Will Anderson
afe01d2ad9
Move gitea, github-runner, neuron, cloudflared, ollama, verdaccio, devpi, registry, and registry-ui deployments+services to apps/*.yaml so Argo CD manages the app layer. Terraform retains namespaces, PVCs, ConfigMaps, Secrets, and Ingresses. New Secrets in Terraform: - kubernetes_secret.github_runner_secret (ci/github-runner-secret) - kubernetes_secret.cloudflared_secret (neuron/cloudflared-secret) Hardcoded service names in ingress.tf and neuron.tf to remove dependency on removed kubernetes_service resources.
29 lines
627 B
Terraform
29 lines
627 B
Terraform
# Local Docker Registry — push images locally, no DockerHub
|
|
resource "kubernetes_namespace" "registry" {
|
|
metadata {
|
|
name = "registry"
|
|
labels = {
|
|
managed-by = "terraform"
|
|
tier = "infrastructure"
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_persistent_volume_claim" "registry_data" {
|
|
metadata {
|
|
name = "registry-data"
|
|
namespace = kubernetes_namespace.registry.metadata[0].name
|
|
}
|
|
|
|
spec {
|
|
access_modes = ["ReadWriteOnce"]
|
|
resources {
|
|
requests = {
|
|
storage = "50Gi"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
# Deployments + Services managed by Argo CD — see servers/legion/apps/registry.yaml
|