feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases

2026-05-30 13:23:19 +02:00
parent cc038fbb27
commit dcdcaff3b0
31 changed files with 730 additions and 0 deletions
@@ -0,0 +1,62 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nowchess-ingress
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    nginx.ingress.kubernetes.io/use-regex: "true"
+spec:
+  ingressClassName: nginx
+  rules:
+    - http:
+        paths:
+          - path: /api/board/game/[A-Za-z0-9]{8}/ws
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: nowchess-ws-active
+                port:
+                  number: 8084
+          - path: /api/user/ws
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: nowchess-ws-active
+                port:
+                  number: 8084
+          - path: /api/account
+            pathType: Prefix
+            backend:
+              service:
+                name: nowchess-account-active
+                port:
+                  number: 8083
+          - path: /api/challenge
+            pathType: Prefix
+            backend:
+              service:
+                name: nowchess-account-active
+                port:
+                  number: 8083
+          - path: /api/store
+            pathType: Prefix
+            backend:
+              service:
+                name: nowchess-store-active
+                port:
+                  number: 8085
+          - path: /api
+            pathType: Prefix
+            backend:
+              service:
+                name: nowchess-core-active
+                port:
+                  number: 8080
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: nowchess-frontend-active
+                port:
+                  number: 80
@@ -0,0 +1,53 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: nowchess
+resources:
+  - ../base
+  - ingress.yaml
+patches:
+  - patch: |-
+      apiVersion: v1
+      kind: ConfigMap
+      metadata:
+        name: nowchess-env-config
+      data:
+        QUARKUS_PROFILE: deployed
+        CORS_ORIGINS: http://141.37.74.142
+        NOWCHESS_COORDINATOR_ENABLED: "false"
+        REDIS_PREFIX: nowchess
+        QUARKUS_LOG_LEVEL: "WARN"
+    target:
+      kind: ConfigMap
+      name: nowchess-env-config
+  - patch: |-
+      apiVersion: v1
+      kind: ConfigMap
+      metadata:
+        name: nowchess-frontend-env-config
+      data:
+        API_URL: "http://141.37.74.142"
+        WEBSOCKET_URL: "ws://141.37.74.142"
+    target:
+      kind: ConfigMap
+      name: nowchess-frontend-env-config
+images:
+  - name: ghcr.io/now-chess/now-chess-systems/account
+    newTag: 0.18.0
+  - name: ghcr.io/now-chess/now-chess-systems/bot-platform
+    newTag: 0.11.0
+  - name: ghcr.io/now-chess/now-chess-systems/coordinator
+    newTag: 0.32.0
+  - name: ghcr.io/now-chess/now-chess-systems/core
+    newTag: 0.45.0
+  - name: ghcr.io/now-chess/now-chess-systems/frontend
+    newTag: 0.2.4
+  - name: ghcr.io/now-chess/now-chess-systems/io
+    newTag: 0.22.0
+  - name: ghcr.io/now-chess/now-chess-systems/official-bots
+    newTag: 0.13.0
+  - name: ghcr.io/now-chess/now-chess-systems/rule
+    newTag: 0.18.0
+  - name: ghcr.io/now-chess/now-chess-systems/store
+    newTag: 0.22.0
+  - name: ghcr.io/now-chess/now-chess-systems/ws
+    newTag: 0.14.0