variable "tls_secret_name" { type = string sensitive = true } resource "kubernetes_namespace" "jsoncrack" { metadata { name = "jsoncrack" labels = { "istio-injection" : "disabled" tier = local.tiers.aux } } lifecycle { # KYVERNO_LIFECYCLE_V1: goldilocks-vpa-auto-mode ClusterPolicy stamps this label on every namespace ignore_changes = [metadata[0].labels["goldilocks.fairwinds.com/vpa-update-mode"]] } } module "tls_secret" { source = "../../modules/kubernetes/setup_tls_secret" namespace = kubernetes_namespace.jsoncrack.metadata[0].name tls_secret_name = var.tls_secret_name } resource "kubernetes_deployment" "jsoncrack" { metadata { name = "jsoncrack" namespace = kubernetes_namespace.jsoncrack.metadata[0].name labels = { app = "jsoncrack" tier = local.tiers.aux } } spec { replicas = 1 selector { match_labels = { app = "jsoncrack" } } template { metadata { labels = { app = "jsoncrack" } } spec { container { image = "viktorbarzin/jsoncrack:latest" name = "jsoncrack" port { container_port = 8080 } } } } } } resource "kubernetes_service" "jsoncrack" { metadata { name = "json" namespace = kubernetes_namespace.jsoncrack.metadata[0].name labels = { "app" = "jsoncrack" } } spec { selector = { app = "jsoncrack" } port { name = "http" target_port = 8080 port = 80 protocol = "TCP" } } } module "ingress" { source = "../../modules/kubernetes/ingress_factory" dns_type = "proxied" namespace = kubernetes_namespace.jsoncrack.metadata[0].name name = "json" tls_secret_name = var.tls_secret_name extra_annotations = { "gethomepage.dev/enabled" = "true" "gethomepage.dev/name" = "JSON Crack" "gethomepage.dev/description" = "JSON visualizer" "gethomepage.dev/icon" = "json.png" "gethomepage.dev/group" = "Development & CI" "gethomepage.dev/pod-selector" = "" } }