feat(insurgency-sandstorm): add

Signed-off-by: JJGadgets <git@jjgadgets.tech>
2026-01-27 18:18:26 +00:00 · 2023-02-24 16:16:36 +08:00
parent 3cff17a862
commit 633deb4514
10 changed files with 479 additions and 8 deletions
--- a/kube/1-clusters/Biohazard/2-config/3-secrets.yaml
+++ b/kube/1-clusters/Biohazard/2-config/3-secrets.yaml
@@ -22,8 +22,8 @@ sops:
            KzBCRW8wMU53ckQwZDhvdjlEZlozQlEKxX8yiEpzu+A3ItXzlCuoL/+wYaQ7IPnZ
            V4vGVAKm635mkX+xacfCzReHR8Mw5jrPJAnnRA3qOAG7A+0aHBesWA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-21T20:38:17Z"
-    mac: ENC[AES256_GCM,data:XY7/870htUuY7/Czw6QzVzgOCqM4USXTP22cGvIXsdeYD6uCQ+PJa8CJFUaPS9w5ZGFfRqwbHBO0ULzKSFKnGmZK5x+YfxZ0fH6Gg5tOezxn+k7sBJ3gu381t4gKXV8WxsLMmoymh9+SQTGM5aW8uAtd8FmXRS5MBlYtoCHSGIw=,iv:aKRDc9uAyGXSZrptkoxgriSEETSBLtVf/zcmgRI7xeU=,tag:+2y7tATEnM7xGVoQLbLkMA==,type:str]
+    lastmodified: "2023-02-24T08:10:08Z"
+    mac: ENC[AES256_GCM,data:eo9+XtvxqVZQ3ZvvFTE9ZbnWmJBbbXX3Ln7kJb++DQQdqkpZSUMexL5eTE4+eOe9qSxhAyQ1LUzE7S6mHjUXmtokhoEcC6J8gE9NH+WfzGrMSBTc4seFbxfcJZtFFO5vyjrWFb2A7Zew1EpU5PjjiiVy++4Rg5O1OtJYJo+WUHQ=,iv:pRNqZPRhCTnfjLU9qYHT8GZZ9HWEXmg2irk++IBO2lk=,tag:dFKbRFw9fM8dcAZD92aHzg==,type:str]
    pgp:
        - created_at: "2023-02-21T20:21:45Z"
          enc: |
@@ -61,8 +61,8 @@ sops:
            KzBCRW8wMU53ckQwZDhvdjlEZlozQlEKxX8yiEpzu+A3ItXzlCuoL/+wYaQ7IPnZ
            V4vGVAKm635mkX+xacfCzReHR8Mw5jrPJAnnRA3qOAG7A+0aHBesWA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-21T20:38:17Z"
-    mac: ENC[AES256_GCM,data:XY7/870htUuY7/Czw6QzVzgOCqM4USXTP22cGvIXsdeYD6uCQ+PJa8CJFUaPS9w5ZGFfRqwbHBO0ULzKSFKnGmZK5x+YfxZ0fH6Gg5tOezxn+k7sBJ3gu381t4gKXV8WxsLMmoymh9+SQTGM5aW8uAtd8FmXRS5MBlYtoCHSGIw=,iv:aKRDc9uAyGXSZrptkoxgriSEETSBLtVf/zcmgRI7xeU=,tag:+2y7tATEnM7xGVoQLbLkMA==,type:str]
+    lastmodified: "2023-02-24T08:10:08Z"
+    mac: ENC[AES256_GCM,data:eo9+XtvxqVZQ3ZvvFTE9ZbnWmJBbbXX3Ln7kJb++DQQdqkpZSUMexL5eTE4+eOe9qSxhAyQ1LUzE7S6mHjUXmtokhoEcC6J8gE9NH+WfzGrMSBTc4seFbxfcJZtFFO5vyjrWFb2A7Zew1EpU5PjjiiVy++4Rg5O1OtJYJo+WUHQ=,iv:pRNqZPRhCTnfjLU9qYHT8GZZ9HWEXmg2irk++IBO2lk=,tag:dFKbRFw9fM8dcAZD92aHzg==,type:str]
    pgp:
        - created_at: "2023-02-21T20:21:45Z"
          enc: |
@@ -85,6 +85,7 @@ metadata:
    namespace: flux-system
 stringData:
    TEST: ENC[AES256_GCM,data:y89RLWgixJ16JCfo,iv:UhMqN0jUmdl9Om+3MTObY3G8Qcpquo/7K98oycwFuko=,tag:ZqPq/XbIwFTxt08qSq/+eQ==,type:str]
+    SECRET_SANDSTORM_ADMIN_PASSWORD: ENC[AES256_GCM,data:AAE+EoAkXSpH9kYFj5rI,iv:KvLkpZD0YUySUkqTByAdOUPG0aYBEfflBI3yX+1xO6M=,tag:YXefoDZXa4FLdfXLejr0mw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -100,8 +101,86 @@ sops:
            KzBCRW8wMU53ckQwZDhvdjlEZlozQlEKxX8yiEpzu+A3ItXzlCuoL/+wYaQ7IPnZ
            V4vGVAKm635mkX+xacfCzReHR8Mw5jrPJAnnRA3qOAG7A+0aHBesWA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-21T20:38:17Z"
-    mac: ENC[AES256_GCM,data:XY7/870htUuY7/Czw6QzVzgOCqM4USXTP22cGvIXsdeYD6uCQ+PJa8CJFUaPS9w5ZGFfRqwbHBO0ULzKSFKnGmZK5x+YfxZ0fH6Gg5tOezxn+k7sBJ3gu381t4gKXV8WxsLMmoymh9+SQTGM5aW8uAtd8FmXRS5MBlYtoCHSGIw=,iv:aKRDc9uAyGXSZrptkoxgriSEETSBLtVf/zcmgRI7xeU=,tag:+2y7tATEnM7xGVoQLbLkMA==,type:str]
