v1.0.0
This commit is contained in:
+9
-41
@@ -1,48 +1,16 @@
|
||||
---
|
||||
# tasks file for eom
|
||||
- name: Create eom namespace
|
||||
k8s:
|
||||
state: present
|
||||
definition:
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: "eom-{{ target_namespace }}"
|
||||
- name: Deploy Auth
|
||||
include_tasks: auth.yaml
|
||||
|
||||
- name: Deploy eom openldap
|
||||
include_tasks: openldap.yaml
|
||||
- name: Deploy Cloud
|
||||
include_tasks: cloud.yaml
|
||||
|
||||
- name: Deploy eom proxy
|
||||
include_tasks: proxy.yaml
|
||||
|
||||
- name: Deploy eom git
|
||||
- name: Deploy Git
|
||||
include_tasks: git.yaml
|
||||
|
||||
- name: Deploy eom media
|
||||
include_tasks: media.yaml
|
||||
- name: Deploy Wiki
|
||||
include_tasks: wiki.yaml
|
||||
|
||||
- name: Deploy eom www
|
||||
include_tasks: www.yaml
|
||||
|
||||
- name: Create network policy
|
||||
k8s:
|
||||
state: present
|
||||
definition:
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: NetworkPolicy
|
||||
metadata:
|
||||
name: restrict-external-access
|
||||
namespace: "eom-{{ target_namespace }}"
|
||||
spec:
|
||||
podSelector:
|
||||
matchExpressions:
|
||||
- key: app
|
||||
operator: In
|
||||
values:
|
||||
- proxy
|
||||
policyTypes:
|
||||
- Ingress
|
||||
ingress:
|
||||
- from:
|
||||
- ipBlock:
|
||||
cidr: 192.168.1.0/24
|
||||
- name: Deploy Redmine
|
||||
include_tasks: org.yaml
|
||||
|
||||
Reference in New Issue
Block a user