kube/alrest: add amano and stealthmontain k8s config

Signed-off-by: Xe Iaso <me@xeiaso.net>

8 files changed, 92 insertions, 0 deletions

diff --git a/Earthfile b/Earthfile
index c09610c..96d7de9 100644
--- a/Earthfile
+++ b/Earthfile
@@ -240,6 +240,7 @@ xedn:
 
 all:
     BUILD --platform=linux/amd64 +aerial
+    BUILD --platform=linux/amd64 +amano
     BUILD --platform=linux/amd64 +aura
     BUILD --platform=linux/amd64 +future-sight
     BUILD --platform=linux/amd64 +hdrwtch
@@ -249,6 +250,7 @@ all:
     BUILD --platform=linux/amd64 +relayd
     BUILD --platform=linux/amd64 +sanguisuga
     BUILD --platform=linux/amd64 +sapientwindex
+    BUILD --platform=linux/amd64 +stealthmountain
     BUILD --platform=linux/amd64 +todayinmarch2020
     BUILD --platform=linux/amd64 +within-website
     BUILD --platform=linux/amd64 +xedn
diff --git a/cmd/amano/diagram.jpg b/cmd/amano/diagram.jpg
new file mode 100644
index 0000000..9862125
--- /dev/null
+++ b/cmd/amano/diagram.jpg
diff --git a/kube/alrest/x/amano/deployment.yaml b/kube/alrest/x/amano/deployment.yaml
new file mode 100644
index 0000000..f5b8c1e
--- /dev/null
+++ b/kube/alrest/x/amano/deployment.yaml
@@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: amano
+spec:
+  selector:
+    matchLabels:
+      app: amano
+  template:
+    metadata:
+      labels:
+        app: amano
+    spec:
+      containers:
+      - name: amano
+        image: ghcr.io/xe/x/amano
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          runAsNonRoot: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          seccompProfile:
+            type: RuntimeDefault
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "2"
+          requests:
+            memory: "256Mi"
+            cpu: "2"
+        env:
+          - name: "NATS_URL"
+            value: "nats://nats.future-sight.svc.alrest.xeserv.us:4222"
diff --git a/kube/alrest/x/amano/kustomization.yaml b/kube/alrest/x/amano/kustomization.yaml
new file mode 100644
index 0000000..ff6d7ee
--- /dev/null
+++ b/kube/alrest/x/amano/kustomization.yaml
@@ -0,0 +1,2 @@
+resources:
+  - deployment.yaml
\ No newline at end of file
diff --git a/kube/alrest/x/kustomization.yaml b/kube/alrest/x/kustomization.yaml
index 61f10bd..567568e 100644
--- a/kube/alrest/x/kustomization.yaml
+++ b/kube/alrest/x/kustomization.yaml
@@ -1,8 +1,10 @@
 resources:
+  - amano
   - future-sight
   - hlang
   - mi
   - mimi
   - sapientwindex
+  #- stealthmountain
   - todayinmarch2020
   - within.website
\ No newline at end of file
diff --git a/kube/alrest/x/stealthmountain/1password.yaml b/kube/alrest/x/stealthmountain/1password.yaml
new file mode 100644
index 0000000..8c9788a
--- /dev/null
+++ b/kube/alrest/x/stealthmountain/1password.yaml
@@ -0,0 +1,8 @@
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: bsky-stealth-mountain
+  labels:
+    app: stealthmountain
+spec:
+  itemPath: "vaults/Kubernetes/items/Tigris creds"
\ No newline at end of file
diff --git a/kube/alrest/x/stealthmountain/deployment.yaml b/kube/alrest/x/stealthmountain/deployment.yaml
new file mode 100644
index 0000000..3e26a65
--- /dev/null
+++ b/kube/alrest/x/stealthmountain/deployment.yaml
@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: stealthmountain
+spec:
+  selector:
+    matchLabels:
+      app: stealthmountain
+  template:
+    metadata:
+      labels:
+        app: stealthmountain
+    spec:
+      containers:
+      - name: stealthmountain
+        image: ghcr.io/xe/x/stealthmountain
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          runAsNonRoot: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          seccompProfile:
+            type: RuntimeDefault
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+        env:
+          - name: "NATS_URL"
+            value: "nats://nats.future-sight.svc.alrest.xeserv.us:4222"
+        envFrom:
+          - secretRef:
+              name: bsky-stealth-mountain
diff --git a/kube/alrest/x/stealthmountain/kustomization.yaml b/kube/alrest/x/stealthmountain/kustomization.yaml
new file mode 100644
index 0000000..8d2d2c7
--- /dev/null
+++ b/kube/alrest/x/stealthmountain/kustomization.yaml
@@ -0,0 +1,3 @@
+resources:
+  - 1password.yaml
+  - deployment.yaml
\ No newline at end of file