From 2ce65542b974fe0283da2dfb401ba97b45303b83 Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Tue, 31 Jan 2023 19:58:42 +0800 Subject: [PATCH] feat(whoogle): add whoogle Signed-off-by: JJGadgets --- .../flux/flux-system/charts/helm/bjw-s.yaml | 9 ++ .../charts/helm/kustomization.yaml | 1 + kube/5-apps/kustomization.yaml | 5 + kube/5-apps/whoogle/.sops.yaml | 7 ++ kube/5-apps/whoogle/1-namespace.yaml | 5 + kube/5-apps/whoogle/2-install.yaml | 97 +++++++++++++++++++ kube/5-apps/whoogle/kustomization.yaml | 6 ++ 7 files changed, 130 insertions(+) create mode 100644 kube/1-bootstrap/flux/flux-system/charts/helm/bjw-s.yaml create mode 100644 kube/5-apps/kustomization.yaml create mode 100644 kube/5-apps/whoogle/.sops.yaml create mode 100644 kube/5-apps/whoogle/1-namespace.yaml create mode 100644 kube/5-apps/whoogle/2-install.yaml create mode 100644 kube/5-apps/whoogle/kustomization.yaml diff --git a/kube/1-bootstrap/flux/flux-system/charts/helm/bjw-s.yaml b/kube/1-bootstrap/flux/flux-system/charts/helm/bjw-s.yaml new file mode 100644 index 00000000..c9e6c2d4 --- /dev/null +++ b/kube/1-bootstrap/flux/flux-system/charts/helm/bjw-s.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: bjw-s + namespace: flux-system +spec: + interval: 1h + url: https://bjw-s.github.io/helm-charts/ diff --git a/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml b/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml index 2ae9a930..fcc29feb 100644 --- a/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml +++ b/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml @@ -7,3 +7,4 @@ resources: - cilium-charts.yaml - jetstack.yaml - k8s-gateway.yaml + - bjw-s.yaml diff --git a/kube/5-apps/kustomization.yaml b/kube/5-apps/kustomization.yaml new file mode 100644 index 00000000..a2b54f16 --- /dev/null +++ b/kube/5-apps/kustomization.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - whoogle diff --git a/kube/5-apps/whoogle/.sops.yaml b/kube/5-apps/whoogle/.sops.yaml new file mode 100644 index 00000000..e798cb80 --- /dev/null +++ b/kube/5-apps/whoogle/.sops.yaml @@ -0,0 +1,7 @@ +creation_rules: + - path_regex: .*.yaml + encrypted_regex: ^(hosts|host|WHOOGLE_CONFIG_URL)$ + age: >- + age1xl3fcwdw56k73lraxsjhde4ygwn7jw0js5l5qw7vsp54vc5czuwstcejxu + pgp: >- + 31E70E5BC80C58AFF5DD649921AC5A1AC6E5B7F2 diff --git a/kube/5-apps/whoogle/1-namespace.yaml b/kube/5-apps/whoogle/1-namespace.yaml new file mode 100644 index 00000000..ae7746dd --- /dev/null +++ b/kube/5-apps/whoogle/1-namespace.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: whoogle diff --git a/kube/5-apps/whoogle/2-install.yaml b/kube/5-apps/whoogle/2-install.yaml new file mode 100644 index 00000000..d52b3160 --- /dev/null +++ b/kube/5-apps/whoogle/2-install.yaml @@ -0,0 +1,97 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: echo-server + namespace: default +spec: + interval: 15m + chart: + spec: + chart: app-template + version: 1.2.1 + sourceRef: + kind: HelmRepository + name: bjw-s + namespace: flux-system + maxHistory: 3 + install: + createNamespace: true + remediation: + retries: 3 + upgrade: + cleanupOnFail: true + remediation: + retries: 3 + uninstall: + keepHistory: false + values: + controller: + strategy: RollingUpdate + fullNameOverride: whoogle + image: + repository: docker.io/benbusby/whoogle-search + tag: 