106 lines
2.4 KiB
HCL
106 lines
2.4 KiB
HCL
variable "tls_secret_name" {}
|
|
variable "homepage_username" {}
|
|
variable "homepage_password" {}
|
|
|
|
module "tls_secret" {
|
|
source = "../setup_tls_secret"
|
|
namespace = "crowdsec"
|
|
tls_secret_name = var.tls_secret_name
|
|
}
|
|
|
|
resource "kubernetes_namespace" "crowdsec" {
|
|
metadata {
|
|
name = "crowdsec"
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_persistent_volume" "db" {
|
|
metadata {
|
|
name = "crowdsec-db"
|
|
}
|
|
spec {
|
|
capacity = {
|
|
"storage" = "2Gi"
|
|
}
|
|
access_modes = ["ReadWriteOnce"]
|
|
persistent_volume_source {
|
|
nfs {
|
|
path = "/mnt/main/crowdsec/db"
|
|
server = "10.0.10.15"
|
|
}
|
|
}
|
|
claim_ref {
|
|
name = "crowdsec-db-pvc"
|
|
namespace = "crowdsec"
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_persistent_volume" "config" {
|
|
metadata {
|
|
name = "crowdsec-config"
|
|
}
|
|
spec {
|
|
capacity = {
|
|
"storage" = "2Gi"
|
|
}
|
|
access_modes = ["ReadWriteOnce"]
|
|
persistent_volume_source {
|
|
nfs {
|
|
path = "/mnt/main/crowdsec/config"
|
|
server = "10.0.10.15"
|
|
}
|
|
}
|
|
claim_ref {
|
|
name = "crowdsec-config-pvc"
|
|
namespace = "crowdsec"
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "helm_release" "crowdsec" {
|
|
namespace = "crowdsec"
|
|
create_namespace = true
|
|
name = "crowdsec"
|
|
atomic = true
|
|
|
|
repository = "https://crowdsecurity.github.io/helm-charts"
|
|
chart = "crowdsec"
|
|
|
|
values = [templatefile("${path.module}/values.yaml", { homepage_username = var.homepage_username, homepage_password = var.homepage_password })]
|
|
}
|
|
|
|
# resource "kubernetes_ingress_v1" "metabase" {
|
|
# metadata {
|
|
# name = "metabase"
|
|
# namespace = "crowdsec"
|
|
# annotations = {
|
|
# "kubernetes.io/ingress.class" = "nginx"
|
|
# "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth"
|
|
# "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri"
|
|
# }
|
|
# }
|
|
|
|
# spec {
|
|
# tls {
|
|
# hosts = ["metabase.viktorbarzin.me"]
|
|
# secret_name = var.tls_secret_name
|
|
# }
|
|
# rule {
|
|
# host = "metabase.viktorbarzin.me"
|
|
# http {
|
|
# path {
|
|
# path = "/"
|
|
# backend {
|
|
# service {
|
|
# name = "crowdsec-service"
|
|
# port {
|
|
# number = 3000
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|