Used www hostnames for internal routes

charts/argocd/values.yaml

@@ -8,7 +8,6 @@ route:
   gatewayName: public-gateway
   gatewayNamespace: apps
   hostnames:
-    - symcrest.com
     - www.symcrest.com
   serviceName: argocd-server
   servicePort: 80

charts/forgejo/values.yaml

@@ -16,7 +16,6 @@ route:
   gatewayName: public-gateway
   gatewayNamespace: apps
   hostnames:
-    - symcrest.com
     - www.symcrest.com
   basePath: /internal/dev/forgejo
   serviceName: forgejo

charts/longhorn/values.yaml

@@ -9,7 +9,6 @@ route:
   gatewayName: public-gateway
   gatewayNamespace: apps
   hostnames:
-    - symcrest.com
     - www.symcrest.com
   serviceName: longhorn-frontend
   servicePort: 80

charts/openproject/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: openproject
+description: Symcrest OpenProject wrapper chart
+type: application
+version: 0.1.0
+appVersion: "17.5.1"

charts/openproject/templates/httproute.yaml

@@ -0,0 +1,24 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: openproject
+  namespace: {{ .Release.Namespace }}
+spec:
+  parentRefs:
+    - name: {{ .Values.gateway.name }}
+      namespace: {{ .Values.gateway.namespace }}
+
+  hostnames:
+{{- range .Values.hostnames }}
+    - {{ . | quote }}
+{{- end }}
+
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: {{ .Values.basePath | quote }}
+
+      backendRefs:
+        - name: {{ .Values.service.name }}
+          port: {{ .Values.service.port }}

charts/openproject/upstream-values.yaml

@@ -0,0 +1,48 @@
+openproject:
+  https: true
+  host: www.symcrest.com
+  railsRelativeUrlRoot: /internal/dev/openproject
+
+  extraEnvVarsSecret: openproject-postgres-secret
+
+  useTmpVolumes: true
+  tmpVolumesStorage: "5Gi"
+  tmpVolumesStorageClassName: longhorn
+  tmpVolumesPermissionFix: true
+
+  realtime_collaboration:
+    enabled: false
+
+  admin_user:
+    password: "TempPass123"
+    password_reset: "true"
+    name: "IT Admin"
+    mail: "it.admin@symcrest.com"
+
+hocuspocus:
+  enabled: false
+
+ingress:
+  enabled: false
+
+nodeSelector:
+  workload: app
+
+persistence:
+  enabled: true
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce
+  size: 1Gi
+
+postgresql:
+  bundled: false
+  connection:
+    host: postgres.database.svc.cluster.local
+    port: 5432
+  auth:
+    existingSecret: openproject-postgres-secret
+    secretKeys:
+      userPasswordKey: password
+    username: openproject
+    database: openproject

charts/openproject/values.yaml

@@ -0,0 +1,9 @@
+hostnames:
+  - www.symcrest.com
+basePath: /internal/dev/openproject
+gateway:
+  name: public-gateway
+  namespace: apps
+service:
+  name: openproject
+  port: 8080

charts/pgadmin/values.yaml

@@ -5,7 +5,7 @@ image:
   tag: "9.15"
 
 auth:
-  email: arvind.prabhakar@symcrest.com
+  email: it.admin@symcrest.com
   secret: postgres-secret
 
 storage:
@@ -20,7 +20,6 @@ route:
   gatewayName: public-gateway
   gatewayNamespace: apps
   hostnames:
-    - symcrest.com
     - www.symcrest.com
   basePath: /internal/dev/pgadmin
   serviceName: pgadmin

rendered/argocd/argocd-httproute.yaml

@@ -0,0 +1,21 @@
+---
+# Source: argocd-wrapper/templates/httproute.yaml
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: argocd
+  namespace: argocd
+spec:
+  parentRefs:
+    - name: public-gateway
+      namespace: apps
+  hostnames:
+    - "www.symcrest.com"
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/internal/ops/argocd"
+      backendRefs:
+        - name: argocd-server
+          port: 80

rendered/argocd/argocd.yaml

@@ -10,7 +10,6 @@ spec:
     - name: public-gateway
       namespace: apps
   hostnames:
-    - "symcrest.com"
     - "www.symcrest.com"
   rules:
     - matches:

rendered/forgejo/forgejo-httproute.yaml

@@ -0,0 +1,123 @@
+---
+# Source: forgejo/templates/pvc.yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: forgejo-data
+  namespace: forgejo
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: "longhorn"
+  resources:
+    requests:
+      storage: "20Gi"
+---
+# Source: forgejo/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: forgejo
+  namespace: forgejo
+spec:
+  type: ClusterIP
+  selector:
+    app: forgejo
+  ports:
+    - name: http
+      port: 3000
+      targetPort: 3000
+    - name: ssh
+      port: 22
+      targetPort: 22
+---
+# Source: forgejo/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: forgejo
+  namespace: forgejo
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: forgejo
+  template:
+    metadata:
+      labels:
+        app: forgejo
+    spec:
+      nodeSelector:
+        workload: app
+      containers:
+        - name: forgejo
+          image: "codeberg.org/forgejo/forgejo:15.0.3"
+          ports:
+            - name: http
+              containerPort: 3000
+            - name: ssh
+              containerPort: 22
+          env:
+            - name: FORGEJO__server__ROOT_URL
+              value: "https://www.symcrest.com/internal/dev/forgejo/"
+            - name: FORGEJO__server__HTTP_PORT
+              value: "3000"
+            - name: FORGEJO__database__DB_TYPE
+              value: "postgres"
+            - name: FORGEJO__database__HOST
+              value: "postgres.database.svc.cluster.local:5432"
+            - name: FORGEJO__database__NAME
+              value: "forgejo"
+            - name: FORGEJO__database__USER
+              value: "forgejo"
+            - name: FORGEJO__database__PASSWD
+              valueFrom:
+                secretKeyRef:
+                  name: forgejo-db-secret
+                  key: FORGEJO_DB_PASSWORD
+          volumeMounts:
+            - name: forgejo-data
+              mountPath: /data
+      volumes:
+        - name: forgejo-data
+          persistentVolumeClaim:
+            claimName: forgejo-data
+---
+# Source: forgejo/templates/httproute.yaml
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: forgejo
+  namespace: forgejo
+spec:
+  parentRefs:
+    - name: public-gateway
+      namespace: apps
+  hostnames:
+    - "www.symcrest.com"
+  rules:
+    - matches:
+        - path:
+            type: Exact
+            value: "/internal/dev/forgejo"
+      filters:
+        - type: RequestRedirect
+          requestRedirect:
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: "/internal/dev/forgejo/"
+            statusCode: 301
+
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/internal/dev/forgejo/"
+      filters:
+        - type: URLRewrite
+          urlRewrite:
+            path:
+              type: ReplacePrefixMatch
+              replacePrefixMatch: /
+      backendRefs:
+        - name: forgejo
+          port: 3000

