pi-ux-ce/Terraform_kube
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

made some work on the ingress

Browse Source
This commit is contained in:
pi-ux-ce@ARES
2026-10-13 11:27:41 +01:00
parent a0d77cc2d6
commit be06a539ea
4 changed files with 52 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/ingress.tf
+8 -5
View File
@@ -14,12 +14,15 @@ helm install traefik traefik/traefik \
resource "helm_release" "nginx_ingress" {
name = "traefik"
repository = "https://traefik.github.io/charts"
chart = "traefik"
version = "v41.7.1"
namespace = "traefik"
name = "traefik"
repository = "https://traefik.github.io/charts"
chart = "traefik"
version = "v41.7.1"
namespace = "traefik"
create_namespace = true
wait = false
set = [
{
name = "ports.web.nodePort"
core/module.tf
+1
View File
@@ -56,6 +56,7 @@ variable "kubernetes" {
service_type = optional(string, "ClusterIP")
service_name = optional(string)
domain_name = optional(string)
exposed = optional(bool, true)
liveness_tcp_socket = optional(number)
liveness_http_get = optional(string)
liveness_http_get_path = optional(string)
core/services.tf
+28
View File
@@ -1,3 +1,31 @@
resource "kubernetes_ingress_v1" "automatic_ingress" {
for_each = { for key, value in var.kubernetes : key => value if value.service_port != null && value.enabled == true && value.docker != true && value.exposed == true }
metadata {
name = "${each.key}-ingress"
namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
}
spec {
ingress_class_name = "traefik"
rule {
host = join(".", [coalesce(each.value.domain_name, each.key), "geeraert.eu"])
http {
path {
path = "/"
backend {
service {
name = "${each.key}-svc"
port {
number = each.value.service_port[0] #selecting the first of the list
}
}
}
}
}
}
}
}
resource "kubernetes_service_v1" "automatic_service" {
for_each = { for key, value in var.kubernetes : key => value if value.service_port != null && value.enabled == true && value.docker != true }
metadata {
core/variables.auto.tfvars
+14 -1
View File
@@ -1,6 +1,6 @@
kubernetes = {
reverse-proxy = {
#enabled = false
enabled = false
#docker = true
image = "nginx:latest"
service_port = [80, 443]
@@ -79,6 +79,7 @@ kubernetes = {
#enabled = false
#docker = true
image = "gitea/act_runner:latest"
exposed = false
connected_namespace = "gitea"
environment = {
GITEA_INSTANCE_URL = { value = "https://gitea.geeraert.eu/" }
@@ -140,6 +141,7 @@ kubernetes = {
image = "ghcr.io/bitwarden/admin:2026.1.0"
extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/config.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/uid.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml"]
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env", "global.override.env"]
environment = {}
@@ -168,6 +170,7 @@ kubernetes = {
name = "bitwarden-api"
image = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_api:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env", "global.override.env"]
environment = {}
@@ -195,6 +198,7 @@ kubernetes = {
name = "bitwarden-attachments"
image = "ghcr.io/bitwarden/attachments:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env"]
environment = {}
@@ -213,6 +217,7 @@ kubernetes = {
name = "bitwarden-events"
image = "ghcr.io/bitwarden/events:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env", "global.override.env"]
environment = {}
@@ -235,6 +240,7 @@ kubernetes = {
name = "bitwarden-icons"
image = "ghcr.io/bitwarden/icons:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env"]
environment = {}
@@ -256,6 +262,7 @@ kubernetes = {
name = "bitwarden-identity"
image = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_identity:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env", "global.override.env"]
environment = {}
@@ -283,6 +290,7 @@ kubernetes = {
name = "bitwarden-mssql"
image = "ghcr.io/bitwarden/mssql:2026.1.0"
service_port = [1433, 5000]
exposed = false
config_map_ref = ["mssql.env", "uid.env", "mssql.override.env"]
environment = {}
database = {
@@ -311,6 +319,8 @@ kubernetes = {
name = "bitwarden-nginx"
image = "ghcr.io/bitwarden/nginx:2026.1.0"
service_port = [5000, 8080, 8443]
exposed = true #no need to set as true but I did it for easy access
domain_name = "bitwarden"
config_map_ref = ["uid.env"]
environment = {}
@@ -338,6 +348,7 @@ kubernetes = {
name = "bitwarden-notifications"
image = "ghcr.io/bitwarden/notifications:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env", "global.override.env"]
environment = {}
@@ -359,6 +370,7 @@ kubernetes = {
name = "bitwarden-sso"
image = "ghcr.io/bitwarden/sso:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env", "global.override.env"]
environment = {}
@@ -385,6 +397,7 @@ kubernetes = {
name = "bitwarden-web"
image = "ghcr.io/bitwarden/web:2026.1.0"
service_port = [5000]
exposed = false
config_map_ref = ["global.env", "uid.env"]
environment = {}