% 100%, rgba(43,138,255,0.08) 0%, transparent 60%),
|
||||
linear-gradient(135deg, #0A1628 0%, #111E36 50%, #0A1628 100%);
|
||||
z-index: 0;
|
||||
}
|
||||
.container {
|
||||
position: relative;
|
||||
z-index: 1;
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
max-width: 640px;
|
||||
width: 100%;
|
||||
}
|
||||
.badge {
|
||||
display: inline-block;
|
||||
background: rgba(43,138,255,0.12);
|
||||
border: 1px solid rgba(43,138,255,0.25);
|
||||
border-radius: 20px;
|
||||
padding: 0.4rem 1.2rem;
|
||||
font-size: 0.8rem;
|
||||
color: #2B8AFF;
|
||||
letter-spacing: 0.08em;
|
||||
text-transform: uppercase;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.icon {
|
||||
font-size: 4rem;
|
||||
margin-bottom: 1.5rem;
|
||||
filter: drop-shadow(0 0 30px rgba(43,138,255,0.3));
|
||||
}
|
||||
h1 {
|
||||
font-size: 2.8rem;
|
||||
font-weight: 700;
|
||||
background: linear-gradient(135deg, #2B8AFF 0%, #6BB3FF 100%);
|
||||
-webkit-background-clip: text;
|
||||
-webkit-text-fill-color: transparent;
|
||||
background-clip: text;
|
||||
margin-bottom: 0.5rem;
|
||||
}
|
||||
.domain {
|
||||
font-size: 1.1rem;
|
||||
color: #6BB3FF;
|
||||
font-weight: 300;
|
||||
font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
|
||||
margin-bottom: 2.5rem;
|
||||
}
|
||||
.status {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.5rem;
|
||||
background: rgba(43,138,255,0.08);
|
||||
border: 1px solid rgba(43,138,255,0.15);
|
||||
border-radius: 8px;
|
||||
padding: 1rem 2rem;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.status .dot {
|
||||
width: 8px;
|
||||
height: 8px;
|
||||
background: #2B8AFF;
|
||||
border-radius: 50%;
|
||||
animation: pulse 2s ease-in-out infinite;
|
||||
}
|
||||
@keyframes pulse {
|
||||
0%, 100% { opacity: 0.4; }
|
||||
50% { opacity: 1; box-shadow: 0 0 8px rgba(43,138,255,0.6); }
|
||||
}
|
||||
.status p {
|
||||
font-size: 0.95rem;
|
||||
color: #8aa8c4;
|
||||
}
|
||||
.divider {
|
||||
width: 40px;
|
||||
height: 2px;
|
||||
background: linear-gradient(90deg, transparent, rgba(43,138,255,0.4), transparent);
|
||||
margin: 2rem auto;
|
||||
}
|
||||
.footer {
|
||||
color: #3a5570;
|
||||
font-size: 0.75rem;
|
||||
line-height: 1.6;
|
||||
}
|
||||
.footer a {
|
||||
color: #4a7a9e;
|
||||
text-decoration: none;
|
||||
}
|
||||
@media (max-width: 480px) {
|
||||
h1 { font-size: 2rem; }
|
||||
.icon { font-size: 3rem; }
|
||||
.container { padding: 1.5rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="bg"></div>
|
||||
<div class="container">
|
||||
<div class="badge">Flower Insider Team</div>
|
||||
<div class="icon">🌸</div>
|
||||
<h1>Flower Insider</h1>
|
||||
<p class="domain">flowerinsider.xyz</p>
|
||||
<div class="status">
|
||||
<span class="dot"></span>
|
||||
<p>Coming Soon</p>
|
||||
</div>
|
||||
<div class="divider"></div>
|
||||
<p class="footer">
|
||||
Powered by <a href="https://flowercore.io">FlowerCore</a>
|
||||
</p>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
---
|
||||
# nginx configuration
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: fit-web-nginx-conf
|
||||
namespace: tenant-fit
|
||||
data:
|
||||
default.conf: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
location /healthz {
|
||||
access_log off;
|
||||
return 200 "ok";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
---
|
||||
# Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: fit-web
|
||||
namespace: tenant-fit
|
||||
labels:
|
||||
app: fit-web
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: fit-web
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: fit-web
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- containerPort: 80
|
||||
name: http
|
||||
volumeMounts:
|
||||
- name: nginx-conf
|
||||
mountPath: /etc/nginx/conf.d/default.conf
|
||||
subPath: default.conf
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
resources:
|
||||
requests:
|
||||
memory: 32Mi
|
||||
cpu: 10m
|
||||
limits:
|
||||
memory: 64Mi
|
||||
cpu: 50m
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 5
|
||||
volumes:
|
||||
- name: nginx-conf
|
||||
configMap:
|
||||
name: fit-web-nginx-conf
|
||||
- name: html
|
||||
configMap:
|
||||
name: fit-web-html
|
||||
---
|
||||
# Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: fit-web
|
||||
namespace: tenant-fit
|
||||
spec:
|
||||
selector:
|
||||
app: fit-web
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
name: http
|
||||
---
|
||||
# Traefik IngressRoute — public via Cloudflare
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: fit-web
|
||||
namespace: tenant-fit
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`flowerinsider.xyz`) || Host(`www.flowerinsider.xyz`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: fit-web
|
||||
port: 80
|
||||
tls:
|
||||
secretName: cf-origin-flowerinsider-xyz
|
||||
332
apps/flowercore/flowercore.yaml
Normal file
332
apps/flowercore/flowercore.yaml
Normal file
@@ -0,0 +1,332 @@
|
||||
# FlowerCore Tenant — flowercore.io (main brand)
|
||||
# Public-facing placeholder landing page served by nginx
|
||||
# ArgoCD managed - BlueJay Lab
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: tenant-flowercore
|
||||
labels:
