add external services

external-services/git.yaml

@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: git
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: git
+  namespace: external-services
+  annotations:
+    haproxy-ingress.github.io/ssl-redirect: "true"
+    #haproxy-ingress.github.io/backend-protocol: "h1-ssl"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: git.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: git
+            port:
+              number: 57924
+  tls:
+  - hosts:
+    - git.strudelline.net
+    secretName: wildcard-tls

external-services/minio-admin.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: minio-admin
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: minio-admin
+  namespace: external-services
+  annotations:
+    haproxy-ingress.github.io/ssl-redirect: "true"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: minio-admin.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: minio-admin
+            port:
+              number: 58714
+  tls:
+  - hosts:
+    - minio-admin.strudelline.net
+    secretName: wildcard-tls

external-services/minio.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: minio
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: minio
+  namespace: external-services
+  annotations:
+    haproxy-ingress.github.io/ssl-redirect: "true"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: minio.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: minio
+            port:
+              number: 58713
+  tls:
+  - hosts:
+    - minio.strudelline.net
+    secretName: wildcard-tls

external-services/noctowl.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: noctowl
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: noctowl
+  namespace: external-services
+  annotations:
+    haproxy-ingress.github.io/ssl-redirect: "true"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: noctowl.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: noctowl
+            port:
+              number: 5000
+  tls:
+  - hosts:
+    - noctowl.strudelline.net
+    secretName: wildcard-tls

external-services/ns.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    wildcard-tls.kn8v.com/copy: "true"
+  name: external-services

external-services/vault.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vault
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: vault
+  namespace: external-services
+  annotations:
+    #haproxy-ingress.github.io/ssl-redirect: "true"
+    #haproxy-ingress.github.io/backend-protocol: "h1-ssl"
+    ingress.kubernetes.io/config-backend: |
+      http-request set-header X-Real-IP %[src]
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: vault.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: vault
+            port:
+              number: 5005
+  tls:
+  - hosts:
+    - vault.strudelline.net
+    secretName: wildcard-tls

external-services/webdav.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: webdav
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: webdav
+  namespace: external-services
+  annotations:
+    #haproxy-ingress.github.io/ssl-redirect: "true"
+    #haproxy-ingress.github.io/backend-protocol: "h1-ssl"
+    ingress.kubernetes.io/config-backend: |
+      http-request set-header X-Real-IP %[src]
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: webdav.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: webdav
+            port:
+              number: 5005
+  tls:
+  - hosts:
+    - webdav.strudelline.net
+    secretName: wildcard-tls