From 9d0bbdfb9f7ef186d61b9074e782b036cabc576e Mon Sep 17 00:00:00 2001 From: Joe Banks Date: Mon, 15 Apr 2024 12:45:57 +0100 Subject: Move metabase to tooling namespace --- kubernetes/namespaces/default/metabase/README.md | 14 -------- .../namespaces/default/metabase/deployment.yaml | 35 -------------------- .../namespaces/default/metabase/ingress.yaml | 24 -------------- .../namespaces/default/metabase/secrets.yaml | Bin 338 -> 0 bytes .../namespaces/default/metabase/service.yaml | 11 ------- kubernetes/namespaces/tooling/metabase/README.md | 14 ++++++++ .../namespaces/tooling/metabase/deployment.yaml | 36 +++++++++++++++++++++ .../namespaces/tooling/metabase/ingress.yaml | 25 ++++++++++++++ .../namespaces/tooling/metabase/secrets.yaml | Bin 0 -> 338 bytes .../namespaces/tooling/metabase/service.yaml | 12 +++++++ 10 files changed, 87 insertions(+), 84 deletions(-) delete mode 100644 kubernetes/namespaces/default/metabase/README.md delete mode 100644 kubernetes/namespaces/default/metabase/deployment.yaml delete mode 100644 kubernetes/namespaces/default/metabase/ingress.yaml delete mode 100644 kubernetes/namespaces/default/metabase/secrets.yaml delete mode 100644 kubernetes/namespaces/default/metabase/service.yaml create mode 100644 kubernetes/namespaces/tooling/metabase/README.md create mode 100644 kubernetes/namespaces/tooling/metabase/deployment.yaml create mode 100644 kubernetes/namespaces/tooling/metabase/ingress.yaml create mode 100644 kubernetes/namespaces/tooling/metabase/secrets.yaml create mode 100644 kubernetes/namespaces/tooling/metabase/service.yaml (limited to 'kubernetes/namespaces') diff --git a/kubernetes/namespaces/default/metabase/README.md b/kubernetes/namespaces/default/metabase/README.md deleted file mode 100644 index b246d54..0000000 --- a/kubernetes/namespaces/default/metabase/README.md +++ /dev/null @@ -1,14 +0,0 @@ -# Metabase -These manifests provision an instance of Metabase, our database analysis tool. - -## Secrets -A single secret of name `metabase-env` is used with the following values: - -| Environment | Description | -|--------------|-------------------------------------------| -| MB_DB_DBNAME | Database name for internal metabase usage | -| MB_DB_HOST | Address of PostgreSQL database | -| MB_DB_TYPE | Always postgres | -| MB_DB_PASS | Database user password | -| MB_DB_PORT | Always 5432 | -| MB_DB_USER | User for metabase internal | diff --git a/kubernetes/namespaces/default/metabase/deployment.yaml b/kubernetes/namespaces/default/metabase/deployment.yaml deleted file mode 100644 index 7a58851..0000000 --- a/kubernetes/namespaces/default/metabase/deployment.yaml +++ /dev/null @@ -1,35 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: metabase -spec: - replicas: 1 - selector: - matchLabels: - app: metabase - template: - metadata: - labels: - app: metabase - spec: - securityContext: - fsGroup: 2000 - runAsUser: 1000 - runAsNonRoot: true - containers: - - name: metabase - image: metabase/metabase:latest - imagePullPolicy: Always - ports: - - containerPort: 3000 - envFrom: - - secretRef: - name: metabase-env - volumeMounts: - - mountPath: /plugins - name: mb-plugins-volume - securityContext: - readOnlyRootFilesystem: true - volumes: - - name: mb-plugins-volume - emptyDir: {} diff --git a/kubernetes/namespaces/default/metabase/ingress.yaml b/kubernetes/namespaces/default/metabase/ingress.yaml deleted file mode 100644 index 16b66d5..0000000 --- a/kubernetes/namespaces/default/metabase/ingress.