diff options
Diffstat (limited to 'kubernetes/namespaces/default')
-rw-r--r-- | kubernetes/namespaces/default/pixels-modsite/README.md | 13 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels-modsite/deployment.yaml | 31 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels-modsite/ingress.yaml | 24 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels-modsite/secrets.yaml | bin | 258 -> 0 bytes | |||
-rw-r--r-- | kubernetes/namespaces/default/pixels-modsite/service.yaml | 11 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels/README.md | 18 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels/configmap.yaml | 12 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels/deployment.yaml | 44 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels/ingress.yaml | 24 | ||||
-rw-r--r-- | kubernetes/namespaces/default/pixels/secrets.yaml | bin | 975 -> 0 bytes | |||
-rw-r--r-- | kubernetes/namespaces/default/pixels/service.yaml | 11 |
11 files changed, 0 insertions, 188 deletions
diff --git a/kubernetes/namespaces/default/pixels-modsite/README.md b/kubernetes/namespaces/default/pixels-modsite/README.md deleted file mode 100644 index ee95650..0000000 --- a/kubernetes/namespaces/default/pixels-modsite/README.md +++ /dev/null @@ -1,13 +0,0 @@ -# Pixels - -The deployment for the [Pixels modsite project](https://git.pydis.com/pixels-modsite), hosted at https://pixels-modsite.pythondiscord.com. - -This mod site will give Discord mods easy access to moderation actions for the pixels event. - -## Secret - -It requires a `pixels-modsite-env` secret with the following entries: - -| Environment | Description | -|-------------------|-----------------------------------------------------------------| -| DISCORD_BOT_TOKEN | The Discord bot token to use to check roles of users logging in | diff --git a/kubernetes/namespaces/default/pixels-modsite/deployment.yaml b/kubernetes/namespaces/default/pixels-modsite/deployment.yaml deleted file mode 100644 index 2b9d632..0000000 --- a/kubernetes/namespaces/default/pixels-modsite/deployment.yaml +++ /dev/null @@ -1,31 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: pixels-modsite -spec: - replicas: 1 - selector: - matchLabels: - app: pixels-modsite - template: - metadata: - labels: - app: pixels-modsite - spec: - containers: - - name: pixels-modsite - image: ghcr.io/python-discord/pixels-modsite:latest - imagePullPolicy: Always - ports: - - containerPort: 3000 - envFrom: - - secretRef: - name: pixels-modsite-env - securityContext: - readOnlyRootFilesystem: true - imagePullSecrets: - - name: ghcr-pull-secret - securityContext: - fsGroup: 2000 - runAsUser: 1000 - runAsNonRoot: true diff --git a/kubernetes/namespaces/default/pixels-modsite/ingress.yaml b/kubernetes/namespaces/default/pixels-modsite/ingress.yaml deleted file mode 100644 index 80c8dbe..0000000 --- a/kubernetes/namespaces/default/pixels-modsite/ingress.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - annotations: - nginx.ingress.kubernetes.io/auth-tls-verify-client: "on" - nginx.ingress.kubernetes.io/auth-tls-secret: "kube-system/mtls-client-crt-bundle" - nginx.ingress.kubernetes.io/auth-tls-error-page: "https://www.youtube.com/watch?v=dQw4w9WgXcQ" - name: pixels-modsite -spec: - tls: - - hosts: - - "*.pythondiscord.com" - secretName: pythondiscord.com-tls - rules: - - host: pixels-modsite.pythondiscord.com - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: pixels-modsite - port: - number: 80 diff --git a/kubernetes/namespaces/default/pixels-modsite/secrets.yaml b/kubernetes/namespaces/default/pixels-modsite/secrets.yaml Binary files differdeleted file mode 100644 index 0f4d361..0000000 --- a/kubernetes/namespaces/default/pixels-modsite/secrets.yaml +++ /dev/null diff --git a/kubernetes/namespaces/default/pixels-modsite/service.yaml b/kubernetes/namespaces/default/pixels-modsite/service.yaml deleted file mode 100644 index 8118f09..0000000 --- a/kubernetes/namespaces/default/pixels-modsite/service.