+    lastmodified: "2023-02-24T08:10:08Z"
+    mac: ENC[AES256_GCM,data:eo9+XtvxqVZQ3ZvvFTE9ZbnWmJBbbXX3Ln7kJb++DQQdqkpZSUMexL5eTE4+eOe9qSxhAyQ1LUzE7S6mHjUXmtokhoEcC6J8gE9NH+WfzGrMSBTc4seFbxfcJZtFFO5vyjrWFb2A7Zew1EpU5PjjiiVy++4Rg5O1OtJYJo+WUHQ=,iv:pRNqZPRhCTnfjLU9qYHT8GZZ9HWEXmg2irk++IBO2lk=,tag:dFKbRFw9fM8dcAZD92aHzg==,type:str]
+    pgp:
+        - created_at: "2023-02-21T20:21:45Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DAAAAAAAAAAASAQdAa+J1MrvZbIKq2vtCBKriShdEoCz/4+VT6HIGeMfwLDQw
+            LxJ0cM20zCBTR5zuvae4hp9VnSL1o17o9txHK3Ubyh5jLf49CmSA97ugt26PWmAB
+            0l4BFiUxtHys5tW+8ydqYU5t0FS2OqigMb2EH22wv4iBWnMiK+/T+lXoPRlcuYDG
+            sDahuo/0L+YhyULokfaH5GE1C/umtfVw/sE3H8gV2QniXzbyKkM8d6KTy8gpoOrY
+            =yxeu
+            -----END PGP MESSAGE-----
+          fp: 31E70E5BC80C58AFF5DD649921AC5A1AC6E5B7F2
+    encrypted_regex: ^(NETBIRD_AUTH_AUDIENCE|NETBIRD_AUTH_CLIENT_ID|NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID|NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT|NETBIRD_DOMAIN|NETBIRD_MGMT_DNS_DOMAIN|WHOOGLE_CONFIG_URL|ZT_ALLOW_MANAGEMENT_FROM|ZU_CONTROLLER_ENDPOINT|ZU_DEFAULT_PASSWORD|ZU_DEFAULT_USERNAME|addresses|clusterDomain|commonName|config.yaml|data|dnsNames|dnsZones|domain|email|externalIPs|host|hosts|ip|ipv4NativeRoutingCIDR|k8sServiceHost|loadBalancerIP|my-asn|nameservers|peer-address|peer-asn|secretName|stringData|whitelist-source-range)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: insurgency-sandstorm-adminstxt
+    namespace: sandstorm
+data:
+    Admins.txt: ENC[AES256_GCM,data:m4ZcxA9wD6w/vxmJ9MopTiMafGf7i7Ic9buJDFepFc+IFCsk6UKIzgxZupPwoL4cBehRmT6NwSzFaYk+352Qsf4aoiDMD+sWipj9Oc5tGLpzgxUfulZHpiKWxzcdYsMU,iv:ioPO+YPlLthh/gcgehDrF2DLj7Di3AeXZgaVRsuI74k=,tag:zx1jQ33Lf395gf9sLwxRlw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u57l4s400gqstc0p485j4646cemntufr0pcyp32yudklsp90xpmszxvnkj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSEVDZlFlU0ZXR25XV2RD
+            SGE3czU4TU9tVEZlYTF2R05mVzhOK000UGdrClo1TVlLOVdjc2VqOU5nYkZZR2Nv
+            YjRBNTNhdG5TK1MzQjlJdVlEeENQeGsKLS0tIHI5NnBreDFmVGJXNnVMVmxmalg4
+            KzBCRW8wMU53ckQwZDhvdjlEZlozQlEKxX8yiEpzu+A3ItXzlCuoL/+wYaQ7IPnZ
+            V4vGVAKm635mkX+xacfCzReHR8Mw5jrPJAnnRA3qOAG7A+0aHBesWA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-02-24T08:10:08Z"
+    mac: ENC[AES256_GCM,data:eo9+XtvxqVZQ3ZvvFTE9ZbnWmJBbbXX3Ln7kJb++DQQdqkpZSUMexL5eTE4+eOe9qSxhAyQ1LUzE7S6mHjUXmtokhoEcC6J8gE9NH+WfzGrMSBTc4seFbxfcJZtFFO5vyjrWFb2A7Zew1EpU5PjjiiVy++4Rg5O1OtJYJo+WUHQ=,iv:pRNqZPRhCTnfjLU9qYHT8GZZ9HWEXmg2irk++IBO2lk=,tag:dFKbRFw9fM8dcAZD92aHzg==,type:str]
+    pgp:
+        - created_at: "2023-02-21T20:21:45Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DAAAAAAAAAAASAQdAa+J1MrvZbIKq2vtCBKriShdEoCz/4+VT6HIGeMfwLDQw
+            LxJ0cM20zCBTR5zuvae4hp9VnSL1o17o9txHK3Ubyh5jLf49CmSA97ugt26PWmAB
+            0l4BFiUxtHys5tW+8ydqYU5t0FS2OqigMb2EH22wv4iBWnMiK+/T+lXoPRlcuYDG
+            sDahuo/0L+YhyULokfaH5GE1C/umtfVw/sE3H8gV2QniXzbyKkM8d6KTy8gpoOrY
