openpgp-ca: Initial Commit

openpgp-ca/add-domain-deployment.patch.yaml

@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: openpgp-ca
+spec:
+ template:
+ spec:
+ initContainers:
+ - name: init
+ env:
+ - name: DOMAIN
+ value: "hashbang.sh"

openpgp-ca/ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+ name: openpgp-ca
+ labels:
+ app.kubernetes.io/name: openpgp-ca
+ annotations:
+ kubernetes.io/ingress.class: nginx
+ cert-manager.io/cluster-issuer: letsencrypt
+ nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
+ nginx.ingress.kubernetes.io/auth-tls-secret: "mtls/mtls-certs"
+ nginx.ingress.kubernetes.io/auth-tls-verify-depth: "1"
+ nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "false"
+spec:
+ tls:
+ - hosts:
+ - openpgp-ca.hashbang.sh
+ secretName: opepgp-ca-tls
+ rules:
+ - host: openpgp-ca.hashbang.sh
+ http:
+ paths:
+ - path: "/"
+ backend:
+ serviceName: openpgp-ca
+ servicePort: http

openpgp-ca/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: openpgp-ca
+resources:
+ - https://gitlab.com/openpgp-ca/openpgp-ca/kustomize/restd/?ref=e0d66ddf4a36d391546c70e73b592c530721260a # 0.10.1
+ - ingress.yaml
+images:
+ - name: registry.gitlab.com/openpgp-ca/openpgp-ca
+ digest: sha256:66782e94aea9fb41ba2b6636aa37617d7d4e9031e363b6a0a1f552b2ee0b804c # 0.10.1
+ - name: registry.gitlab.com/openpgp-ca/openpgp-ca/openpgp-ca-restd
+ digest: sha256:458d8f0f51cf59b3536fc716cdabbf065e2f5b212c64d7e9c43af9bce67143f8 # 0.10.1
+patches:
+ - path: add-domain-deployment.patch.yaml