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: pixels-modsite -spec: - selector: - app: pixels-modsite - ports: - - protocol: TCP - port: 80 - targetPort: 3000 diff --git a/kubernetes/namespaces/default/pixels/README.md b/kubernetes/namespaces/default/pixels/README.md deleted file mode 100644 index f4ebf12..0000000 --- a/kubernetes/namespaces/default/pixels/README.md +++ /dev/null @@ -1,18 +0,0 @@ -# Pixels - -The deployment for the [Pixels project](https://git.pydis.com/pixels-v2), hosted at https://pixels.pythondiscord.com. - -## Secret - -It requires a `pixels-env` secret with the following entries: - -| Environment | Description | -|---------------|---------------------------------------------------------------------------------------------------------| -| AUTH_URL | A Discord OAuth2 URL with scopes: identify & guilds.members.read | -| CLIENT_ID | Discord Oauth2 client ID | -| CLIENT_SECRET | Discord Oauth2 client secret | -| DATABASE_URL | Postgres database URL. | -| JWT_SECRET | 32 byte (64 digit hex string) secret for encoding tokens. Any value can be used. | -| REDIS_URL | Redis storage URL | -| SENTRY_DSN | The Sentry DSN to send sentry events to | -| WEBHOOK_URL | The webhook to periodically post the canvas state to | diff --git a/kubernetes/namespaces/default/pixels/configmap.yaml b/kubernetes/namespaces/default/pixels/configmap.yaml deleted file mode 100644 index c3ccd50..0000000 --- a/kubernetes/namespaces/default/pixels/configmap.yaml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: pixels-config-env -data: - BASE_URL: https://pixels.pythondiscord.com - FORCE_LOGIN: 'True' - GUILD_ID: '267624335836053506' - HELPERS_ROLE: '267630620367257601' - LOG_LEVEL: debug - MOD_ROLE: '267630620367257601' - PRODUCTION: 'true' diff --git a/kubernetes/namespaces/default/pixels/deployment.yaml b/kubernetes/namespaces/default/pixels/deployment.yaml deleted file mode 100644 index 34e7b50..0000000 --- a/kubernetes/namespaces/default/pixels/deployment.yaml +++ /dev/null @@ -1,44 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: pixels -spec: - replicas: 1 - selector: - matchLabels: - app: pixels - template: - metadata: - labels: - app: pixels - spec: - containers: - - name: pixels - image: ghcr.io/python-discord/pixels:latest - imagePullPolicy: Always - ports: - - containerPort: 8000 - envFrom: - - secretRef: - name: pixels-env - - configMapRef: - name: pixels-config-env - startupProbe: - httpGet: - path: /health - port: 8000 - httpHeaders: - - name: Host - value: pixels.pythondiscord.com - failureThreshold: 15 - periodSeconds: 2 - timeoutSeconds: 5 - initialDelaySeconds: 10 - securityContext: - readOnlyRootFilesystem: true - imagePullSecrets: - - name: ghcr-pull-secret - securityContext: - fsGroup: 2000 - runAsUser: 1000 - runAsNonRoot: true diff --git a/kubernetes/namespaces/default/pixels/ingress.yaml b/kubernetes/namespaces/default/pixels/ingress.yaml deleted file mode 100644 index bfc0ada..0000000 --- a/kubernetes/namespaces/default/pixels/ingress.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - annotations: - nginx.ingress.kubernetes.io/auth-tls-verify-client: "on" - nginx.ingress.kubernetes.io/auth-tls-secret: "kube-system/mtls-client-crt-bundle" - nginx.ingress.kubernetes.io/auth-tls-error-page: "https://www.youtube.com/watch?v=dQw4w9WgXcQ" - name: pixels -spec: - tls: - - hosts: - - "*.pythondiscord.com" - secretName: pythondiscord.com-tls - rules: - - host: pixels.pythondiscord.com - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: pixels - port: - number: 80 diff --git a/kubernetes/namespaces/default/pixels/secrets.yaml b/kubernetes/namespaces/default/pixels/secrets.yaml Binary files differdeleted file mode 100644 index f9db2fb..0000000 --- a/kubernetes/namespaces/default/pixels/secrets.yaml +++ /dev/null diff --git a/kubernetes/namespaces/default/pixels/service.yaml b/kubernetes/namespaces/default/pixels/service.yaml deleted file mode 100644 index 41860a1..0000000 --- a/kubernetes/namespaces/default/pixels/service.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: pixels -spec: - selector: - app: pixels - ports: - - protocol: TCP - port: 80 - targetPort: 8000 |