- fc-dns: add OnePasswordItem CRD for DNS API keys + NetworkPolicy for Phase 0 auth hardening; bump dns-web image tag - fc-landing: rewrite landing HTML to remove CDN dependencies (air-gap safe); add preview.html standalone preview - github-runner: add TOOLCACHE_ARCH to install-ruby-toolcache.sh for arm64 support; add Dockerfile.arm64 for arm64 ARC runner image - docs/gx10-tenant-landing: per-user Deployment+IngressRoute manifests (andrew/dustin/erik/fit/matt) + CUTOVER-RUNBOOK.md Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
209 lines
5.7 KiB
YAML
209 lines
5.7 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: fc-tenant-dustin
|
|
labels:
|
|
app.kubernetes.io/part-of: bluejay-infra
|
|
flowercore.io/tenant: dustin
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: dustin-web-html
|
|
namespace: fc-tenant-dustin
|
|
data:
|
|
index.html: |
|
|
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>timeforta.co — Coming Soon</title>
|
|
<style>
|
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
|
body {
|
|
background: #1a1a2e;
|
|
color: #e0e0e0;
|
|
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
|
min-height: 100vh;
|
|
display: flex;
|
|
flex-direction: column;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
.container {
|
|
text-align: center;
|
|
padding: 2rem;
|
|
max-width: 600px;
|
|
}
|
|
.icon {
|
|
font-size: 4rem;
|
|
margin-bottom: 1rem;
|
|
filter: drop-shadow(0 0 20px #4aff9e40);
|
|
}
|
|
h1 {
|
|
font-size: 2.5rem;
|
|
font-weight: 700;
|
|
color: #4aff9e;
|
|
margin-bottom: 0.5rem;
|
|
letter-spacing: -0.02em;
|
|
}
|
|
.domain {
|
|
font-size: 1.1rem;
|
|
color: #888;
|
|
margin-bottom: 2rem;
|
|
font-family: 'SF Mono', Monaco, 'Cascadia Code', monospace;
|
|
}
|
|
.divider {
|
|
width: 60px;
|
|
height: 3px;
|
|
background: #4aff9e;
|
|
margin: 0 auto 2rem;
|
|
border-radius: 2px;
|
|
}
|
|
.tagline {
|
|
font-size: 1.3rem;
|
|
color: #ccc;
|
|
margin-bottom: 1rem;
|
|
line-height: 1.5;
|
|
}
|
|
.status {
|
|
display: inline-block;
|
|
padding: 0.4rem 1.2rem;
|
|
background: #4aff9e15;
|
|
border: 1px solid #4aff9e40;
|
|
border-radius: 20px;
|
|
color: #4aff9e;
|
|
font-size: 0.85rem;
|
|
font-weight: 500;
|
|
letter-spacing: 0.05em;
|
|
text-transform: uppercase;
|
|
margin-top: 1.5rem;
|
|
}
|
|
.pulse {
|
|
display: inline-block;
|
|
width: 8px;
|
|
height: 8px;
|
|
background: #4aff9e;
|
|
border-radius: 50%;
|
|
margin-right: 8px;
|
|
animation: pulse 2s infinite;
|
|
}
|
|
@keyframes pulse {
|
|
0%, 100% { opacity: 1; }
|
|
50% { opacity: 0.3; }
|
|
}
|
|
footer {
|
|
position: fixed;
|
|
bottom: 0;
|
|
width: 100%;
|
|
text-align: center;
|
|
padding: 1.5rem;
|
|
color: #555;
|
|
font-size: 0.8rem;
|
|
border-top: 1px solid #ffffff08;
|
|
background: #1a1a2e;
|
|
}
|
|
footer a {
|
|
color: #4a9eff;
|
|
text-decoration: none;
|
|
}
|
|
footer a:hover {
|
|
text-decoration: underline;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<div class="icon">🌮</div>
|
|
<h1>timeforta.co</h1>
|
|
<div class="domain">Dustin</div>
|
|
<div class="divider"></div>
|
|
<p class="tagline">It's always time for tacos.</p>
|
|
<div class="status">
|
|
<span class="pulse"></span>
|
|
Under Construction
|
|
</div>
|
|
</div>
|
|
<footer>
|
|
Powered by <a href="https://flowercore.io">FlowerCore</a> • Hosted on Blue Jay Infrastructure
|
|
</footer>
|
|
</body>
|
|
</html>
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: dustin-web-nginx-conf
|
|
namespace: fc-tenant-dustin
|
|
data:
|
|
default.conf: |
|
|
server {
|
|
listen 80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
location / { try_files $uri $uri/ =404; }
|
|
location /healthz { access_log off; return 200 "ok"; add_header Content-Type text/plain; }
|
|
}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: dustin-web
|
|
namespace: fc-tenant-dustin
|
|
labels:
|
|
app: dustin-web
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: dustin-web
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: dustin-web
|
|
spec:
|
|
containers:
|
|
- name: nginx
|
|
image: nginx:alpine
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
volumeMounts:
|
|
- name: nginx-conf
|
|
mountPath: /etc/nginx/conf.d/default.conf
|
|
subPath: default.conf
|
|
- name: html
|
|
mountPath: /usr/share/nginx/html
|
|
resources:
|
|
requests: { memory: 32Mi, cpu: 10m }
|
|
limits: { memory: 64Mi, cpu: 50m }
|
|
livenessProbe:
|
|
httpGet: { path: /healthz, port: 80 }
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
httpGet: { path: /healthz, port: 80 }
|
|
initialDelaySeconds: 3
|
|
periodSeconds: 5
|
|
volumes:
|
|
- name: nginx-conf
|
|
configMap: { name: dustin-web-nginx-conf }
|
|
- name: html
|
|
configMap: { name: dustin-web-html }
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: dustin-web
|
|
namespace: fc-tenant-dustin
|
|
spec:
|
|
selector:
|
|
app: dustin-web
|
|
ports:
|
|
- port: 80
|
|
targetPort: 80
|
|
name: http
|