auth
2015-06-29
auth/replication-controllers/authd.json
Add kubernetes definitions. Define a replication controller that will spin up authd servers (using Ducky right now--other instances should rename the ducky parts appropriately). Also, my understanding of which labels go where may be shaky, which is probably evidenced by the fact that all of these things share the same lables. _Whatever_. It also hooks the generated pods up to the JWT secret volume, so they can properly read the JWT secret. Also, created a LoadBalancer Service that will route traffic to the pods created by the Replication Controller.
| paddy@176 | 1 { |
| paddy@176 | 2 "kind":"ReplicationController", |
| paddy@176 | 3 "apiVersion":"v1", |
| paddy@176 | 4 "metadata":{ |
| paddy@176 | 5 "name": "ducky-authd", |
| paddy@176 | 6 "labels": { |
| paddy@176 | 7 "name": "authd", |
| paddy@176 | 8 "context": "ducky", |
| paddy@176 | 9 "repo": "secondbit--authd", |
| paddy@176 | 10 "role": "auth" |
| paddy@176 | 11 } |
| paddy@176 | 12 }, |
| paddy@176 | 13 "spec":{ |
| paddy@176 | 14 "replicas":1, |
| paddy@176 | 15 "selector":{ |
| paddy@176 | 16 "context": "ducky", |
| paddy@176 | 17 "name":"authd", |
| paddy@176 | 18 "repo": "secondbit--authd", |
| paddy@176 | 19 "role": "auth" |
| paddy@176 | 20 }, |
| paddy@176 | 21 "template":{ |
| paddy@176 | 22 "metadata":{ |
| paddy@176 | 23 "labels":{ |
| paddy@176 | 24 "context": "ducky", |
| paddy@176 | 25 "name":"authd", |
| paddy@176 | 26 "repo": "secondbit--authd", |
| paddy@176 | 27 "role": "auth" |
| paddy@176 | 28 } |
| paddy@176 | 29 }, |
| paddy@176 | 30 "spec":{ |
| paddy@176 | 31 "volumes": [ |
| paddy@176 | 32 { |
| paddy@176 | 33 "name": "jwt-volume", |
| paddy@176 | 34 "secret": { |
| paddy@176 | 35 "secretName": "jwt" |
| paddy@176 | 36 } |
| paddy@176 | 37 } |
| paddy@176 | 38 ], |
| paddy@176 | 39 "containers":[ |
| paddy@176 | 40 { |
| paddy@176 | 41 "name":"ducky-authd", |
| paddy@176 | 42 "image": "secondbit/authd:latest", |
| paddy@176 | 43 "volumeMounts": [ |
| paddy@176 | 44 { |
| paddy@176 | 45 "name": "jwt-volume", |
| paddy@176 | 46 "readOnly": true, |
| paddy@176 | 47 "mountPath": "/private/kubernetes/jwt" |
| paddy@176 | 48 } |
| paddy@176 | 49 ], |
| paddy@176 | 50 "ports":[ |
| paddy@176 | 51 { |
| paddy@176 | 52 "name": "http", |
| paddy@176 | 53 "containerPort":9000 |
| paddy@176 | 54 } |
| paddy@176 | 55 ] |
| paddy@176 | 56 } |
| paddy@176 | 57 ] |
| paddy@176 | 58 } |
| paddy@176 | 59 } |
| paddy@176 | 60 } |
| paddy@176 | 61 } |