feat: add namespace manifests and argocd app

2026-06-22 11:56:46 +00:00
parent d276ef403a
commit 8d3d3b4ccf
7 changed files with 353 additions and 0 deletions
@@ -0,0 +1,28 @@
+apiVersion: v1
+items:
+- apiVersion: networking.k8s.io/v1
+  kind: Ingress
+  metadata:
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    name: minio-ingress
+    namespace: minio
+  spec:
+    ingressClassName: nginx-private
+    rules:
+    - host: minio.uzbutterfly.com
+      http:
+        paths:
+        - backend:
+            service:
+              name: minio-console
+              port:
+                number: 9001
+          path: /
+          pathType: Prefix
+    tls:
+    - hosts:
+      - minio.uzbutterfly.com
+      secretName: minio-tls
+kind: List
+metadata: {}
@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: grafana-ingress
+  namespace: monitoring
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: nginx-private
+  rules:
+  - host: grafana.uzbutterfly.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: grafana
+            port:
+              number: 80
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - grafana.uzbutterfly.com
+    secretName: grafana-tls
@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: prometheus-ingress
+  namespace: monitoring
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: nginx-private
+  rules:
+  - host: prometheus.uzbutterfly.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: prometheus-kube-prometheus-prometheus
+            port:
+              number: 9090
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - prometheus.uzbutterfly.com
+    secretName: prometheus-tls
@@ -0,0 +1,28 @@
+apiVersion: v1
+items:
+- apiVersion: networking.k8s.io/v1
+  kind: Ingress
+  metadata:
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    name: vault-ingress
+    namespace: vault
+  spec:
+    ingressClassName: nginx-private
+    rules:
+    - host: vault.uzbutterfly.com
+      http:
+        paths:
+        - backend:
+            service:
+              name: vault-ui
+              port:
+                number: 8200
+          path: /
+          pathType: Prefix
+    tls:
+    - hosts:
+      - vault.uzbutterfly.com
+      secretName: vault-tls
+kind: List
+metadata: {}
@@ -0,0 +1,28 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    kubernetes.io/ingress.class: nginx
+    nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
+    nginx.ingress.kubernetes.io/auth-signin: https://auth.uzbutterfly.com?rm=$request_method
+    nginx.ingress.kubernetes.io/auth-url: http://authelia.authelia.svc.cluster.local/api/authz/auth-request
+  name: wg-easy-ingress
+  namespace: vpn
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: vpn.uzbutterfly.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: wg-easy
+            port:
+              number: 51821
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - vpn.uzbutterfly.com
+    secretName: vpn-tls