djpbessems/Kubernetes.K3s.installLog
djpbessems
/
Kubernetes.K3s.installLog
1
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use local registry proxy for most services

This commit is contained in:
Danny Bessems 2020-11-04 13:11:47 +01:00
parent 3120186df9
commit e226c3ce71
21 changed files with 156 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ingress/Traefik2.x/chart-values.yml
View File

@ -10,6 +10,10 @@ ports:
web:
redirectTo: websecure
service:
spec:
externalTrafficPolicy: Local
volumes:
- name: traefik-configmap
mountPath: /etc/traefik

2
services/Adminer/deploy-Adminer.yml
View File

@ -37,7 +37,7 @@ spec:
serviceAccountName: adminer
containers:
- name: adminer
image: adminer
image: registry.spamasaurus.com/proxy/library/adminer
ports:
- name: web
containerPort: 8080

4
services/Authelia/deploy-Authelia.yml
View File

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: authelia
image: authelia/authelia
image: registry.spamasaurus.com/proxy/authelia/authelia
env:
- name: TZ
value: Europe/Amsterdam
@ -27,7 +27,7 @@ spec:
- name: flexvolsmb-authelia-conf
mountPath: /config
- name: redis
image: redis:alpine
image: registry.spamasaurus.com/proxy/library/redis:alpine
args:
- redis-server
- --requirepass authelia

2
services/DDclient/deploy-DDclient.yml
View File

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: ddclient
image: linuxserver/ddclient
image: registry.spamasaurus.com/proxy/linuxserver/ddclient
volumeMounts:
- mountPath: /config
name: ddclient-secret

6
services/DroneCI/deploy-DroneCI.yml
View File

@ -39,8 +39,7 @@ spec:
serviceAccountName: drone
containers:
- name: drone
# image: registry.spamasaurus.com/proxy/drone/drone:latest
image: drone/drone:latest
image: registry.spamasaurus.com/proxy/drone/drone:latest
command: ["sh", "-c", ". /vault/secrets/drone && /bin/drone-server"]
env:
- name: DRONE_SERVER_PROTO
@ -66,8 +65,7 @@ spec:
- mountPath: /data
name: flexvolsmb-drone-data
- name: drone-runner
# image: registry.spamasaurus.com/proxy/drone/drone-runner-kube:latest
image: drone/drone-runner-kube:latest
image: registry.spamasaurus.com/proxy/drone/drone-runner-kube:latest
command: ["sh", "-c", ". /vault/secrets/drone && /bin/drone-runner-kube"]
ports:
- containerPort: 3000

2
services/Gitea/deploy-Gitea.yml
View File

@ -28,7 +28,7 @@ spec:
spec:
containers:
- name: gitea
image: gitea/gitea:1
image: registry.spamasaurus.com/proxy/gitea/gitea:1
env:
- name: DB_TYPE
value: 'sqlite3'

2
services/Gotify/deploy-Gotify.yml
View File

@ -28,7 +28,7 @@ spec:
spec:
containers:
- name: gotify
image: gotify/server
image: registry.spamasaurus.com/proxy/gotify/server
ports:
- name: web
containerPort: 80

6
services/Guacamole/deploy-Guacamole.yml
View File

@ -35,7 +35,7 @@ spec:
hostname: guacamole
containers:
- name: guacamole
image: guacamole/guacamole
image: registry.spamasaurus.com/proxy/guacamole/guacamole
env:
- name: GUACD_HOSTNAME
value: 'guacamole.default.svc.cluster.local'
@ -53,7 +53,7 @@ spec:
- name: ui
containerPort: 8080
- name: guacd
image: guacamole/guacd
image: registry.spamasaurus.com/proxy/guacamole/guacd
env:
- name: GUACD_LOG_LEVEL
value: 'debug'
@ -61,7 +61,7 @@ spec:
- name: proxy
containerPort: 4822
- name: mysql
image: mysql:latest
image: registry.spamasaurus.com/proxy/library/mysql:latest
securityContext:
runAsUser: 999
runAsGroup: 999

2
services/Lighttpd/deploy-Lighttpd.yml
View File

@ -28,7 +28,7 @@ spec:
spec:
containers:
- name: lighttpd-php-pwsh
image: djpbessems/lighttpd-php-powershell
image: registry.spamasaurus.com/library/lighttpd-php-powershell
ports:
- name: web
containerPort: 8080

2
services/PVR/deploy-NZBHydra.yml
View File

@ -30,7 +30,7 @@ spec:
spec:
containers:
- name: nzbhydra
image: linuxserver/nzbhydra2
image: registry.spamasaurus.com/proxy/linuxserver/nzbhydra2
ports:
- name: web
containerPort: 5076