+            =yxeu
+            -----END PGP MESSAGE-----
+          fp: 31E70E5BC80C58AFF5DD649921AC5A1AC6E5B7F2
+    encrypted_regex: ^(NETBIRD_AUTH_AUDIENCE|NETBIRD_AUTH_CLIENT_ID|NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID|NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT|NETBIRD_DOMAIN|NETBIRD_MGMT_DNS_DOMAIN|WHOOGLE_CONFIG_URL|ZT_ALLOW_MANAGEMENT_FROM|ZU_CONTROLLER_ENDPOINT|ZU_DEFAULT_PASSWORD|ZU_DEFAULT_USERNAME|addresses|clusterDomain|commonName|config.yaml|data|dnsNames|dnsZones|domain|email|externalIPs|host|hosts|ip|ipv4NativeRoutingCIDR|k8sServiceHost|loadBalancerIP|my-asn|nameservers|peer-address|peer-asn|secretName|stringData|whitelist-source-range)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: insurgency-sandstorm-gameusersettingsini
+    namespace: sandstorm
+data:
+    GameUserSettings.ini: ENC[AES256_GCM,data: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,iv:fJyosqNc2m047cyIuFXSgU0U1K8R8RcsXopQM1mBwTM=,tag:2iaDMi64qN3YtYAkBAnO7A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u57l4s400gqstc0p485j4646cemntufr0pcyp32yudklsp90xpmszxvnkj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSEVDZlFlU0ZXR25XV2RD
+            SGE3czU4TU9tVEZlYTF2R05mVzhOK000UGdrClo1TVlLOVdjc2VqOU5nYkZZR2Nv
+            YjRBNTNhdG5TK1MzQjlJdVlEeENQeGsKLS0tIHI5NnBreDFmVGJXNnVMVmxmalg4
+            KzBCRW8wMU53ckQwZDhvdjlEZlozQlEKxX8yiEpzu+A3ItXzlCuoL/+wYaQ7IPnZ
+            V4vGVAKm635mkX+xacfCzReHR8Mw5jrPJAnnRA3qOAG7A+0aHBesWA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-02-24T08:10:08Z"
+    mac: ENC[AES256_GCM,data:eo9+XtvxqVZQ3ZvvFTE9ZbnWmJBbbXX3Ln7kJb++DQQdqkpZSUMexL5eTE4+eOe9qSxhAyQ1LUzE7S6mHjUXmtokhoEcC6J8gE9NH+WfzGrMSBTc4seFbxfcJZtFFO5vyjrWFb2A7Zew1EpU5PjjiiVy++4Rg5O1OtJYJo+WUHQ=,iv:pRNqZPRhCTnfjLU9qYHT8GZZ9HWEXmg2irk++IBO2lk=,tag:dFKbRFw9fM8dcAZD92aHzg==,type:str]
    pgp:
        - created_at: "2023-02-21T20:21:45Z"
          enc: |
--- a/kube/1-clusters/Biohazard/2-config/4-vars.yaml
+++ b/kube/1-clusters/Biohazard/2-config/4-vars.yaml
@@ -23,9 +23,15 @@ data:
    APP_IP_MINECRAFT: ENC[AES256_GCM,data:tU18Ee5Vi98mNRw=,iv:MSNHyroetvWu1wPdPE2+JtxDegZZj25QfcQVq8hcywE=,tag:wxhrsqA5lCPlRwjFgrtPHg==,type:str]
    APP_DNS_WHOOGLE: ENC[AES256_GCM,data:dPOzY+3coD0=,iv:s9id6/x60GDrNm4mEuWx2qUKrDsgADVRXCKuwki7Ju8=,tag:mPTKni/0vH/lTSqnAr5gCA==,type:str]
    APP_DNS_GOKAPI: ENC[AES256_GCM,data:FvZEIAJT63mM,iv:DqrWjOIoukbESV/+gq/hfcdR36mjD8adYYms2GUISJw=,tag:K8ZuX/pIiCj2cTdgWitU2A==,type:str]
+    APP_IP_SANDSTORM: ENC[AES256_GCM,data:2V+Dy1c3hOepKEo=,iv:l1nv+BrnEjsrvdONhBY9EgA8lSO2Nmtdr7Ktl9twfT4=,tag:ls8DbeJnvdwZhUA+deP02Q==,type:str]
+    APP_DNS_SANDSTORM: ENC[AES256_GCM,data:dc/OufmvPkYMRg==,iv:8GUBWGGdEJ5A+wYFaLJljYYn3hUlpH9/cGy6641GDEw=,tag:gE3j/iytsqPKUm+R1g3suQ==,type:str]
    CONFIG_MINECRAFT_OPS: ENC[AES256_GCM,data:BKfjfUQQXd025nNZCHQki/SeqiMQVCUP9tCkmNwUgfvj7XK6,iv:7+tp1IJ06UfZt53HLnFOByrTWFY31AHiQwjrrUS4OqI=,tag:TSvw3notEqgPIORTWHwUBw==,type:str]
