homelab/pkg/glance.go

package glance

import (
	"danicos.dev/daniel/go-kube/pkg/kube"
	"danicos.dev/daniel/go-kube/pkg/stack"
	"danicos.dev/daniel/homelab/pkg/root"
	apps "k8s.io/api/apps/v1"
	core "k8s.io/api/core/v1"
)

var Secret = struct {
	Name     string
	TokenKey string
}{
	Name:     root.Glance.Name + "-secret",
	TokenKey: "token",
}

var Namespace = kube.Namespace(root.Glance.Name)
var meta kube.Metadata
var srv core.Service
var config_map core.ConfigMap

func init() {
	meta = kube.NewMetadata(root.Glance.Name, Namespace)
	srv = meta.Service(root.Glance.Port)
	srv.Spec.Type = core.ServiceTypeNodePort
	srv.Spec.Ports[0].NodePort = int32(root.Glance.Public.NodePort)

	config_map = kube.ConfigFromFile("glance.yml", "./config/glance/config/glance.yml", meta)
	config_map.Data["home.yml"] = string(kube.ReadFileBytes("./config/glance/config/home.yml"))
	config_map.Data["user.css"] = string(kube.ReadFileBytes("./config/glance/assets/user.css"))
}

func Stack() stack.Stack {
	kz := kube.NewKuztomizedStack(
		meta,
		map[string]any{
			"namespace": Namespace,
			"service":   srv,
			"configmap": config_map,
			// "deployment": Deployment(),
		},
	)
	return kz.Stack("glance")
}

func Deployment() apps.Deployment {
	// MY_SECRET_TOKEN=123456  ?
	// Config volume - ReadOnly?
	// Assets volume - ReadOnly?
	// Mount /etc/localtime (ReadOnly)
	podSpec := core.PodSpec{
		Containers: []core.Container{{
			Name:  root.Glance.Name,
			Image: root.Glance.Image,
			Env:   kube.NewEnvVarWithSecret(nil, nil, Secret.Name),
		}},
		Volumes: []core.Volume{
			kube.NewVolumeFrom(kube.VolumeSourceConfigMap, "config", config_map.Name),
		},
	}
	return kube.NewDeployment(meta, podSpec)
}