K3S-HOME/web-apps
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FEAT(repo): add jaejadle and joossam applications

Browse Source 
- jaejadle: Next.js app at jaejadle.kro.kr (prod)
- jaejadle-dev: dev environment at dev.jaejadle.kro.kr
- joossam: FastAPI app at joossameng.kro.kr (prod)
- joossam-dev: dev environment at dev.joossameng.kro.kr
- All apps use Authelia SSO
- jaejadle uses ExternalSecrets for DB and AWS credentials
This commit is contained in:
Mayne0213
2026-01-05 15:45:08 +09:00
parent db6347ff52
commit 23bb95c32f
23 changed files with 628 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
jaejadle-dev/argocd.yaml Normal file
View File

@@ -0,0 +1,35 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: jaejadle-dev
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
sources:
- repoURL: https://github.com/K3S-HOME/web-apps.git
targetRevision: main
path: jaejadle-dev
destination:
server: https://kubernetes.default.svc
namespace: jaejadle-dev
syncPolicy:
automated:
prune: true
selfHeal: true
allowEmpty: false
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=true
retry:
limit: 5
backoff:
duration: 5s
factor: 2
maxDuration: 3m
managedNamespaceMetadata:
labels:
goldilocks.fairwinds.com/enabled: 'true'
revisionHistoryLimit: 10

53
jaejadle-dev/deployment.yaml Normal file
View File

@@ -0,0 +1,53 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: jaejadle-dev
labels:
app: jaejadle-dev
spec:
replicas: 1
selector:
matchLabels:
app: jaejadle-dev
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 0
maxSurge: 1
revisionHistoryLimit: 3
template:
metadata:
labels:
app: jaejadle-dev
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: jaejadle-dev
image: ghcr.io/mayne0213/jaejadle:develop
imagePullPolicy: Always
ports:
- containerPort: 3000
protocol: TCP
envFrom:
- secretRef:
name: jaejadle-dev-secrets
resources:
requests:
memory: 80Mi
cpu: 20m
limits:
memory: 300Mi
livenessProbe:
httpGet:
path: /api/health
port: 3000
initialDelaySeconds: 30
periodSeconds: 10
readinessProbe:
httpGet:
path: /api/health
port: 3000
initialDelaySeconds: 5
periodSeconds: 5
restartPolicy: Always

46
jaejadle-dev/external-secret.yaml Normal file
View File

@@ -0,0 +1,46 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: jaejadle-dev-secrets
spec:
refreshInterval: 1h
secretStoreRef:
name: vault-backend
kind: ClusterSecretStore
target:
name: jaejadle-dev-secrets
creationPolicy: Owner
deletionPolicy: Retain
data:
- secretKey: DATABASE_URL
remoteRef:
key: jaejadle-dev
property: DATABASE_URL
- secretKey: JWT_SECRET
remoteRef:
key: jaejadle-dev
property: JWT_SECRET
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
key: jaejadle-dev
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
key: jaejadle-dev
property: AWS_SECRET_ACCESS_KEY
- secretKey: AWS_S3_BUCKET_NAME
remoteRef:
key: jaejadle-dev
property: AWS_S3_BUCKET_NAME
- secretKey: AWS_S3_ENDPOINT
remoteRef:
key: jaejadle-dev
property: AWS_S3_ENDPOINT
- secretKey: AWS_REGION
remoteRef:
key: jaejadle-dev
property: AWS_REGION
- secretKey: CODE
remoteRef:
key: jaejadle-dev
property: CODE

24
jaejadle-dev/ingress.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: jaejadle-dev-ingress
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- dev.jaejadle.kro.kr
secretName: jaejadle-dev-tls
rules:
- host: dev.jaejadle.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: jaejadle-dev
port:
number: 80

8
jaejadle-dev/kustomization.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: jaejadle-dev
resources:
- deployment.yaml
- service.yaml
- ingress.yaml
- external-secret.yaml

