Nik Afiq
fd13b8aedb
Some checks failed
validate / lint (push) Has been cancelled
The public domain is unreachable while moving, and the cluster had no Traefik route to Gitea at all (public or internal), leaving every Argo CD Application stuck in Unknown sync. Add a gitea.home.arpa Certificate/IngressRoute, repoint Argo CD's repoURL, Gitea's own DOMAIN/ROOT_URL/SSH_DOMAIN, the container registry references, the Gitea Actions runner, and the watch-party clone URL at the internal hostname. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
91 lines
2.2 KiB
YAML
91 lines
2.2 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: ha-gateway
|
|
namespace: home-services
|
|
labels:
|
|
app: ha-gateway
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: ha-gateway
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: ha-gateway
|
|
spec:
|
|
imagePullSecrets:
|
|
- name: gitea-registry-secret
|
|
containers:
|
|
- name: ha-gateway
|
|
image: gitea.home.arpa/nik/ha-gateway:latest
|
|
ports:
|
|
- containerPort: 50051
|
|
name: grpc
|
|
env:
|
|
- name: GRPC_PORT
|
|
value: "50051"
|
|
- name: HA_BASE_URL
|
|
value: "http://ha.home.arpa:8123"
|
|
- name: HA_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ha-gateway-secret
|
|
key: HA_TOKEN
|
|
- name: SWITCHBOT_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ha-gateway-secret
|
|
key: SWITCHBOT_TOKEN
|
|
- name: SWITCHBOT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ha-gateway-secret
|
|
key: SWITCHBOT_SECRET
|
|
- name: OTEL_ENDPOINT
|
|
value: "otel-collector-opentelemetry-collector.monitoring.svc.cluster.local:4317"
|
|
- name: TLS_DIR
|
|
value: /tls
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: 50051
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: 50051
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 30
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
volumeMounts:
|
|
- name: tls
|
|
mountPath: /tls
|
|
readOnly: true
|
|
volumes:
|
|
- name: tls
|
|
secret:
|
|
secretName: ha-gateway-tls
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: ha-gateway
|
|
namespace: home-services
|
|
labels:
|
|
app: ha-gateway
|
|
spec:
|
|
selector:
|
|
app: ha-gateway
|
|
ports:
|
|
- name: grpc
|
|
port: 50051
|
|
targetPort: 50051
|
|
type: ClusterIP
|