gitlab first

.gitignore

@@ -1,2 +1,4 @@
 kargo
 kubectl
+gitlab/ci/kuectl
+gitlab/ci/.git

registry/htpasswd

@@ -0,0 +1,2 @@
+root:$2y$05$wSD6amVPgRN4/dhdWTXuue0NV.folVC90gZs/7tAWBn7/mVoDaDdO
+

registry/registry-deployment.yaml

@@ -0,0 +1,58 @@
+apiVersion: v1
+kind: ReplicationController
+metadata:
+  name: registry-v0
+  namespace: kube-system
+  labels:
+    k8s-app: registry
+    version: v0
+#    kubernetes.io/cluster-service: "true"
+spec:
+  replicas: 1
+  selector:
+    k8s-app: registry
+    version: v0
+  template:
+    metadata:
+      labels:
+        k8s-app: registry
+        version: v0
+#        kubernetes.io/cluster-service: "true"
+    spec:
+      containers:
+      - name: registry
+        image: docker.io/registry:2
+        resources:
+          # keep request = limit to keep this container in guaranteed class
+          limits:
+            cpu: 100m
+            memory: 100Mi
+          requests:
+            cpu: 100m
+            memory: 100Mi
+        env:
+        - name: REGISTRY_HTTP_ADDR
+          value: :5000
+        - name: REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY
+          value: /var/lib/registry
+        #- name: REGISTRY_AUTH_HTPASSWD_REALM
+          #value: basic_realm
+        #- name: REGISTRY_AUTH_HTPASSWD_PATH
+          #value: /auth/htpasswd
+        volumeMounts:
+        - name: image-store
+          mountPath: /var/lib/registry
+        #- name: auth-dir
+          #mountPath: /auth
+        ports:
+        - containerPort: 5000
+          name: registry
+          protocol: TCP
+      volumes:
+      - name: image-store
+        emptyDir: {}
+        #hostPath:
+          #path:/srv/kube-registry
+      #- name: auth-dir
+        #secret:
+          #secretName: registry-auth-secret

registry/registry-service.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: registry
+  namespace: kube-system
+  labels:
+    k8s-app: registry
+    kubernetes.io/cluster-service: "true"
+    kubernetes.io/name: "Registry"
+spec:
+  type: NodePort
+  selector:
+    k8s-app: registry
+  ports:
+  - name: registry
+    port: 5000
+    nodePort: 30550
+    protocol: TCP

traefik/gitlab-ingress.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: gitlab
+  namespace: gitlab
+  annotations:
+    kubernetes.io/ingress.class: "traefik"
+spec:
+  rules:
+  - host: gitlab.satoshi.tech
+    http:
+      paths:
+      - backend:
+          serviceName: gitlab
+          servicePort: 80

traefik/kube-system-ingress.yaml

@@ -20,4 +20,9 @@ spec:
           - backend:
               serviceName: traefik-console
               servicePort: 8080
-
+    - host: registry.satoshi.tech
+      http:
+        paths:
+          - backend:
+              serviceName: registry
+              servicePort: 5000