0.8.1 + env: + HTTPS_ONLY: 0 + WHOOGLE_CONFIG_THEME: dark + WHOOGLE_CONFIG_SAFE: 0 + WHOOGLE_CONFIG_STYLE: 'body {max-width: 100% !important} :root { --whoogle-dark-logo: #6E6C7E; --whoogle-dark-page-bg: #1E1E2E; --whoogle-dark-element-bg: #302D41; --whoogle-dark-text: #D9E0EE; --whoogle-dark-contrast-text: #F2CDCD; --whoogle-dark-secondary-text: #988BA2; --whoogle-dark-result-bg: #302D41; --whoogle-dark-result-title: #F5E0DC; --whoogle-dark-result-url: #F5E0DC; --whoogle-dark-result-visited: #C9CBFF; } #whoogle-w { fill: #96CDFB; } #whoogle-h { fill: #F28FAD; } #whoogle-o-1 { fill: #FAE3B0; } #whoogle-o-2 { fill: #96CDFB; } #whoogle-g { fill: #ABE9B3; } #whoogle-l { fill: #F28FAD; } #whoogle-e { fill: #FAE3B0; }' + WHOOGLE_CONFIG_URL: ENC[AES256_GCM,data:y98d0MskA9RIeBgdTqaJ+g==,iv:DH27Ul8u/Wzocvu0V39T0euNnKn00H+LawcI14bMS24=,tag:tHqhzL7NyoTvTwMGaSIkRA==,type:str] + WHOOGLE_CONFIG_GET_ONLY: 1 + WHOOGLE_CONFIG_COUNTRY: SG + WHOOGLE_CONFIG_VIEW_IMAGE: 1 + WHOOGLE_CONFIG_DISABLE: 1 + # service: + # main: + # ports: + # http: + # port: 5000 + ingress: + main: + enabled: true + ingressClassName: nginx + hosts: + - host: ENC[AES256_GCM,data:J2+NHUGZTac=,iv:4BSxTXjI0uxFxFPVBrX7+KK0qRn7AwvJV2CSTfq43Kw=,tag:YEcHbXmynBkA/Iw2spgrBg==,type:str] + paths: + - path: ENC[AES256_GCM,data:vA==,iv:VefsQzuQDWu5aTYrP2HFn8PvASYgVKJ2tnJWXNEGeTo=,tag:mIlAVcF4TH6UZqwo9/kXsQ==,type:str] + pathType: ENC[AES256_GCM,data:hqs8ikWH,iv:ijnU5cRJa6bxMnhlrAbNEqUsYoXhZ4htDDxcGtFh/60=,tag:YEQ5JO+TrJqmPQDP+19Q/A==,type:str] + tls: + - hosts: + - ENC[AES256_GCM,data:gg+11Sa7UXM=,iv:5u9CfStl7N2pd+gG4L6K6PRzZdIsAjWIClr8bzaZhjI=,tag:RmZS51hSDK1rtUXA8NLTXg==,type:str] + resources: + requests: + cpu: 5m + memory: 256Mi + limits: + memory: 250Mi +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1xl3fcwdw56k73lraxsjhde4ygwn7jw0js5l5qw7vsp54vc5czuwstcejxu + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwaTlXUXM2Z3J0VVd0ZWY3 + SGxKUVZLL21GYzJOWCs1b0MvNkVld2R1YUMwClVkS2VXdTRYd2xGdmQwOGJ3MU54 + YU1aRDBkcWd1bythc2RtOFlKOHVRNXMKLS0tIFhxMkdNN25pWVcxVy9uMFZIaTdr + R1lZSmVtNnBMQUluUjlHdFdzekpPcm8KYjTlTyaIbkkMkASpmAdcn5GTb67wPJC6 + Gijco/AxH2iSK0wsDF7LKTgsf5/3hL4UV0+QTZGa+PQcaLamIkheew== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2023-01-31T11:55:47Z" + mac: ENC[AES256_GCM,data:1bdJgL1YpTBpQjLJHt10k0YTBX2NwtjfPclwW6+CF4WBRfc48X5x4YcqSkoEFxXr+ypey2HfWNVkQiIRkeCnAhQeSg4oErKRpxrralaw0pJtdKHOYyFsJ3cFSHtHGV4qhfoNt22i38XVU8vhdZHDVI7iqZ646zucEOz9Ibr8gVI=,iv:CpwBjBXj47BYhGg1aNWCp2gjr9KQd71b8eX8rIWZAfI=,tag:v964R7NsD0VHdUySQoLBtQ==,type:str] + pgp: + - created_at: "2023-01-31T11:55:47Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hF4DAAAAAAAAAAASAQdA9FbgYQCCyh7cOgvtolUZ7Gn7serGoRyv2eXeF7LFH2Uw + 2Y9K+RQa1Py/svPmS/aaH7h9KLSYNL4QaaizF5hCAFg0F0xpCDNCz/btzzMJZvyv + 0lwByii6uvSXszmwS/Wx/zz8jUQ0xiQLaTlwgS3fGjVKlWRYklO/wmGRmVTVdnBT + 2AfNM7BuhxLcZNIcLVE6XeJ7pnPoT6hDGTI0MvWj0RonoeZOuSPKI4UflCUY+A== + =szsK + -----END PGP MESSAGE----- + fp: 31E70E5BC80C58AFF5DD649921AC5A1AC6E5B7F2 + encrypted_regex: ^(hosts|host|WHOOGLE_CONFIG_URL)$ + version: 3.7.3 diff --git a/kube/5-apps/whoogle/kustomization.yaml b/kube/5-apps/whoogle/kustomization.yaml new file mode 100644 index 00000000..d1fb4076 --- /dev/null +++ b/kube/5-apps/whoogle/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - 1-namespace.yaml + - 2-install.yaml