infra/modules/kubernetes/discount-bandit/main.tf

132 lines
2.5 KiB
HCL

variable "tls_secret_name" {}
resource "kubernetes_namespace" "discount-bandit" {
metadata {
name = "discount-bandit"
# labels = {
# "istio-injection" : "enabled"
# }
}
}
module "tls_secret" {
source = "../setup_tls_secret"
namespace = "discount-bandit"
tls_secret_name = var.tls_secret_name
}
resource "kubernetes_deployment" "discount-bandit" {
metadata {
name = "discount-bandit"
namespace = "discount-bandit"
labels = {
app = "discount-bandit"
}
annotations = {
"reloader.stakater.com/search" = "true"
}
}
spec {
replicas = 1
strategy {
type = "Recreate"
}
selector {
match_labels = {
app = "discount-bandit"
}
}
template {
metadata {
labels = {
app = "discount-bandit"
}
}
spec {
container {
image = "cybrarist/discount-bandit:latest-amd64"
name = "discount-bandit"
env {
name = "DB_HOST"
value = "mysql.dbaas"
}
env {
name = "DB_DATABASE"
value = "discountbandit"
}
env {
name = "DB_USERNAME"
value = "discountbandit"
}
env {
name = "DB_PASSWORD"
value = ""
}
env {
name = "APP_URL"
value = "http://discount.viktorbarzin.me:80"
}
port {
container_port = 80
}
}
}
}
}
}
resource "kubernetes_service" "discount-bandit" {
metadata {
name = "discount-bandit"
namespace = "discount-bandit"
labels = {
"app" = "discount-bandit"
}
}
spec {
selector = {
app = "discount-bandit"
}
port {
name = "http"
target_port = 80
port = 80
protocol = "TCP"
}
}
}
resource "kubernetes_ingress_v1" "discount-bandit" {
metadata {
name = "discount-bandit"
namespace = "discount-bandit"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
}
}
spec {
tls {
hosts = ["discount.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "discount.viktorbarzin.me"
http {
path {
path = "/"
backend {
service {
name = "discount-bandit"
port {
number = 80
}
}
}
}
}
}
}
}