q3k: random stuff from local git checkout
Change-Id: I497a3ca080ac2124d05f49bb8bee5766254134b4
diff --git a/personal/q3k/rc3.jsonnet b/personal/q3k/rc3.jsonnet
new file mode 100644
index 0000000..879e291
--- /dev/null
+++ b/personal/q3k/rc3.jsonnet
@@ -0,0 +1,60 @@
+local kube = import "../../kube/kube.libsonnet";
+
+{
+ local rc3 = self,
+ deploy: kube.Deployment("rc3-data") {
+ metadata+: {
+ namespace: "personal-q3k",
+ },
+ spec+: {
+ template+: {
+ spec+: {
+ containers_: {
+ default: kube.Container("default") {
+ image: "registry.k0.hswaw.net/q3k/rc3-data:1610640062",
+ ports_: {
+ http: { containerPort: 8080 },
+ },
+ },
+ },
+ securityContext: {
+ // nginx:nginx
+ runAsUser: 101,
+ runAsGroup: 101,
+ },
+ },
+ },
+ },
+ },
+ svc: kube.Service("rc3-data") {
+ metadata+: {
+ namespace: "personal-q3k",
+ },
+ target_pod:: rc3.deploy.spec.template,
+ },
+ ingress: kube.Ingress("rc3-data") {
+ metadata+: {
+ namespace: "personal-q3k",
+ annotations+: {
+ "kubernetes.io/tls-acme": "true",
+ "certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
+ "nginx.ingress.kubernetes.io/proxy-body-size": "0",
+ },
+ },
+ spec+: {
+ tls: [
+ { hosts: [ "rc3-data.q3k.org"], secretName: "rc3-data-tls", },
+ ],
+ rules: [
+ {
+ host: "rc3-data.q3k.org",
+ http: {
+ paths: [
+ { path: "/", backend: rc3.svc.name_port },
+ ],
+ },
+ },
+ ],
+ },
+ },
+}