15
jaejadle-dev/service.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: v1
kind: Service
metadata:
name: jaejadle-dev
labels:
app: jaejadle-dev
spec:
type: ClusterIP
ports:
- name: http
port: 80
targetPort: 3000
protocol: TCP
selector:
app: jaejadle-dev

35
jaejadle/argocd.yaml Normal file
View File

@@ -0,0 +1,35 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: jaejadle
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
sources:
- repoURL: https://github.com/K3S-HOME/web-apps.git
targetRevision: main
path: jaejadle
destination:
server: https://kubernetes.default.svc
namespace: jaejadle
syncPolicy:
automated:
prune: true
selfHeal: true
allowEmpty: false
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=true
retry:
limit: 5
backoff:
duration: 5s
factor: 2
maxDuration: 3m
managedNamespaceMetadata:
labels:
goldilocks.fairwinds.com/enabled: 'true'
revisionHistoryLimit: 10

53
jaejadle/deployment.yaml Normal file
View File

@@ -0,0 +1,53 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: jaejadle
labels:
app: jaejadle
spec:
replicas: 1
selector:
matchLabels:
app: jaejadle
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 0
maxSurge: 1
revisionHistoryLimit: 3
template:
metadata:
labels:
app: jaejadle
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: jaejadle
image: ghcr.io/mayne0213/jaejadle:latest
imagePullPolicy: Always
ports:
- containerPort: 3000
protocol: TCP
envFrom:
- secretRef:
name: jaejadle-secrets
resources:
requests:
memory: 80Mi
cpu: 20m
limits:
memory: 300Mi
livenessProbe:
httpGet:
path: /api/health
port: 3000
initialDelaySeconds: 30
periodSeconds: 10
readinessProbe:
httpGet:
path: /api/health
port: 3000
initialDelaySeconds: 5
periodSeconds: 5
restartPolicy: Always

46
jaejadle/external-secret.yaml Normal file
View File

@@ -0,0 +1,46 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: jaejadle-secrets
spec:
refreshInterval: 1h
secretStoreRef:
name: vault-backend
kind: ClusterSecretStore
target:
name: jaejadle-secrets
creationPolicy: Owner
deletionPolicy: Retain
data:
- secretKey: DATABASE_URL
remoteRef:
key: jaejadle
property: DATABASE_URL
- secretKey: JWT_SECRET
remoteRef:
key: jaejadle
property: JWT_SECRET
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
key: jaejadle
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
key: jaejadle
property: AWS_SECRET_ACCESS_KEY
- secretKey: AWS_S3_BUCKET_NAME
remoteRef:
key: jaejadle
property: AWS_S3_BUCKET_NAME
- secretKey: AWS_S3_ENDPOINT
remoteRef:
key: jaejadle
property: AWS_S3_ENDPOINT
- secretKey: AWS_REGION
remoteRef:
key: jaejadle
property: AWS_REGION
- secretKey: CODE
remoteRef:
key: jaejadle
property: CODE

24
jaejadle/ingress.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: jaejadle-ingress
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- jaejadle.kro.kr
secretName: jaejadle-tls
rules:
- host: jaejadle.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: jaejadle
port:
number: 80

8
jaejadle/kustomization.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: jaejadle
resources:
- deployment.yaml
- service.yaml
- ingress.yaml
- external-secret.yaml

15
jaejadle/service.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: v1
kind: Service
metadata:
name: jaejadle
labels:
app: jaejadle
spec:
type: ClusterIP
ports:
- name: http
port: 80
targetPort: 3000
protocol: TCP
selector:
app: jaejadle

35
joossam-dev/argocd.yaml Normal file
View File

@@ -0,0 +1,35 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: joossam-dev
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
sources:
- repoURL: https://github.com/K3S-HOME/web-apps.git
targetRevision: main
path: joossam-dev
destination:
server: https://kubernetes.default.svc
namespace: joossam-dev
syncPolicy:
automated:
prune: true
selfHeal: true
allowEmpty: false
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=true
retry:
limit: 5
backoff:
duration: 5s
factor: 2
maxDuration: 3m
managedNamespaceMetadata:
labels:
goldilocks.fairwinds.com/enabled: 'true'
revisionHistoryLimit: 10

