This commit is contained in:
2024-11-11 15:29:29 -05:00
parent a36bf31bf8
commit be231a9031
12 changed files with 1224 additions and 676 deletions
+9 -41
View File
@@ -1,48 +1,16 @@
---
# tasks file for eom
- name: Create eom namespace
k8s:
state: present
definition:
apiVersion: v1
kind: Namespace
metadata:
name: "eom-{{ target_namespace }}"
- name: Deploy Auth
include_tasks: auth.yaml
- name: Deploy eom openldap
include_tasks: openldap.yaml
- name: Deploy Cloud
include_tasks: cloud.yaml
- name: Deploy eom proxy
include_tasks: proxy.yaml
- name: Deploy eom git
- name: Deploy Git
include_tasks: git.yaml
- name: Deploy eom media
include_tasks: media.yaml
- name: Deploy Wiki
include_tasks: wiki.yaml
- name: Deploy eom www
include_tasks: www.yaml
- name: Create network policy
k8s:
state: present
definition:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: restrict-external-access
namespace: "eom-{{ target_namespace }}"
spec:
podSelector:
matchExpressions:
- key: app
operator: In
values:
- proxy
policyTypes:
- Ingress
ingress:
- from:
- ipBlock:
cidr: 192.168.1.0/24
- name: Deploy Redmine
include_tasks: org.yaml