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - annotations: - nginx.ingress.kubernetes.io/auth-tls-verify-client: "on" - nginx.ingress.kubernetes.io/auth-tls-secret: "kube-system/mtls-client-crt-bundle" - nginx.ingress.kubernetes.io/auth-tls-error-page: "https://www.youtube.com/watch?v=dQw4w9WgXcQ" - name: metabase -spec: - tls: - - hosts: - - "*.pythondiscord.com" - secretName: pythondiscord.com-tls - rules: - - host: metabase.pythondiscord.com - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: metabase - port: - number: 80 diff --git a/kubernetes/namespaces/default/metabase/secrets.yaml b/kubernetes/namespaces/default/metabase/secrets.yaml deleted file mode 100644 index 2cb73c5..0000000 Binary files a/kubernetes/namespaces/default/metabase/secrets.yaml and /dev/null differ diff --git a/kubernetes/namespaces/default/metabase/service.yaml b/kubernetes/namespaces/default/metabase/service.yaml deleted file mode 100644 index 36118a0..0000000 --- a/kubernetes/namespaces/default/metabase/service.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: metabase -spec: - selector: - app: metabase - ports: - - protocol: TCP - port: 80 - targetPort: 3000 diff --git a/kubernetes/namespaces/tooling/metabase/README.md b/kubernetes/namespaces/tooling/metabase/README.md new file mode 100644 index 0000000..b246d54 --- /dev/null +++ b/kubernetes/namespaces/tooling/metabase/README.md @@ -0,0 +1,14 @@ +# Metabase +These manifests provision an instance of Metabase, our database analysis tool. + +## Secrets +A single secret of name `metabase-env` is used with the following values: + +| Environment | Description | +|--------------|-------------------------------------------| +| MB_DB_DBNAME | Database name for internal metabase usage | +| MB_DB_HOST | Address of PostgreSQL database | +| MB_DB_TYPE | Always postgres | +| MB_DB_PASS | Database user password | +| MB_DB_PORT | Always 5432 | +| MB_DB_USER | User for metabase internal | diff --git a/kubernetes/namespaces/tooling/metabase/deployment.yaml b/kubernetes/namespaces/tooling/metabase/deployment.yaml new file mode 100644 index 0000000..d55ac22 --- /dev/null +++ b/kubernetes/namespaces/tooling/metabase/deployment.yaml @@ -0,0 +1,36 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: metabase + namespace: tooling +spec: + replicas: 1 + selector: + matchLabels: + app: metabase + template: + metadata: + labels: + app: metabase + spec: + securityContext: + fsGroup: 2000 + runAsUser: 1000 + runAsNonRoot: true + containers: + - name: metabase + image: metabase/metabase:latest + imagePullPolicy: Always + ports: + - containerPort: 3000 + envFrom: + - secretRef: + name: metabase-env + volumeMounts: + - mountPath: /plugins + name: mb-plugins-volume + securityContext: + readOnlyRootFilesystem: true + volumes: + - name: mb-plugins-volume + emptyDir: {} diff --git a/kubernetes/namespaces/tooling/metabase/ingress.yaml b/kubernetes/namespaces/tooling/metabase/ingress.yaml new file mode 100644 index 0000000..b29bdd8 --- /dev/null +++ b/kubernetes/namespaces/tooling/metabase/ingress.yaml @@ -0,0 +1,25 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + annotations: + nginx.ingress.kubernetes.io/auth-tls-verify-client: "on" + nginx.ingress.kubernetes.io/auth-tls-secret: "kube-system/mtls-client-crt-bundle" + nginx.ingress.kubernetes.io/auth-tls-error-page: "https://www.youtube.com/watch?v=dQw4w9WgXcQ" + name: metabase + namespace: tooling +spec: + tls: + - hosts: + - "*.pythondiscord.com" + secretName: pythondiscord.com-tls + rules: + - host: metabase.pythondiscord.com + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: metabase + port: + number: 80 diff --git a/kubernetes/namespaces/tooling/metabase/secrets.yaml b/kubernetes/namespaces/tooling/metabase/secrets.yaml new file mode 100644 index 0000000..909264d Binary files /dev/null and b/kubernetes/namespaces/tooling/metabase/secrets.yaml differ diff --git a/kubernetes/namespaces/tooling/metabase/service.yaml b/kubernetes/namespaces/tooling/metabase/service.yaml new file mode 100644 index 0000000..76e2841 --- /dev/null +++ b/kubernetes/namespaces/tooling/metabase/service.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Service +metadata: + name: metabase + namespace: tooling +spec: + selector: + app: metabase + ports: + - protocol: TCP + port: 80 + targetPort: 3000 -- cgit v1.2.3