50
joossam-dev/deployment.yaml Normal file
View File

@@ -0,0 +1,50 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: joossam-dev
labels:
app: joossam-dev
spec:
replicas: 1
selector:
matchLabels:
app: joossam-dev
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 0
maxSurge: 1
revisionHistoryLimit: 3
template:
metadata:
labels:
app: joossam-dev
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: joossam-dev
image: ghcr.io/mayne0213/joossam:develop
imagePullPolicy: Always
ports:
- containerPort: 8000
protocol: TCP
resources:
requests:
memory: 256Mi
cpu: 20m
limits:
memory: 512Mi
livenessProbe:
httpGet:
path: /
port: 8000
initialDelaySeconds: 10
periodSeconds: 10
readinessProbe:
httpGet:
path: /
port: 8000
initialDelaySeconds: 5
periodSeconds: 5
restartPolicy: Always

24
joossam-dev/ingress.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: joossam-dev-ingress
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- dev.joossameng.kro.kr
secretName: joossam-dev-tls
rules:
- host: dev.joossameng.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: joossam-dev
port:
number: 80

7
joossam-dev/kustomization.yaml Normal file
View File

@@ -0,0 +1,7 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: joossam-dev
resources:
- deployment.yaml
- service.yaml
- ingress.yaml

15
joossam-dev/service.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: v1
kind: Service
metadata:
name: joossam-dev
labels:
app: joossam-dev
spec:
type: ClusterIP
ports:
- name: http
port: 80
targetPort: 8000
protocol: TCP
selector:
app: joossam-dev

35
joossam/argocd.yaml Normal file
View File

@@ -0,0 +1,35 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: joossam
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
sources:
- repoURL: https://github.com/K3S-HOME/web-apps.git
targetRevision: main
path: joossam
destination:
server: https://kubernetes.default.svc
namespace: joossam
syncPolicy:
automated:
prune: true
selfHeal: true
allowEmpty: false
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=true
retry:
limit: 5
backoff:
duration: 5s
factor: 2
maxDuration: 3m
managedNamespaceMetadata:
labels:
goldilocks.fairwinds.com/enabled: 'true'
revisionHistoryLimit: 10

50
joossam/deployment.yaml Normal file
View File

@@ -0,0 +1,50 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: joossam
labels:
app: joossam
spec:
replicas: 1
selector:
matchLabels:
app: joossam
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 0
maxSurge: 1
revisionHistoryLimit: 3
template:
metadata:
labels:
app: joossam
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: joossam
image: ghcr.io/mayne0213/joossam:latest
imagePullPolicy: Always
ports:
- containerPort: 8000
protocol: TCP
resources:
requests:
memory: 256Mi
cpu: 20m
limits:
memory: 512Mi
livenessProbe:
httpGet:
path: /
port: 8000
initialDelaySeconds: 10
periodSeconds: 10
readinessProbe:
httpGet:
path: /
port: 8000
initialDelaySeconds: 5
periodSeconds: 5
restartPolicy: Always

24
joossam/ingress.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: joossam-ingress
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- joossameng.kro.kr
secretName: joossam-tls
rules:
- host: joossameng.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: joossam
port:
number: 80

7
joossam/kustomization.yaml Normal file
View File

@@ -0,0 +1,7 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: joossam
resources:
- deployment.yaml
- service.yaml
- ingress.yaml

15
joossam/service.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: v1
kind: Service
metadata:
name: joossam
labels:
app: joossam
spec:
type: ClusterIP
ports:
- name: http
port: 80
targetPort: 8000
protocol: TCP
selector:
app: joossam

4
kustomization.yaml
View File

@@ -6,3 +6,7 @@ resources:
- portfolio/argocd.yaml - portfolio/argocd.yaml
- todo/argocd.yaml - todo/argocd.yaml
- jotion/argocd.yaml - jotion/argocd.yaml
- jaejadle/argocd.yaml
- jaejadle-dev/argocd.yaml
- joossam/argocd.yaml
- joossam-dev/argocd.yaml