diff options
Diffstat (limited to 'kubernetes/namespaces/default/bitwarden')
| -rw-r--r-- | kubernetes/namespaces/default/bitwarden/README.md | 14 | ||||
| -rw-r--r-- | kubernetes/namespaces/default/bitwarden/configmap.yaml | 23 | ||||
| -rw-r--r-- | kubernetes/namespaces/default/bitwarden/deployment.yaml | 34 | ||||
| -rw-r--r-- | kubernetes/namespaces/default/bitwarden/ingress.yaml | 24 | ||||
| -rw-r--r-- | kubernetes/namespaces/default/bitwarden/secrets.yaml | bin | 345 -> 0 bytes | |||
| -rw-r--r-- | kubernetes/namespaces/default/bitwarden/service.yaml | 9 | 
6 files changed, 0 insertions, 104 deletions
diff --git a/kubernetes/namespaces/default/bitwarden/README.md b/kubernetes/namespaces/default/bitwarden/README.md deleted file mode 100644 index 37f01eb..0000000 --- a/kubernetes/namespaces/default/bitwarden/README.md +++ /dev/null @@ -1,14 +0,0 @@ -# BitWarden - -Our internal password manager, used by the admins to share passwords for our services. Hosted at https://bitwarden.pythondiscord.com - -To deploy this, first set up the secrets (see below) and then run `kubectl apply -f .` in this folder. - -## Secrets -This deployment expects a few secrets to exist in a secret called `bitwarden-secret-env`. - - -| Environment           | Description                               | -|-----------------------|-------------------------------------------| -| ADMIN_TOKEN           | 64-character token used for initial login | -| DATABASE_URL          | Database string: host://user:pass/db      | diff --git a/kubernetes/namespaces/default/bitwarden/configmap.yaml b/kubernetes/namespaces/default/bitwarden/configmap.yaml deleted file mode 100644 index c758f5d..0000000 --- a/kubernetes/namespaces/default/bitwarden/configmap.yaml +++ /dev/null @@ -1,23 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: -  name: bitwarden-config-env -data: -  # Domain to access bitwarden by -  DOMAIN: "https://bitwarden.pythondiscord.com" - -  # Password hint must be sent to an email when this is false. -  # When it's true, it'll be shown right on the page. -  SHOW_PASSWORD_HINT: "false" - -  # Admins only, please! -  SIGNUPS_ALLOWED: "false" - -  # Used for LiveSync -  WEBSOCKET_ENABLED: "true" - -  # Max conns to the DB -  DATABASE_MAX_CONNS: "2" - -  # Force bitwarden to use postgres, rather than it's own volume -  I_REALLY_WANT_VOLATILE_STORAGE: "true" diff --git a/kubernetes/namespaces/default/bitwarden/deployment.yaml b/kubernetes/namespaces/default/bitwarden/deployment.yaml deleted file mode 100644 index 70a22ce..0000000 --- a/kubernetes/namespaces/default/bitwarden/deployment.yaml +++ /dev/null @@ -1,34 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: -  name: bitwarden -spec: -  replicas: 1 -  selector: -    matchLabels: -      app: bitwarden -  template: -    metadata: -      labels: -        app: bitwarden -    spec: -      containers: -        - name: bitwarden -          image: vaultwarden/server:latest -          imagePullPolicy: Always -          resources: -            requests: -              cpu: 1m -              memory: 50Mi -            limits: -              cpu: 50m -              memory: 100Mi -          ports: -            - containerPort: 80 -          envFrom: -            - secretRef: -                name: bitwarden-secret-env -            - configMapRef: -                name: bitwarden-config-env -          securityContext: -            readOnlyRootFilesystem: true diff --git a/kubernetes/namespaces/default/bitwarden/ingress.yaml b/kubernetes/namespaces/default/bitwarden/ingress.yaml deleted file mode 100644 index d0371f6..0000000 --- a/kubernetes/namespaces/default/bitwarden/ingress.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: -  annotations: -    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on" -    nginx.ingress.kubernetes.io/auth-tls-secret: "kube-system/mtls-client-crt-bundle" -    nginx.ingress.kubernetes.io/auth-tls-error-page: "https://www.youtube.com/watch?v=dQw4w9WgXcQ" -  name: bitwarden -spec: -  tls: -  - hosts: -      - "*.pythondiscord.com" -    secretName: pythondiscord.com-tls -  rules: -  - host: bitwarden.pythondiscord.com -    http: -      paths: -      - path: / -        pathType: Prefix -        backend: -          service: -            name: bitwarden -            port: -              number: 80 diff --git a/kubernetes/namespaces/default/bitwarden/secrets.yaml b/kubernetes/namespaces/default/bitwarden/secrets.yaml Binary files differdeleted file mode 100644 index 34cfd7a..0000000 --- a/kubernetes/namespaces/default/bitwarden/secrets.yaml +++ /dev/null diff --git a/kubernetes/namespaces/default/bitwarden/service.yaml b/kubernetes/namespaces/default/bitwarden/service.yaml deleted file mode 100644 index 3df8cc2..0000000 --- a/kubernetes/namespaces/default/bitwarden/service.yaml +++ /dev/null @@ -1,9 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: -  name: bitwarden -spec: -  ports: -    - port: 80 -  selector: -    app: bitwarden  |