ДЗ20 / Kubernetes. Networks,Storages / Kubernetes-3

kubernetes/reddit/mongo-claim.yml

@@ -0,0 +1,14 @@
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mongo-pvc
+spec:
+  storageClassName: ""
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 4Gi
+  volumeName: mongo-pv

kubernetes/reddit/mongo-deployment.yml

@@ -6,8 +6,8 @@ metadata:
   labels:
     app: reddit
     component: mongo
-    comment-db: "true"
     post-db: "true"
+    comment-db: "true"
 spec:
   replicas: 1
   selector:
@@ -20,8 +20,8 @@ spec:
       labels:
         app: reddit
         component: mongo
-        comment-db: "true"
         post-db: "true"
+        comment-db: "true"
     spec:
       containers:
       - image: mongo:3.2
@@ -31,4 +31,5 @@ spec:
           mountPath: /data/db
       volumes:
       - name: mongo-persistent-storage
-        emptyDir: {}
+        persistentVolumeClaim:
+          claimName:  mongo-pvc

kubernetes/reddit/mongo-network-policy.yml

@@ -0,0 +1,24 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: deny-db-traffic
+  labels:
+    app: reddit
+spec:
+  podSelector:
+    matchLabels:
+      app: reddit
+      component: mongo
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          app: reddit
+          component: comment
+    - podSelector:
+        matchLabels:
+          app: reddit
+          component: post

kubernetes/reddit/mongo-volume.yml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mongo-pv
+spec:
+  capacity:
+    storage: 4Gi
+  accessModes:
+    - ReadWriteOnce
+  csi:
+    driver: disk-csi-driver.mks.ycloud.io
+    fsType: ext4
+    volumeHandle: fhmg2btle3jreno28vgj

kubernetes/reddit/tls.yml

@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+  tls.crt: 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
+  tls.key: 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
+kind: Secret
+metadata:
+  name: ui-ingress
+type: kubernetes.io/tls

kubernetes/reddit/ui-ingress.yml

@@ -0,0 +1,21 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ui
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    kubernetes.io/ingress.allow-http: "false"
+spec:
+  tls:
+  - secretName: ui-ingress
+  rules:
+  - http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: ui
+            port:
+              number: 9292

kubernetes/reddit/ui-service.yml

@@ -9,7 +9,6 @@ metadata:
 spec:
   type: NodePort
   ports:
-#  - NodePort: 32092
   - port: 9292
     protocol: TCP
     targetPort: 9292