    CONFIG_MINECRAFT_ICON: ENC[AES256_GCM,data:AINTGnjPbWZCVJKdL4Mx8bBhOUnQU2BEhqr0730/OJATkKBzcvxf7R9HlX37uFI=,iv:HsvxmHYUb350vSulAVdBHonB6cA+0pu03t5BaU8EuUs=,tag:gGr7OY++7+yuZ36TwXcbaA==,type:str]
    CONFIG_MINECRAFT_NAME: ENC[AES256_GCM,data:zhsyGymdQKgeX58X2Q==,iv:dGbrb4ZytcRpj4ie9dzM2TUVnzC4YQvCey+/G9uFcGs=,tag:IpFutt4G5JMP4hUIOgbqqw==,type:str]
+    CONFIG_SANDSTORM_NAME: ENC[AES256_GCM,data:W2pYLk1bmtKjXfuJY4nv9HkqIBI4aRA3X+JJTw==,iv:UEWUAJYCdy2r5jYayTAh5uv5aq4XFkuD1IYSmf76TyE=,tag:J10gXb5idJazhtqA5QZL8A==,type:str]
+    CONFIG_SANDSTORM_MUTATORS: ENC[AES256_GCM,data:HumP4HOeZ06JaFBHCl9PHza5orjTVWfmLBq3kSdW+ygD+Avf6dDM+BVm7GkoqRIPtWEJMyMcOOUyF1bzbzrNca/PkMsNsP6/YspRd+QsH+w6JxsGSMqxEpKzN4wbBuIRH7PYbp7PncBOmoOMAOaYW3BEnsdBcV4II7V0+sAKPNQ4zsi0y6LmLaCFtjAOQhi6MMSPfcl9JTD6UoLizD8=,iv:BwbTdDXi6nVqtF7TrSoDLxJKz3Xv6gKZFiU2D2bRgkY=,tag:atIZxrt/BJdijPf2fMDEvw==,type:str]
+    CONFIG_SANDSTORM_INIT_MAP: ENC[AES256_GCM,data:uaM2kX5hlN2BoQ==,iv:U2jmxP35cy/eWT1JTdfr6Z3b4NAzIHG55Kb4emoAin0=,tag:rNCaa5zwKHesrto092oUcg==,type:str]
+    CONFIG_SANDSTORM_INIT_SCENARIO: ENC[AES256_GCM,data:OJVCFbvqWXuYUPvdCiwRngUzfw==,iv:1NkA4VaF/xUdudDD2W5dHEDw55dkzwo2sof5krinJz0=,tag:rmD5eZpnHpOcSJXel3AQbg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -41,8 +47,8 @@ sops:
            SnpvS3RUUlFMM1dUNGZQNkVqQ2VqNDAKywch6CgtS1AFLYxfML5dB7/5V6qZ0ob1
            63vBpqjOza3EqvfNKo+UMtK/fRK0Q5jlpuI+0/z9VrxzKEWsgUCBVQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-23T09:12:32Z"
-    mac: ENC[AES256_GCM,data:/Y7Eth1wCF9GT4ro4EVMO6MYAXQs8sI+VjjvIyE99fkDOunFg2onuUfPxNeEwhBaGl+mfopSi79nEgEi0pNNpvLBml++YQeA3XNXB0lRausKOOtdAAhljm57OOMRQfADHHK/bNngV3cgs7nThgJNTtFexWKhdJVSGAq9qTOH76I=,iv:s19V7vIvaK928wUvqJBD5vweizJhTEvbxLQIVVMuN/A=,tag:cCdzEgft9ZP4tcxcu+APtw==,type:str]
+    lastmodified: "2023-02-24T08:14:45Z"
+    mac: ENC[AES256_GCM,data:RgJhOP6HgY2QwrMqdwvn3ogwXqQ5WwdCW/SgBHHj9vlBzPYHACRqRiJ2UMYhWtejObhxUwn3AVXgFmnBvMC9yAkOtHagKCLMR1rK4n/U9YkG8jBESsxU4JAL8tXPQEkBPJg4izM/5FwzJCzQdkeaNzgs9s22wdH/gGkw3KMN1UE=,iv:h5WnPwMh9F/qRAsbOnYHC1E4k/qcZJaUfAm0LP6Pv9M=,tag:hPS3MrdOwgiHotuiyeTKsQ==,type:str]
    pgp:
        - created_at: "2023-02-22T08:12:31Z"
          enc: |
--- a/kube/1-clusters/Biohazard/2-config/5-deploy.yaml
+++ b/kube/1-clusters/Biohazard/2-config/5-deploy.yaml
@@ -178,3 +178,14 @@ spec:
  dependsOn:
    - name: biohazard-1-core-04-dns
    - name: biohazard-1-core-02-storage-rook-ceph
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: biohazard-2-apps-insurgency-sandstorm
+  namespace: flux-system
+spec:
+  path: ./kube/3-deploy/2-apps/insurgency-sandstorm
+  dependsOn:
+    - name: biohazard-1-core-04-dns
+    - name: biohazard-1-core-02-storage-rook-ceph
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/1-namespace.yaml
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/1-namespace.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: sandstorm
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/2-install.yaml
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/2-install.yaml
@@ -0,0 +1,119 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: insurgency-sandstorm
+  namespace: sandstorm
