argocd

infrastructure/cert-manager/duckdns-issuer.yaml

@@ -0,0 +1,18 @@
+# infrastructure/cert-manager/duckdns-issuer.yaml
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: duckdns
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: [email protected]
+    solvers:
+    - dns01:
+        webhook:
+          groupName: acme.zacharysegnbauer.com   # webhook-specifiek — check repo
+          solverName: duckdns
+          config:
+            secretName: duckdns-token
+            subdomain: zb-kw
+            subdomains: "*"   # of wildcard via token-methode

infrastructure/storage/nfs-provisioner.yaml

@@ -0,0 +1,37 @@
+# infrastructure/storage/nfs-provisioner.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nfs-subdir-external-provisioner
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels: {app: nfs-subdir-external-provisioner}
+  template:
+    metadata:
+      labels: {app: nfs-subdir-external-provisioner}
+    spec:
+      serviceAccountName: nfs-subdir-external-provisioner
+      containers:
+      - name: nfs-subdir-external-provisioner
+        image: registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.7.0
+        volumeMounts: [{name: nfs, mountPath: /persistentvolumes}]
+        env:
+        - {name: PROVISIONER_NAME, value: k8s-sigs.io/nfs-subdir}
+        - {name: NFS_SERVER, value: 192.168.2.64}     # <-- Proxmox-host IP
+        - {name: NFS_PATH, value: /zfs-pool/data/k3s-storage}
+      volumes:
+      - name: nfs
+        nfs: {server: 192.168.2.64, path: /zfs-pool/data/k3s-storage}
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: nfs-client
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
+provisioner: k8s-sigs.io/nfs-subdir
+parameters:
+  archiveOnDelete: "true"
+reclaimPolicy: Retain
+volumeBindingMode: Immediate