updated deployments

api/models/models.go

@@ -0,0 +1 @@
+package models

deployments/apps/cert-manager.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager
+  namespace: argocd
+spec:
+  destination:
+    namespace: cert-manager
+    server: https://kubernetes.default.svc
+  project: null-cloud
+  source:
+    chart: cert-manager
+    helm:
+      parameters:
+        - name: installCRDs
+          value: "true"
+    repoURL: https://charts.jetstack.io
+    targetRevision: v1.12.0
+  syncPolicy:
+    automated: {}
+    syncOptions:
+      - CreateNamespace=true

deployment/apps/null-web.yaml → deployments/apps/frontend.yaml

@@ -9,7 +9,7 @@ spec:
     namespace: web
   project: null-cloud
   source:
-    path: deployments/null-web/overlays/prod
+    path: deployments/manifests/null-web/overlays/prod
     repoURL: https://github.com/null-channel/nullcloud-deployments/
     targetRevision: HEAD
   syncPolicy:

deployment/apps/infrastructure.yaml → deployments/apps/infrastructure.yaml

@@ -9,7 +9,7 @@ spec:
     namespace: infra
   project: null-cloud
   source:
-    path: deployments/infra/overlays/prod
+    path: deployments/manifests/overlays/prod
     repoURL: https://github.com/null-channel/nullcloud-deployments/
     targetRevision: HEAD
   syncPolicy:

deployment/apps/cert-manager.yaml → deployments/apps/nats-certs.yaml

@@ -1,16 +1,16 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: cert-manager
+  name: nats-certs
   namespace: argocd
 spec:
   destination:
     name: in-cluster
-    namespace: cert-manager
+    namespace: nats
   project: null-cloud
   source:
-    path: deployments/cert-manager
-    repoURL: https://github.com/null-channel/nullcloud-deployments/
+    path: deployments/manifests/nats
+    repoURL: https://github.com/null-channel/eddington/
     targetRevision: HEAD
   syncPolicy:
         automated:

deployments/apps/nats.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: nats
+  namespace: argocd
+spec:
+  project: null-cloud
+  source:
+    chart: nats/nats
+    repoURL: https://nats-io.github.io/k8s/helm/charts/
+    targetRevision: 2.7.4
+    helm:
+      releaseName: nats
+  destination:
+    server: "https://kubernetes.default.svc"
+    namespace: nats
+  syncPolicy:
+    automated: {}
+    syncOptions:
+      - CreateNamespace=true

deployments/manifests/nats/certs.yaml

@@ -0,0 +1,47 @@
+---
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
+metadata:
+  name: nats-ca
+spec:
+  secretName: nats-ca
+  duration: 8736h # 1 year
+  renewBefore: 240h # 10 days
+  issuerRef:
+    name: selfsigning
+    kind: ClusterIssuer
+  commonName: nats-ca
+  usages:
+  - cert sign
+  organization:
+  - Your organization
+  isCA: true
+---
+apiVersion: cert-manager.io/v1alpha2
+kind: Issuer
+metadata:
+  name: nats-ca
+spec:
+  ca:
+    secretName: nats-ca
+---
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
+metadata:
+  name: nats-server-tls
+spec:
+  secretName: nats-server-tls
+  duration: 2160h # 90 days
+  renewBefore: 240h # 10 days
+  issuerRef:
+    name: nats-ca
+    kind: Issuer
+  usages:
+  - signing
+  - key encipherment
+  - server auth
+  organization:
+  - Your organization
+  commonName: nats.default.svc.cluster.local
+  dnsNames:
+  - nats.default.svc