infra/modules/kubernetes/f1-stream/main.tf
viktorbarzin 4caa987213
initial
2021-02-08 20:02:17 +00:00

113 lines
2 KiB
HCL

variable tls_secret_name {}
variable "tls_crt" {}
variable "tls_key" {}
resource "kubernetes_namespace" "f1-stream" {
metadata {
name = "f1-stream"
}
}
resource "kubernetes_deployment" "f1-stream" {
metadata {
name = "f1-stream"
namespace = "f1-stream"
labels = {
app = "f1-stream"
}
}
spec {
replicas = 3
selector {
match_labels = {
app = "f1-stream"
}
}
template {
metadata {
labels = {
app = "f1-stream"
}
}
spec {
container {
image = "viktorbarzin/f1-stream:latest"
name = "f1-stream"
resources {
limits = {
cpu = "0.5"
memory = "512Mi"
}
requests = {
cpu = "250m"
memory = "512Mi"
}
}
port {
container_port = 80
}
}
}
}
}
}
resource "kubernetes_service" "f1-stream" {
metadata {
name = "f1-stream"
namespace = "f1-stream"
labels = {
"app" = "f1-stream"
}
}
spec {
selector = {
app = "f1-stream"
}
port {
port = "80"
}
}
}
module "tls_secret" {
source = "../setup_tls_secret"
namespace = "f1-stream"
tls_secret_name = var.tls_secret_name
tls_crt = var.tls_crt
tls_key = var.tls_key
}
resource "kubernetes_ingress" "f1-stream" {
metadata {
name = "f1-ingress"
namespace = "f1-stream"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
"nginx.ingress.kubernetes.io/force-ssl-redirect" : "false"
"nginx.ingress.kubernetes.io/ssl-redirect" : "false"
}
}
spec {
tls {
hosts = ["f1.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "f1.viktorbarzin.me"
http {
path {
path = "/"
backend {
service_name = "f1-stream"
service_port = "80"
}
}
}
}
}
}