kty/helm/templates/server.yaml at main · grampelberg/kty · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
{{- with .Values.server -}}
{{- if .enabled -}}

{{- if .autoscale -}}
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: server
  labels:
    {{- include "labels" (dict "name" "kty" "component" "server" "global" $) | nindent 4 }}
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: server
  minReplicas: {{ .replicas | default 1 }}
  maxReplicas: {{ .maxReplicas | default 10 }}
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 90
{{- end }}

---
apiVersion: v1
kind: Secret
metadata:
  name: kty-server
  labels:
    {{- include "labels" (dict "name" "kty" "component" "server" "global" $) | nindent 4 }}
data:
  {{- $old_sec := lookup "v1" "Secret" $.Release.Namespace "kty-server" }}

  {{- if or (not $old_sec) (not $old_sec.data) }}
  id_ed25519: {{ genPrivateKey "ed25519" | b64enc }}
  {{ else }}
  id_ed25519: {{ index $old_sec.data "id_ed25519" }}
  {{ end }}
---
apiVersion: v1
kind: Service
metadata:
  name: server
spec:
  {{- if .loadbalancer }}
  type: LoadBalancer
  {{- else }}
  type: ClusterIP
  {{- end }}

  ports:
    - port: 2222
  selector:
    {{- include "labels" (dict "name" "kty" "component" "server" "global" $) | nindent 4 }}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: server
  labels:
    {{- include "labels" (dict "name" "kty" "component" "server" "global" $) | nindent 4 }}
spec:
  replicas: {{ .replicas | default 1 }}
  selector:
    matchLabels:
      {{- include "labels" (dict "name" "kty" "component" "server" "global" $) | nindent 6 }}
  template:
    metadata:
      labels:
        {{- include "labels" (dict "name" "kty" "component" "server" "global" $) | nindent 8 }}
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/path: /metrics
        prometheus.io/port: "8080"

    spec:
      serviceAccountName: kty-server

      containers:
        - name: server
          image: {{ include "image" (dict "image" .image "global" $) }}

          command: ['kty']
          args:
            - serve
            - -vv
            - --address=0.0.0.0
            - --key=/etc/kty/key/id_ed25519

          env:
            - name: POD_UID
              valueFrom:
                fieldRef:
                  fieldPath: metadata.uid
          {{- with .openid -}}
            - name: KTY_CLIENT_ID
              value: {{ .clientID }}
            - name: KTY_OID_CONFIG_URL
              value: {{ .configURL }}
          {{- end }}

          {{- if .resources}}
          resources:
            {{- toYaml .resources | nindent 12 }}
          {{- end }}

          livenessProbe:
            httpGet:
              path: /metrics
              port: 8080
          readinessProbe:
            httpGet:
              path: /metrics
              port: 8080

          volumeMounts:
            - mountPath: /etc/kty/key
              name: host-key
              readOnly: true

      volumes:
        - name: host-key
          secret:
            secretName: kty-server
{{- end }}
{{- end }}