+  labels:
+    helm.flux.home.arpa/app-template: "true"
+spec:
+  values:
+    controller:
+      strategy: Recreate
+      type: statefulset
+      replicas: 1
+    fullNameOverride: insurgency-sandstorm
+    image:
+      repository: docker.io/andrewmhub/insurgency-sandstorm
+      tag: latest # I wish this wasn't how it's tagged, but alas
+    args: ["-hostname=\"${CONFIG_SANDSTORM_NAME}\"", "-Log", "-Port=27102", "-QueryPort=27131", "-MapCycle=MapCycle", "-NoEAC", "-EnableCheats", "-Mods", "-mutators=${CONFIG_SANDSTORM_MUTATORS}", "-ModDownloadTravelTo=${CONFIG_SANDSTORM_INIT_MAP}?Scenario=Scenario_${CONFIG_SANDSTORM_INIT_MAP}_${CONFIG_SANDSTORM_INIT_SCENARIO}?password=\"${SECRET_SANDSTORM_ADMIN_PASSWORD}\""]
+    dnsPolicy: ClusterFirstWithHostNet
+    dnsConfig:
+      options:
+        - name: ndots
+          value: "1"
+      nameservers:
+        - "${IP_HOME_DNS}"
+    service:
+      main:
+        type: LoadBalancer
+        externalTrafficPolicy: Local
+        loadBalancerIP: "${APP_IP_SANDSTORM}"
+        externalIPs:
+          - "${APP_IP_SANDSTORM}"
+        annotations:
+          coredns.io/hostname: "${APP_DNS_SANDSTORM}"
+        ports:
+          http:
+            enabled: false
+            primary: false
+          gameudp:
+            enabled: true
+            primary: true
+            port: 27102
+            targetPort: 27102
+            protocol: UDP
+          gametcp:
+            enabled: true
+            primary: true
+            port: 27102
+            targetPort: 27102
+            protocol: TCP
+          queryudp:
+            enabled: true
+            primary: true
+            port: 27131
+            targetPort: 27131
+            protocol: UDP
+          querytcp:
+            enabled: true
+            primary: true
+            port: 27131
+            targetPort: 27131
+            protocol: UDP
+    persistence:
+      mods:
+        enabled: true
+        type: pvc
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Mods
+        accessMode: ReadWriteOnce
+        storageClass: block
+        size: 100Gi
+        retain: true
+        readOnly: false
+      gameini:
+        enabled: true
+        type: ConfigMap
+        name: insurgency-sandstorm-gameini
+        subPath: Game.ini
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/Config/LinuxServer/Game.ini
+        readOnly: true
+      engineini:
+        enabled: true
+        type: ConfigMap
+        name: insurgency-sandstorm-engineini
+        subPath: Engine.ini
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/Config/LinuxServer/Engine.ini
+        readOnly: true
+      gameusersettingsini:
+        enabled: true
+        type: Secret
+        name: insurgency-sandstorm-gameusersettingsini
+        subPath: GameUserSettings.ini
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/Config/LinuxServer/GameUserSettings.ini
+        readOnly: true
+      adminstxt:
+        enabled: true
+        type: Secret
+        name: insurgency-sandstorm-adminstxt
+        subPath: Admins.txt