|
||||
app.kubernetes.io/part-of: bluejay-infra
|
||||
flowercore.io/tenant: flowercore
|
||||
---
|
||||
# NOTE: The existing cf-origin-flowercore-io secret (covering *.flowercore.io)
|
||||
# must be copied into this namespace. It already exists in other namespaces.
|
||||
# Copy with: kubectl get secret cf-origin-flowercore-io -n fc-system -o yaml \
|
||||
# | sed 's/namespace: .*/namespace: tenant-flowercore/' \
|
||||
# | kubectl apply -f -
|
||||
---
|
||||
# Landing page HTML
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: flowercore-web-html
|
||||
namespace: tenant-flowercore
|
||||
data:
|
||||
index.html: |
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>FlowerCore — flowercore.io</title>
|
||||
<style>
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
||||
background: #0A1628;
|
||||
color: #e0e8f0;
|
||||
min-height: 100vh;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
overflow: hidden;
|
||||
}
|
||||
.bg {
|
||||
position: fixed;
|
||||
inset: 0;
|
||||
background:
|
||||
radial-gradient(ellipse 80% 60% at 50% 0%, rgba(43,138,255,0.18) 0%, transparent 70%),
|
||||
radial-gradient(ellipse 50% 40% at 20% 80%, rgba(43,138,255,0.10) 0%, transparent 60%),
|
||||
radial-gradient(ellipse 60% 50% at 80% 100%, rgba(43,138,255,0.08) 0%, transparent 60%),
|
||||
linear-gradient(135deg, #0A1628 0%, #111E36 50%, #0A1628 100%);
|
||||
z-index: 0;
|
||||
}
|
||||
.container {
|
||||
position: relative;
|
||||
z-index: 1;
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
max-width: 720px;
|
||||
width: 100%;
|
||||
}
|
||||
.badge {
|
||||
display: inline-block;
|
||||
background: rgba(43,138,255,0.12);
|
||||
border: 1px solid rgba(43,138,255,0.25);
|
||||
border-radius: 20px;
|
||||
padding: 0.4rem 1.2rem;
|
||||
font-size: 0.8rem;
|
||||
color: #2B8AFF;
|
||||
letter-spacing: 0.08em;
|
||||
text-transform: uppercase;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.icon {
|
||||
font-size: 5rem;
|
||||
margin-bottom: 1.5rem;
|
||||
filter: drop-shadow(0 0 40px rgba(43,138,255,0.35));
|
||||
}
|
||||
h1 {
|
||||
font-size: 3.2rem;
|
||||
font-weight: 700;
|
||||
background: linear-gradient(135deg, #2B8AFF 0%, #6BB3FF 50%, #A0D0FF 100%);
|
||||
-webkit-background-clip: text;
|
||||
-webkit-text-fill-color: transparent;
|
||||
background-clip: text;
|
||||
margin-bottom: 0.5rem;
|
||||
}
|
||||
.domain {
|
||||
font-size: 1.2rem;
|
||||
color: #6BB3FF;
|
||||
font-weight: 300;
|
||||
font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
|
||||
margin-bottom: 1rem;
|
||||
}
|
||||
.tagline {
|
||||
font-size: 1.05rem;
|
||||
color: #8aa8c4;
|
||||
font-weight: 300;
|
||||
line-height: 1.6;
|
||||
margin-bottom: 2.5rem;
|
||||
max-width: 480px;
|
||||
margin-left: auto;
|
||||
margin-right: auto;
|
||||
}
|
||||
.status {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.5rem;
|
||||
background: rgba(43,138,255,0.08);
|
||||
border: 1px solid rgba(43,138,255,0.15);
|
||||
border-radius: 8px;
|
||||
padding: 1rem 2rem;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.status .dot {
|
||||
width: 8px;
|
||||
height: 8px;
|
||||
background: #2B8AFF;
|
||||
border-radius: 50%;
|
||||
animation: pulse 2s ease-in-out infinite;
|
||||
}
|
||||
@keyframes pulse {
|
||||
0%, 100% { opacity: 0.4; }
|
||||
50% { opacity: 1; box-shadow: 0 0 8px rgba(43,138,255,0.6); }
|
||||
}
|
||||
.status p {
|
||||
font-size: 0.95rem;
|
||||
color: #8aa8c4;
|
||||
}
|
||||
.features {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
|
||||
gap: 0.8rem;
|
||||
margin-bottom: 2.5rem;
|
||||
width: 100%;
|
||||
max-width: 560px;
|
||||
margin-left: auto;
|
||||
margin-right: auto;
|
||||
}
|
||||
.feature {
|
||||
background: rgba(43,138,255,0.06);
|
||||
border: 1px solid rgba(43,138,255,0.12);
|
||||
border-radius: 8px;
|
||||
padding: 0.8rem 1rem;
|
||||
text-align: left;
|
||||
}
|
||||
.feature h3 {
|
||||
font-size: 0.8rem;
|
||||
color: #2B8AFF;
|
||||
margin-bottom: 0.2rem;
|
||||
font-weight: 600;
|
||||
}
|
||||
.feature p {
|
||||
