Refactored wandbox template

This commit is contained in:
Khwezi
2026-04-16 08:51:13 +02:00
parent 0af7d263a0
commit 0e0fc04fa5

View File

@@ -10,37 +10,14 @@ metadata:
name: wandbox-sa name: wandbox-sa
namespace: wandbox namespace: wandbox
--- ---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: wandbox-role
namespace: wandbox
rules:
- apiGroups: [""]
resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "configmaps", "secrets"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: wandbox-rolebinding
namespace: wandbox
subjects:
- kind: ServiceAccount
name: wandbox-sa
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: wandbox-role
---
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
metadata: metadata:
name: wandbox-config name: wandbox-config
namespace: wandbox namespace: wandbox
data: data:
wandbox.domain: "wandbox.apps.mngoma.lab" wandbox.domain: "wandbox.khongisa.co.za"
wandbox.rooturl: "https://wandbox.apps.mngoma.lab" wandbox.rooturl: "https://wandbox.khongisa.co.za"
wandbox.port: "5000" wandbox.port: "5000"
--- ---
apiVersion: v1 apiVersion: v1
@@ -53,30 +30,6 @@ data:
api.key: cG1HeW9xUlBCYW1qdndRV2FRbzZWME9CdmJLS3BFS1RhWlF0bDRndUhMSGpYQlZwc0Y3dnJPZXhXMTNIRWFDRg== api.key: cG1HeW9xUlBCYW1qdndRV2FRbzZWME9CdmJLS3BFS1RhWlF0bDRndUhMSGpYQlZwc0Y3dnJPZXhXMTNIRWFDRg==
--- ---
apiVersion: v1 apiVersion: v1
kind: PersistentVolume
metadata:
name: wandbox-pv
labels:
type: local
spec:
capacity:
storage: 5Gi
accessModes:
- ReadWriteOnce
storageClassName: local-pvs
local:
path: /home/ansible/k3s/makhiwane/wandbox
nodeAffinity:
required:
nodeSelectorTerms:
- matchExpressions:
- key: kubernetes.io/hostname
operator: In
values:
- lead
persistentVolumeReclaimPolicy: Retain
---
apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: wandbox-pvc name: wandbox-pvc
@@ -84,7 +37,7 @@ metadata:
spec: spec:
accessModes: accessModes:
- ReadWriteOnce - ReadWriteOnce
storageClassName: local-pvs storageClassName: nfs-storage
resources: resources:
requests: requests:
storage: 5Gi storage: 5Gi
@@ -161,21 +114,6 @@ spec:
protocol: TCP protocol: TCP
port: 80 port: 80
targetPort: 5000 targetPort: 5000
type: ClusterIP nodePort: 31003
--- type: NodePort
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: wandbox-web
namespace: wandbox
spec:
entryPoints:
- websecure
routes:
- match: Host(`wandbox.apps.mngoma.lab`)
kind: Rule
services:
- name: wandbox-service
port: 80
scheme: http
tls: {}