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config/Server/Admins.txt
+        readOnly: true
+      mapcycletxt:
+        enabled: true
+        type: ConfigMap
+        name: insurgency-sandstorm-mapcycletxt
+        subPath: MapCycle.txt
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config/Server/MapCycle.txt
+        readOnly: true
+      modstxt:
+        enabled: true
+        type: ConfigMap
+        name: insurgency-sandstorm-modstxt
+        subPath: Mods.txt
+        mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config/Server/Mods.txt
+        readOnly: true
+    resources:
+      requests:
+        cpu: 500m
+        memory: 2048Mi
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/config/Engine.ini
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/config/Engine.ini
@@ -0,0 +1,19 @@
+[/Script/OnlineSubsystemUtils.IpNetDriver]
+MaxInternetClientRate=100000
+MaxClientRate=100000
+NetServerMaxTickRate=120
+LanServerMaxTickRate=120
+ConnectionTimeout=10.0
+InitialConnectTimeout=20.0
+
+[/Script/Engine.Engine]
+bAllowMatureLanguage=True
+bSmoothFrameRate=True
+bUseFixedFrameRate=True
+SmoothedFrameRateRange=(LowerBound=(Type=Inclusive,Value=30.000000),UpperBound=(Type=Exclusive,Value=120.000000))
+NetClientTicksPerSecond=120
+FixedFrameRate=200.000000
+
+[/Script/Insurgency.INSWorldSettings]
+bShowBreath=True
+bRandomLightingScenario=True
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/config/Game.ini
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/config/Game.ini
@@ -0,0 +1,96 @@
+[/Script/Insurgency.INSMultiplayerMode]
+MaximumSupply=999
+InitialSupply=999
+MinimumPlayers=1
+IdleLimit=86400
+
+[/Script/Insurgency.INSCoopMode]
+MinimumEnemies=5
+MaximumEnemies=30
+
+[/WelcomeMessage/Mutators/WelcomeMessage.WelcomeMessage_C]
+WelcomeMessage=%name%, welcome to Hell.
+
+[/JoinLeaveMessage/Mutators/JoinLeaveMessage.JoinLeaveMessage_C]
+bEnableJoinMessage=True
+JoinMessage=%name% has joined the absolute fuckin' shitshow.
+bEnableLeaveMessage=True
+LeaveMessage=%name%  has ascended from hell.
+
+[/ImprovedAI/Mutators/ImprovedAI.ImprovedAI_C]
+bEnableBotSkillCfg=True
+HearAwareDistanceRadial=3000.0
+HearAwareDistanceGunshot=5000.0
+HearAwareDistanceSprintFootstep=2000.0
+HearDistanceFootstepsSprinting=2500.0
+HearDistanceFootstepsRunning=1000.0
+AttackDelayClose=0.3
+AttackDelayDistant=1.0
+ChanceSprintMultiplier=2.0
+ChangeMovingMultiplier=1.20
+AccuracyMultiplier=1.25
+SuppressionAccuracyMultiplier=0.7
+bFindCover=True
+CoverTick=5.0
+bFindCoverWhenShotAt=True
+bCustomBotNames=True
+BotNameList=Jeff,Bill Gates,Mark Zuckerburg,Susan Wojcicki,Minecraft Steve,Jeff Bezos,Megumin
+
+[/MoreAmmo/Mutators/MoreAmmo.MoreAmmo_C]
+PrimaryAmmoMultiplier=2.0
+SecondaryAmmoMultiplier=2.0
+UnderbarrelAmmoMultiplier=3.1415926535897932384626433832795028841971693993751058209749445923078164062862089986280348253421170679
+ExplosiveLauncherAmmoMultiplier=100.0
+
+[/RoundProgress/Mutator/RoundProgress.RoundProgress_C]
+StructArray=(ScenarioString="Scenario_PowerPlant_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_PowerPlant_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Ministry_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Ministry_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Outskirts_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Outskirts_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Summit_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Summit_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Crossing_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Crossing_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Precinct_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Precinct_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Refinery_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Refinery_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Farmhouse_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Farmhouse_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hideout_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hideout_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hillside_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hillside_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Town_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Town_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Tideway_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Tideway_Checkpoint_Security",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_PowerPlant_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_PowerPlant_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Ministry_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Ministry_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Outskirts_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Outskirts_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Summit_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Summit_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Crossing_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Crossing_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Precinct_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Precinct_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Refinery_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Refinery_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Farmhouse_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Farmhouse_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hideout_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hideout_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hillside_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Hillside_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Town_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Town_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Tideway_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+StructArray=(ScenarioString="Scenario_Tideway_Checkpoint_Insurgents",ObjectiveSkipIndex=(-2),StartSkipped=False)
+SkippingMessage=Skipping to checkpoint.
