stream loadbalander added (needs testing)

3 files changed, 179 insertions, 0 deletions

diff --git a/templates/default/kubernetes/stream-lb-cm.yml.j2 b/templates/default/kubernetes/stream-lb-cm.yml.j2
new file mode 100644
index 0000000..6e1e40d
--- /dev/null
+++ b/templates/default/kubernetes/stream-lb-cm.yml.j2
@@ -0,0 +1,76 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: {{ deploy.namespace }}
+  name: stream-lb-{{ deploy.stream }}
+  labels:
+    app: nginx
+    type: stream-lb
+    stream: {{ deploy.stream }}
+data:
+  nginx.conf: |
+    worker_processes 4;
+    pid /srv/nginx.pid;
+    error_log /dev/stderr notice;
+
+    events {
+      worker_connections 768;
+      # multi_accept on;
+    }
+
+    http {
+      sendfile on;
+      tcp_nopush on;
+      tcp_nodelay on;
+      keepalive_timeout 65;
+      types_hash_max_size 2048;
+
+      server_names_hash_bucket_size 64;
+
+      include /etc/nginx/mime.types;
+      default_type application/octet-stream;
+
+      access_log /dev/null;
+
+      upstream streamers {
+{% for streamer in deploy.streamers %}
+        server localhost:{{ 10000 + loop.index }};
+{% endfor %}
+      }
+
+      server {
+        listen {{ desc.streams[deploy.stream].port }} ssl default_server;
+        listen [::]:{{ desc.streams[deploy.stream].port }} ssl default_server;
+
+        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+        ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AES:!ADH:!AECDH:!MD5;
+        ssl_prefer_server_ciphers on;
+
+        ssl_session_cache shared:SSL:10m;
+        ssl_session_timeout 10m;
+        ssl_session_tickets off;
+
+        ssl_certificate /srv/acme/fullchain;
+        ssl_certificate_key /srv/acme/privkey;
+
+        server_name _;
+
+        root /srv/www;
+
+        location / {
+          proxy_pass http://streamers;
+        }
+      }
+
+{% for streamer in deploy.streamers %}
+      server {
+        listen localhost:{{ 10000 + loop.index }};
+
+        expires -1s;
+        add_header Cache-Control "no-store,must-revalidate,max-age=0";
+        location / {
+          return 302 https://{{ streamer }}:{{ desc.streams[deploy.stream].port }}$request_uri;
+        }
+      }
+{% endfor %}
+    }
diff --git a/templates/default/kubernetes/stream-lb-deploy.yml.j2 b/templates/default/kubernetes/stream-lb-deploy.yml.j2
new file mode 100644
index 0000000..33c8467
--- /dev/null
+++ b/templates/default/kubernetes/stream-lb-deploy.yml.j2
@@ -0,0 +1,87 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: {{ deploy.namespace }}
+  name: stream-lb-{{ deploy.stream }}
+  labels:
+    app: nginx
+    type: stream-lb
+    stream: {{ deploy.stream }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx
+      type: stream-lb
+      stream: {{ deploy.stream }}
+  strategy:
+    type: Recreate
+  revisionHistoryLimit: 5
+  template:
+    metadata:
+      labels:
+        app: nginx
+        type: stream-lb
+        stream: {{ deploy.stream }}
+    spec:
+      nodeName: emc-00  ## TODO: hardcoded value
+      securityContext:
+        runAsUser: 998
+        fsGroup: 998
+      hostNetwork: true
+      dnsPolicy: ClusterFirstWithHostNet
+      initContainers:
+      - name: copy-certificates
+        image: busybox
+        command: ['sh', '-c', 'chmod 0750 /srv/acme && cp /var/lib/acme/live/{{ desc.streams[deploy.stream]['lb-hostname'] }}/* /srv/acme && chown -R 998 /srv/acme']
+        securityContext:
+          runAsUser: 0
+        volumeMounts:
+        - name: nginx-cert
+          mountPath: /srv/acme
+        - name: acme-lib
+          mountPath: /var/lib/acme
+      containers:
+      - name: nginx
+        image: spreadspace/nginx-streaming:{{ desc.globals.deployment.parameter.nginx_image_version }}
+        imagePullPolicy: Always
+        args:
+        - nginx
+        - -c
+        - /srv/config/nginx.conf
+        - -g
+        - "daemon off;"
+        volumeMounts:
+        - name: home
+          mountPath: /srv
+        - name: nginx-lib
+          mountPath: /var/lib/nginx
+        - name: nginx-config
+          mountPath: /srv/config
+        - name: www
+          mountPath: /srv/www
+        - name: nginx-cert
+          mountPath: /srv/acme
+        - name: acme-lib
+          mountPath: /var/lib/acme
+      volumes:
+      - name: home
+        emptyDir:
+          medium: Memory
+      - name: nginx-lib
+        emptyDir:
+          medium: Memory
+      - name: nginx-config
+        configMap:
+          name: stream-lb-{{ deploy.stream }}
+      - name: www
+        emptyDir:
+          medium: Memory
+      - name: nginx-cert
+        emptyDir:
+          medium: Memory
+      - name: acme-lib
+        hostPath:
+          type: Directory
+          path: /var/lib/acme
+          readOnly: yes
diff --git a/templates/default/kubernetes/stream-lb-svc.yml.j2 b/templates/default/kubernetes/stream-lb-svc.yml.j2
new file mode 100644
index 0000000..fcab5bd
--- /dev/null
+++ b/templates/default/kubernetes/stream-lb-svc.yml.j2
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: {{ deploy.namespace }}
+  name: stream-lb-{{ deploy.stream }}
+  labels:
+    app: nginx
+    type: stream-lb
+    stream: {{ deploy.stream }}
+spec:
+  selector:
+    app: nginx
+    type: stream-lb
+    stream: {{ deploy.stream }}
+  ports:
+  - port: {{ desc.streams[deploy.stream].port }}