devtools: add sourcegraph
Change-Id: Ic3c40768c761e598e0f42b17a4b9f0d4ebcb2bb2
diff --git a/devtools/kube/prod.jsonnet b/devtools/kube/prod.jsonnet
index add1899..3bdccd2 100644
--- a/devtools/kube/prod.jsonnet
+++ b/devtools/kube/prod.jsonnet
@@ -1,7 +1,9 @@
local mirko = import "../../kube/mirko.libsonnet";
+local policies = import "../../kube/policies.libsonnet";
local depotview = import "depotview.libsonnet";
local hackdoc = import "hackdoc.libsonnet";
+local sourcegraph = import "sourcegraph.libsonnet";
{
devtools(name):: mirko.Environment(name) {
@@ -13,14 +15,23 @@
hackdoc: hackdoc.cfg {
publicFQDN: "hackdoc.hackerspace.pl",
},
+ sourcegraph: sourcegraph.cfg {
+ publicFQDN: "cs.hackerspace.pl",
+ },
},
components: {
depotview: depotview.component(cfg.depotview, env),
hackdoc: hackdoc.component(cfg.hackdoc, env),
+ // This is configurated manually through the web interface, q3k has an account
+ // and can create more administrative ones if needed.
+ sourcegraph: sourcegraph.component(cfg.sourcegraph, env),
},
},
prod: self.devtools("devtools-prod") {
+ local env = self,
+ // For SourceGraph's tini container mess.
+ policy: policies.AllowNamespaceMostlySecure(env.cfg.namespace),
},
}