+CheckpointSetMessage=Checkpoint complete! You will start from here next round!
+
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/config/MapCycle.txt
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/config/MapCycle.txt
@@ -0,0 +1,95 @@
+(Scenario="Scenario_PowerPlant_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_PowerPlant_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Ministry_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Ministry_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Outskirts_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Outskirts_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Summit_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Summit_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Crossing_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Crossing_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Precinct_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Precinct_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Refinery_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Refinery_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Farmhouse_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Farmhouse_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Hideout_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Hideout_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Hillside_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Hillside_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Town_Checkpoint_Security", Lighting="Night")
+
+(Scenario="Scenario_Town_Checkpoint_Security", Lighting="Day")
+
+(Scenario="Scenario_Tideway_Checkpoint_Security",Lighting="Night")
+
+(Scenario="Scenario_Tideway_Checkpoint_Security",Lighting="Day")
+
+(Scenario="Scenario_PowerPlant_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_PowerPlant_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Ministry_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Ministry_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Outskirts_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Outskirts_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Summit_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Summit_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Crossing_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Crossing_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Precinct_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Precinct_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Refinery_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Refinery_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Farmhouse_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Farmhouse_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Hideout_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Hideout_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Hillside_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Hillside_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Town_Checkpoint_Insurgents", Lighting="Night")
+
+(Scenario="Scenario_Town_Checkpoint_Insurgents", Lighting="Day")
+
+(Scenario="Scenario_Tideway_Checkpoint_Insurgents",Lighting="Night")
+
+(Scenario="Scenario_Tideway_Checkpoint_Insurgents",Lighting="Day")
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/config/Mods.txt
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/config/Mods.txt
@@ -0,0 +1,14 @@
+135290; scale bot
+93636; improved ai
+98145; No Restricted Area
+100175; Advanced Supply Points
+760053; GreenZone
+132183; WelcomeMessage
+101966; Join Leave Message
+98145; No Restricted Area
+98373; More Ammo Mutator
+98685; Jump Shoot
+1161703; No Smoke
+164061; COOP-Mayhem
+156146; Round Progress
+125754； Allahu Akbar
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/kustomization.yaml
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/kustomization.yaml
@@ -0,0 +1,27 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - 1-namespace.yaml
+  - 2-install.yaml
+configMapGenerator:
+  - name: insurgency-sandstorm-gameini
+    files:
+      - ./config/Game.ini
+  - name: insurgency-sandstorm-engineini
+    files:
+      - ./config/Engine.ini
+  - name: insurgency-sandstorm-mapcycletxt
+    files:
+      - ./config/MapCycle.txt
+  - name: insurgency-sandstorm-modstxt
+    files:
+      - ./config/Mods.txt
+generatorOptions:
+  disableNameSuffixHash: true
+  annotations:
+    kustomize.toolkit.fluxcd.io/substitute: disabled
+labels:
+  - pairs:
+      app.kubernetes.io/name: insurgency-sandstorm
+      app.kubernetes.io/instance: insurgency-sandstorm