font-size: 0.7rem;
|
||||
color: #5a7a94;
|
||||
}
|
||||
.divider {
|
||||
width: 40px;
|
||||
height: 2px;
|
||||
background: linear-gradient(90deg, transparent, rgba(43,138,255,0.4), transparent);
|
||||
margin: 2rem auto;
|
||||
}
|
||||
.footer {
|
||||
color: #3a5570;
|
||||
font-size: 0.75rem;
|
||||
line-height: 1.6;
|
||||
}
|
||||
@media (max-width: 480px) {
|
||||
h1 { font-size: 2.2rem; }
|
||||
.icon { font-size: 3.5rem; }
|
||||
.container { padding: 1.5rem; }
|
||||
.features { grid-template-columns: 1fr; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="bg"></div>
|
||||
<div class="container">
|
||||
<div class="badge">Platform</div>
|
||||
<div class="icon">🌻</div>
|
||||
<h1>FlowerCore</h1>
|
||||
<p class="domain">flowercore.io</p>
|
||||
<p class="tagline">
|
||||
Multi-tenant service management platform.
|
||||
Digital signage, telephony, MySQL hosting, and more.
|
||||
</p>
|
||||
<div class="status">
|
||||
<span class="dot"></span>
|
||||
<p>Under Construction</p>
|
||||
</div>
|
||||
<div class="features">
|
||||
<div class="feature">
|
||||
<h3>Digital Signage</h3>
|
||||
<p>Screens, zones, scheduling</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Telephony</h3>
|
||||
<p>IVR workflows, Twilio</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>MySQL Manager</h3>
|
||||
<p>Database provisioning</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>PHP Manager</h3>
|
||||
<p>Site deployment</p>
|
||||
</div>
|
||||
</div>
|
||||
<div class="divider"></div>
|
||||
<p class="footer">
|
||||
FlowerCore · Blue Jay Lab
|
||||
</p>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
---
|
||||
# nginx configuration
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: flowercore-web-nginx-conf
|
||||
namespace: tenant-flowercore
|
||||
data:
|
||||
default.conf: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
location /healthz {
|
||||
access_log off;
|
||||
return 200 "ok";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
---
|
||||
# Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: flowercore-web
|
||||
namespace: tenant-flowercore
|
||||
labels:
|
||||
app: flowercore-web
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: flowercore-web
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: flowercore-web
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- containerPort: 80
|
||||
name: http
|
||||
volumeMounts:
|
||||
- name: nginx-conf
|
||||
mountPath: /etc/nginx/conf.d/default.conf
|
||||
subPath: default.conf
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
resources:
|
||||
requests:
|
||||
memory: 32Mi
|
||||
cpu: 10m
|
||||
limits:
|
||||
memory: 64Mi
|
||||
cpu: 50m
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 80
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 5
|
||||
volumes:
|
||||
- name: nginx-conf
|
||||
configMap:
|
||||
name: flowercore-web-nginx-conf
|
||||
- name: html
|
||||
configMap:
|
||||
name: flowercore-web-html
|
||||
---
|
||||
# Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: flowercore-web
|
||||
namespace: tenant-flowercore
|
||||
spec:
|
||||
selector:
|
||||
app: flowercore-web
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
name: http
|
||||
---
|
||||
# Traefik IngressRoute — public via Cloudflare
|
||||
# Uses existing cf-origin-flowercore-io cert (must be copied to this namespace)
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: IngressRoute
|
||||
metadata:
|
||||
name: flowercore-web
|
||||
namespace: tenant-flowercore
|
||||
spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`flowercore.io`) || Host(`www.flowercore.io`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: flowercore-web
|
||||
port: 80
|
||||
tls:
|
||||
secretName: cf-origin-flowercore-io
|
||||
@@ -50,7 +50,7 @@ metadata:
|
||||
spec:
|
||||
secretName: traefik-tls
|
||||
issuerRef:
|
||||
name: step-ca-issuer
|
||||
name: step-ca-acme
|
||||
kind: ClusterIssuer
|
||||
dnsNames:
|
||||
- traefik.iamworkin.lan
|
||||
|
||||
Reference in New Issue
Block a user