rendered/forgejo/forgejo.yaml

@@ -94,7 +94,6 @@ spec:
     - name: public-gateway
       namespace: apps
   hostnames:
-    - "symcrest.com"
     - "www.symcrest.com"
   rules:
     - matches:

rendered/longhorn/longhorn-httproute.yaml

@@ -0,0 +1,39 @@
+---
+# Source: longhorn-wrapper/templates/httproute.yaml
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: longhorn
+  namespace: longhorn-system
+spec:
+  parentRefs:
+    - name: public-gateway
+      namespace: apps
+  hostnames:
+    - "www.symcrest.com"
+  rules:
+    - matches:
+        - path:
+            type: Exact
+            value: "/internal/ops/longhorn"
+      filters:
+        - type: RequestRedirect
+          requestRedirect:
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: "/internal/ops/longhorn/"
+            statusCode: 301
+
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/internal/ops/longhorn/"
+      filters:
+        - type: URLRewrite
+          urlRewrite:
+            path:
+              type: ReplacePrefixMatch
+              replacePrefixMatch: "/"
+      backendRefs:
+        - name: longhorn-frontend
+          port: 80

rendered/longhorn/longhorn.yaml

@@ -10,7 +10,6 @@ spec:
     - name: public-gateway
       namespace: apps
   hostnames:
-    - "symcrest.com"
     - "www.symcrest.com"
   rules:
     - matches:

rendered/openproject/openproject-httproute.yaml

@@ -0,0 +1,24 @@
+---
+# Source: openproject/templates/httproute.yaml
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: openproject
+  namespace: openproject
+spec:
+  parentRefs:
+    - name: public-gateway
+      namespace: apps
+
+  hostnames:
+    - "www.symcrest.com"
+
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/internal/dev/openproject"
+
+      backendRefs:
+        - name: openproject
+          port: 8080

rendered/openproject/openproject.yaml

@@ -0,0 +1,24 @@
+---
+# Source: openproject/templates/httproute.yaml
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: openproject
+  namespace: openproject
+spec:
+  parentRefs:
+    - name: public-gateway
+      namespace: apps
+
+  hostnames:
+    - "www.symcrest.com"
+
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/internal/dev/openproject"
+
+      backendRefs:
+        - name: openproject
+          port: 8080

rendered/pgadmin/pgadmin-httproute.yaml

@@ -0,0 +1,106 @@
+---
+# Source: pgadmin/templates/pvc.yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pgadmin-data
+  namespace: pgadmin
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: "longhorn"
+  resources:
+    requests:
+      storage: "5Gi"
+---
+# Source: pgadmin/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: pgadmin
+  namespace: pgadmin
+spec:
+  type: ClusterIP
+  selector:
+    app: pgadmin
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+---
+# Source: pgadmin/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pgadmin
+  namespace: pgadmin
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: pgadmin
+  template:
+    metadata:
+      labels:
+        app: pgadmin
+    spec:
+      nodeSelector:
+        workload: app
+      securityContext:
+        fsGroup: 5050
+        fsGroupChangePolicy: "OnRootMismatch"
+      containers:
+        - name: pgadmin
+          image: "dpage/pgadmin4:9.15"
+          securityContext:
+            runAsUser: 5050
+            runAsGroup: 5050
+          ports:
+            - containerPort: 80
+              name: http
+          envFrom:
+            - secretRef:
+                name: pgadmin-secret
+          env:
+            - name: SCRIPT_NAME
+              value: "/internal/dev/pgadmin"
+          volumeMounts:
+            - name: pgadmin-data
+              mountPath: /var/lib/pgadmin
+      volumes:
+        - name: pgadmin-data
+          persistentVolumeClaim:
+            claimName: pgadmin-data
+---
+# Source: pgadmin/templates/httproute.yaml
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: pgadmin
+  namespace: pgadmin
+spec:
+  parentRefs:
+    - name: public-gateway
+      namespace: apps
+  hostnames:
+    - "www.symcrest.com"
+  rules:
+    - matches:
+        - path:
+            type: Exact
+            value: "/internal/dev/pgadmin"
+      filters:
+        - type: RequestRedirect
+          requestRedirect:
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: "/internal/dev/pgadmin/"
+            statusCode: 301
+
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/internal/dev/pgadmin/"
+      backendRefs:
+        - name: pgadmin
+          port: 80

rendered/pgadmin/pgadmin.yaml

@@ -83,7 +83,6 @@ spec:
     - name: public-gateway
       namespace: apps
   hostnames:
-    - "symcrest.com"
     - "www.symcrest.com"
   rules:
     - matches: