prole/deploy/opentofu/k3s/manifests/knoe/prole-svc-kong-configmap.yaml

88 lines
2.7 KiB
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: prole-svc-kong-config
namespace: knoe-system
annotations:
argocd.argoproj.io/sync-wave: "0"
data:
kong.yml: |
_format_version: "3.0"
_transform: true
services:
# ── svc.prole.org — internal tools ───────────────────────────────────────
- name: prole-service
url: http://prole-svc.knoe-system.svc.cluster.local:8080
routes:
- name: prole-k3s-kubeconfig
hosts:
- svc.prole.org
paths:
- /k3s/kube_config.sh
strip_path: false
- name: db-manager
url: http://knoe-db-manager.knoe-db.svc.cluster.local:80
routes:
- name: backup-route
hosts:
- svc.prole.org
paths:
- /backup
strip_path: false
- name: grafana
url: http://kps-grafana.monitoring.svc.cluster.local:80
routes:
- name: grafana-root
hosts:
- svc.prole.org
paths:
- /
strip_path: false
# ── api.prole.org / db.prole.org / supabase.prole.org → Supabase Kong ──
# Supabase Kong handles internal routing: /auth/, /rest/, /storage/,
# /realtime/, /functions/, and / (Studio UI).
- name: supabase-kong
url: http://supabase-kong.supabase.svc.cluster.local:8000
routes:
- name: supabase-api
hosts:
- api.prole.org
paths:
- /
strip_path: false
preserve_host: true
- name: supabase-db
hosts:
- db.prole.org
paths:
- /
strip_path: false
preserve_host: true
- name: supabase-studio
hosts:
- supabase.prole.org
paths:
- /
strip_path: false
preserve_host: true
# ── git.prole.org → GitLab (Workhorse + Puma on :8080) ──────────────────
# Routes HTTP/HTTPS git traffic through prole-svc-kong to the GitLab
# webservice. GitLab's own nginx ingress is blocked by hostPort conflicts
# with traefik svclb; this bypasses it cleanly.
# SSH git access (port 22) is handled separately by gitlab-gitlab-shell.
- name: gitlab-web
url: http://gitlab-webservice-default.gitlab.svc.cluster.local:8080
routes:
- name: gitlab-root
hosts:
- git.prole.org
paths:
- /
strip_path: false
preserve_host: true