diff options
author | 2024-04-15 11:26:52 +0100 | |
---|---|---|
committer | 2024-04-15 11:26:52 +0100 | |
commit | 23f7ec4f17dde7761619ef29634dd177b292d742 (patch) | |
tree | be7744708c4c70f00e070f45acfe46efa636430d /kubernetes/namespaces/default/bitwarden | |
parent | Remove unused services (diff) |
Move services to tooling namespace
Diffstat (limited to 'kubernetes/namespaces/default/bitwarden')
-rw-r--r-- | kubernetes/namespaces/default/bitwarden/README.md | 14 | ||||
-rw-r--r-- | kubernetes/namespaces/default/bitwarden/configmap.yaml | 23 | ||||
-rw-r--r-- | kubernetes/namespaces/default/bitwarden/deployment.yaml | 34 | ||||
-rw-r--r-- | kubernetes/namespaces/default/bitwarden/ingress.yaml | 24 | ||||
-rw-r--r-- | kubernetes/namespaces/default/bitwarden/secrets.yaml | bin | 345 -> 0 bytes | |||
-rw-r--r-- | kubernetes/namespaces/default/bitwarden/service.yaml | 9 |
6 files changed, 0 insertions, 104 deletions
diff --git a/kubernetes/namespaces/default/bitwarden/README.md b/kubernetes/namespaces/default/bitwarden/README.md deleted file mode 100644 index 37f01eb..0000000 --- a/kubernetes/namespaces/default/bitwarden/README.md +++ /dev/null @@ -1,14 +0,0 @@ -# BitWarden - -Our internal password manager, used by the admins to share passwords for our services. Hosted at https://bitwarden.pythondiscord.com - -To deploy this, first set up the secrets (see below) and then run `kubectl apply -f .` in this folder. - -## Secrets -This deployment expects a few secrets to exist in a secret called `bitwarden-secret-env`. - - -| Environment | Description | -|-----------------------|-------------------------------------------| -| ADMIN_TOKEN | 64-character token used for initial login | -| DATABASE_URL | Database string: host://user:pass/db | diff --git a/kubernetes/namespaces/default/bitwarden/configmap.yaml b/kubernetes/namespaces/default/bitwarden/configmap.yaml deleted file mode 100644 index c758f5d..0000000 --- a/kubernetes/namespaces/default/bitwarden/configmap.yaml +++ /dev/null @@ -1,23 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: bitwarden-config-env -data: - # Domain to access bitwarden by - DOMAIN: "https://bitwarden.pythondiscord.com" - - # Password hint must be sent to an email when this is false. - # When it's true, it'll be shown right on the page. - SHOW_PASSWORD_HINT: "false" - - # Admins only, please! - SIGNUPS_ALLOWED: "false" - - # Used for LiveSync - WEBSOCKET_ENABLED: "true" - - # Max conns to the DB - DATABASE_MAX_CONNS: "2" - - # Force bitwarden to use postgres, rather than it's own volume - I_REALLY_WANT_VOLATILE_STORAGE: "true" diff --git a/kubernetes/namespaces/default/bitwarden/deployment.yaml b/kubernetes/namespaces/default/bitwarden/deployment.yaml deleted file mode 100644 index 70a22ce..0000000 --- a/kubernetes/namespaces/default/bitwarden/deployment.yaml +++ /dev/null @@ -1,34 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: bitwarden -spec: - replicas: 1 - selector: - matchLabels: - app: bitwarden - template: - metadata: - labels: - app: bitwarden - spec: - containers: - - name: bitwarden - image: vaultwarden/server:latest - imagePullPolicy: Always - resources: - requests: - cpu: 1m - memory: 50Mi - limits: - cpu: 50m - memory: 100Mi - ports: - - containerPort: 80 - envFrom: - - secretRef: - name: bitwarden-secret-env - - configMapRef: - name: bitwarden-config-env - securityContext: - readOnlyRootFilesystem: true diff --git a/kubernetes/namespaces/default/bitwarden/ingress.yaml b/kubernetes/namespaces/default/bitwarden/ingress.yaml deleted file mode 100644 index d0371f6..0000000 --- a/kubernetes/namespaces/default/bitwarden/ingress.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - annotations: - nginx.ingress.kubernetes.io/auth-tls-verify-client: "on" - nginx.ingress.kubernetes.io/auth-tls-secret: "kube-system/mtls-client-crt-bundle" - nginx.ingress.kubernetes.io/auth-tls-error-page: "https://www.youtube.com/watch?v=dQw4w9WgXcQ" - name: bitwarden -spec: - tls: - - hosts: - - "*.pythondiscord.com" - secretName: pythondiscord.com-tls - rules: - - host: bitwarden.pythondiscord.com - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: bitwarden - port: - number: 80 diff --git a/kubernetes/namespaces/default/bitwarden/secrets.yaml b/kubernetes/namespaces/default/bitwarden/secrets.yaml Binary files differdeleted file mode 100644 index 34cfd7a..0000000 --- a/kubernetes/namespaces/default/bitwarden/secrets.yaml +++ /dev/null diff --git a/kubernetes/namespaces/default/bitwarden/service.yaml b/kubernetes/namespaces/default/bitwarden/service.yaml deleted file mode 100644 index 3df8cc2..0000000 --- a/kubernetes/namespaces/default/bitwarden/service.yaml +++ /dev/null @@ -1,9 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: bitwarden -spec: - ports: - - port: 80 - selector: - app: bitwarden |