Add new bases for cert-manager (Let's Encrypt + wildcard cert), Longhorn distributed storage, and monitoring (kube-prometheus-stack + Loki + Tempo + Grafana OIDC). Add cloud-init for Scaleway Elastic Metal provisioning. Production overlay: add patches for postgres sizing, SeaweedFS volume, OpenSearch storage, LiveKit service, Pingora host ports, resource limits, and CNPG daily barman backups. Update cert-manager.yaml with full dnsNames for all *.sunbeam.pt subdomains.
26 lines
634 B
YAML
26 lines
634 B
YAML
# Bind Pingora container ports to the host network so external traffic
|
|
# on ports 80 and 443 reaches the proxy pod directly.
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: pingora
|
|
namespace: ingress
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
- name: pingora
|
|
ports:
|
|
- name: http
|
|
containerPort: 80
|
|
hostPort: 80
|
|
protocol: TCP
|
|
- name: https
|
|
containerPort: 443
|
|
hostPort: 443
|
|
protocol: TCP
|
|
- name: ssh
|
|
containerPort: 22
|
|
hostPort: 22
|
|
protocol: TCP
|