129
services/PVR/deploy-Plex.yml Normal file
View File

@ -0,0 +1,129 @@
apiVersion: v1
kind: Service
metadata:
name: plex
namespace: pvr
spec:
ports:
- protocol: TCP
name: web
port: 32400
selector:
app: plex
---
apiVersion: v1
kind: Service
metadata:
name: plex-remoteaccess
namespace: pvr
spec:
ports:
- port: 32400
protocol: TCP
targetPort: 32400
selector:
app: plex
type: LoadBalancer
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: plex
namespace: pvr
labels:
app: plex
spec:
replicas: 1
selector:
matchLabels:
app: plex
template:
metadata:
labels:
app: plex
spec:
containers:
- name: plex
image: registry.spamasaurus.com/proxy/linuxserver/plex
ports:
- name: web
containerPort: 32400
env:
- name: VERSION
value: latest
volumeMounts:
- mountPath: /config
name: flexvolsmb-plex-config
- mountPath: /data/series
name: flexvolsmb-pvr-series
- mountPath: /data/movies
name: flexvolsmb-pvr-movies
volumes:
- name: flexvolsmb-plex-config
persistentVolumeClaim:
claimName: flexvolsmb-plex-config
- name: flexvolsmb-pvr-series
persistentVolumeClaim:
claimName: flexvolsmb-pvr-series
- name: flexvolsmb-pvr-movies
persistentVolumeClaim:
claimName: flexvolsmb-pvr-movies
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: plex
namespace: pvr
spec:
entryPoints:
- websecure
routes:
- match: Host(`media.pvr.spamasaurus.com`)
kind: Rule
services:
- name: plex
port: 32400
middlewares:
- name: security-headers@file
- name: compression@file
tls:
options:
name: defaults@file
certResolver: default
domains:
- main: '*.pvr.spamasaurus.com'
sans:
- 'pvr.spamasaurus.com'
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: flexvolsmb-plex-config
namespace: pvr
spec:
capacity:
storage: 1Gi
accessModes:
- ReadWriteMany
storageClassName: flexvolsmb-plex-config
flexVolume:
driver: mount/smb
secretRef:
name: smb-secret
options:
opts: domain=bessems.eu,file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8
server: 192.168.11.225
share: /K3s.Volumes/plex/config
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: flexvolsmb-plex-config
namespace: pvr
spec:
accessModes:
- ReadWriteMany
storageClassName: flexvolsmb-plex-config
resources:
requests:
storage: 1Gi

2
services/PVR/deploy-Radarr.yml
View File

@ -30,7 +30,7 @@ spec:
spec:
containers:
- name: radarr
image: linuxserver/radarr:nightly
image: registry.spamasaurus.com/proxy/linuxserver/radarr:nightly
ports:
- name: web
containerPort: 7878

2
services/PVR/deploy-Readarr.yml
View File

@ -30,7 +30,7 @@ spec:
spec:
containers:
- name: readarr
image: hotio/readarr:nightly
image: registry.spamasaurus.com/proxy/hotio/readarr:nightly
env:
- name: DEBUG
value: 'yes'

2
services/PVR/deploy-SABnzbd.yml
View File

@ -30,7 +30,7 @@ spec:
spec:
containers:
- name: sabnzbd
image: linuxserver/sabnzbd
image: registry.spamasaurus.com/proxy/linuxserver/sabnzbd
ports:
- name: web
containerPort: 8080

2
services/PVR/deploy-Sonarr.yml
View File

@ -30,7 +30,7 @@ spec:
spec:
containers:
- name: sonarr
image: linuxserver/sonarr:preview
image: registry.spamasaurus.com/proxy/linuxserver/sonarr:preview
ports:
- name: web
containerPort: 8989

2
services/Shaarli/deploy-Shaarli.yml
View File

@ -28,7 +28,7 @@ spec:
spec:
containers:
- name: shaarli
image: shaarli/shaarli
image: registry.spamasaurus.com/proxy/shaarli/shaarli
ports:
- name: web
containerPort: 80

2
services/Theia/deploy-Theia.yml
View File

@ -28,7 +28,7 @@ spec:
spec:
containers:
- name: theia
image: theiaide/theia-full
image: registry.spamasaurus.com/proxy/theiaide/theia-full
ports:
- name: web
containerPort: 3000

2
services/TraefikCertsDumper/deploy-TraefikCertsDumper.yml
View File

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: traefik-certs-dumper
image: ldez/traefik-certs-dumper:latest-amd64
image: registry.spamasaurus.com/proxy/ldez/traefik-certs-dumper:latest-amd64
command: ['traefik-certs-dumper', 'file']
args:
- --watch

2
system/RolloutRestart/cronjob-RolloutRestart.yml
View File

@ -49,7 +49,7 @@ spec:
restartPolicy: Never
containers:
- name: kubectl
image: bitnami/kubectl
image: registry.spamasaurus.com/proxy/bitnami/kubectl
command:
- 'bash'
- '-c'

2
system/UpgradeController/plan-Agent.yml
View File

@ -17,5 +17,5 @@ spec:
image: rancher/k3s-upgrade:v1.18.6-k3s1
serviceAccountName: system-upgrade
upgrade:
image: rancher/k3s-upgrade
image: registry.spamasaurus.com/proxy/rancher/k3s-upgrade
channel: https://update.k3s.io/v1-release/channels/stable

2
system/UpgradeController/plan-Server.yml
View File

@ -14,5 +14,5 @@ spec:
- "true"
serviceAccountName: system-upgrade
upgrade:
image: rancher/k3s-upgrade
image: registry.spamasaurus.com/proxy/rancher/k3s-upgrade
channel: https://update.k3s.io/v1-release/channels/stable