mirror of
https://github.com/ghndrx/k8s-game-2048.git
synced 2026-02-10 06:45:07 +00:00
63b53dfc1b
- Replace SSH/kubectl deployment with secure webhook-based approach - Add comprehensive webhook handler with HMAC signature verification - Support blue-green deployment strategy for production - Implement auto-promotion pipeline: dev → staging → prod - Add health checks using canonical Knative domains only - Include complete deployment documentation and setup scripts Changes: - Updated deploy-dev.yml, deploy-staging.yml, deploy-prod.yml workflows - Added webhook handler Python script with Flask API - Created Kubernetes manifests for webhook system deployment - Added ingress and service configuration for external access - Created setup script for automated webhook system installation - Documented complete webhook-based deployment guide Perfect for k3s clusters behind NAT without direct API access.
43 lines
1.0 KiB
YAML
43 lines
1.0 KiB
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: webhook-handler-external
|
|
namespace: webhook-system
|
|
labels:
|
|
app: webhook-handler
|
|
spec:
|
|
selector:
|
|
app: webhook-handler
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
targetPort: 8080
|
|
protocol: TCP
|
|
type: LoadBalancer # Change to NodePort if LoadBalancer is not available
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: webhook-handler-ingress
|
|
namespace: webhook-system
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod" # Adjust to your cert issuer
|
|
spec:
|
|
tls:
|
|
- hosts:
|
|
- webhook.yourdomain.com # Replace with your actual domain
|
|
secretName: webhook-tls
|
|
rules:
|
|
- host: webhook.yourdomain.com # Replace with your actual domain
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: webhook-handler
|
|
port:
|
|
number: 80
|