infra/terraform: add k8s module file for my portfolio

- added k8s module file for my portfolio manifest

kubernetes/README.md

@@ -213,7 +213,7 @@ registry.
 kubectl create namespace my-portfolio
 
 source .env
-kubectl create secret docker-registry my-registry-secret \
+kubectl create secret docker-registry docker-registry-credentials \
   --docker-server="$DOCKER_REGISTRY_HOST" \
   --docker-username="$DOCKER_USER" \
   --docker-password="$DOCKER_PASSWORD" \
@@ -611,9 +611,10 @@ envsubst < gitea/configMap.yaml | kubectl apply -n gitea -f -
 
 helm upgrade --install gitea gitea-charts/gitea -f gitea/values.yaml \
   --namespace gitea \
+  --version 10.0.0 \
   --atomic \
   --set ingress.hosts[0].host=$GITEA_HOST \
-  --set ingress.tls[0].hosts[0]=$DNSNAME  \
+  --set ingress.tls[0].hosts[0]=$GITEA_HOST  \
   --set gitea.admin.username=$GITEA_USER \
   --set gitea.admin.password=$GITEA_PASSWORD \
   --set gitea.admin.email=$GITEA_EMAIL \

kubernetes/gitea/values.yaml

@@ -15,6 +15,7 @@ gitea:
     email: email
 
 image:
+  registry: ghcr.io
   repository: gitea
   tag: 1.23.7
 
@@ -45,13 +46,17 @@ resources:
 
 ingress:
   enabled: true
+  annotations:
+    kubernetes.io/ingress.class: traefik
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    cert-manager.io/cluster-issuer: "acme-issuer"
   hosts:
     - host: git.example.com
       paths:
         - path: /
           pathType: Prefix
   tls:
-    - secretName: wildcard-cert-secret
+    - secretName: gitea-tls-cert
       hosts:
         - "*.example.com"
 

kubernetes/my-portfolio/portfolioManifest.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: portfolio-app
+  namespace: my-portfolio
   labels:
     app: portfolio-app
 spec:
@@ -15,7 +16,7 @@ spec:
         app: portfolio-app
     spec:
       imagePullSecrets:
-        - name: my-registry-secret
+        - name: docker-registry-credentials
       containers:
         - name: portfolio-app
           image: "${DOCKER_REGISTRY_HOST}/taqi/portfolio/my-portfolio-app:latest"
@@ -29,6 +30,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: portfolio-app-svc
+  namespace: my-portfolio
 spec:
   type: ClusterIP
   ports:
@@ -42,6 +44,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: portfolio
+  namespace: my-portfolio
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
     cert-manager.io/cluster-issuer: "acme-issuer"