ppusher v2

infra/overlays/upc-dev/kustomization.yaml

@@ -4,7 +4,6 @@ resources:
 - ../../base
 - vaultwarden-postgresql
 - vaultwarden
-- passwordpusher-postgresql
 - passwordpusher
 
 # No patches needed — base already has "upc-dev" paths

infra/overlays/upc-dev/passwordpusher-postgresql/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- passwordpusher-postgresql.yaml

infra/overlays/upc-dev/passwordpusher-postgresql/passwordpusher-postgresql.yaml

@@ -1,46 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: passwordpusher
----
-
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: passwordpusher-postgresql
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-  labels:
-    app.kubernetes.io/name: passwordpusher-postgresql
-    app.kubernetes.io/part-of: security
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    repoURL: ssh://git@git.forteapps.net:2222/Forte/launchpad.git
-    targetRevision: HEAD
-    path: infra/overlays/upc-dev/passwordpusher-postgresql/resources
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: passwordpusher
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-
-  ignoreDifferences:
-  - group: apps
-    kind: StatefulSet
-    jsonPointers:
-    - /spec/volumeClaimTemplates

infra/overlays/upc-dev/passwordpusher-postgresql/resources/passwordpusher-db-secret-sealed.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: passwordpusher-db-creds
-  namespace: passwordpusher
-spec:
-  encryptedData:
-    DATABASE_URL: AgBeCVhdJoq18FFbP/8CUFFHBu3cUHisStmqeU3stH33qRgm0sh1Agw87QaiECBlKGp9yEjDVgQEjU/h9vEqs5L13vnzTvzmzEIMy23m1nWEyX6pY06O/ISDD6AVeW73SX6ctgZ4wabv8zZhEQ/GiKTLq8indTrNglINpItUKdjpZ5IhJWNScOkykZdIN/OyJxxzKQ5fM48ZVfL8HnTNQ+sqEJQ/P4CEHVwJQaEuIKsS+P1PKNmOxzI7IB7PegkZwORMKA83r1oufiV5q+/wY2eMujt/PkZxkokj9jdI9ATGwXfOVgPR16BXrKRIKO2AwObL1ter+Y0LnNGxl9gAz8q65b4KHdM//sKSscLo9rPWKq0R0y4octiC1FlQEvsbMZnNntDLR1vBiqRUz5YaoKcEH6nlLpubCrBpIve8f5Ty3w2YUk7k4dpQzITgZqpJirmw5RAY9OIQQldB8NHjfmKkTtlHxW1Bif/yo+XqCKX4+1xh4nbWb6z2VQtUeQHm++ITZokxAV5as/EEZyEfCfqLbQbQkk5xuPpc3B6VjyGNbAIyQQz3Ktx5t2bqa/qf2YQQTVMZaBijHV6jaK3YzyWyheefZAqliF3xUY8mm2zrOAK4+JaKbRKSQzvCzpYtcwxVO5hCV0Wki4qbMXCWbLV0SmUgiJeL/SC/iXSPBmdQIw2P8Pao1gPzhtJl/rGzdw+Nx0VtYeCID8PlsvjUO3oiv3wYFVE/Xb9oYkoQnadOrnBmUNoXATvPLb6bN/cxlZ6c5bDAReY5M5k4Im9XMWDUDiH/9bIk+V8C
-    pgpassword: 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
-    pgusername: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: passwordpusher-db-creds
-      namespace: passwordpusher

infra/overlays/upc-dev/passwordpusher-postgresql/resources/passwordpusher-smtp-secret-sealed.yaml

@@ -1,16 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: passwordpusher-smtp-creds
-  namespace: passwordpusher
-spec:
-  encryptedData:
-    PWP__MAIL_SMTP_PASSWORD: AgBgRYGOS6O5u6WDXxfqkLsVClufJe8O0K3/NBWKEnwKFKd/yeQVnkB/sd2apIFADK6auge+G5uFv9TejWJuqkU3QHbkvmnjnMtinRkt/lh0GrrCygmvzvwTQKCXefeqWHT5yvGtN0z6mLP73yOLoJmAMnZk9/QGHuw9jfuLEDREZ3cSrdYAAIWhospSPpvau2UNN2/yanjhmH0Yux2fZVkwKtDcS6YHFtL+s4VR7wcB/cvMaCX4vSezMtyQJhgHcmFLNHnNjjVdMEQVGMtrZ7XocbWJ0ZkvKotkuOFf/XMq5AM9ZVgaJB9di39JLweqpsfGVQJftgGW/f/edDSlbiOTjDO2cM93xY9OD9T2kts5MkeX1jLD+Q+V0OXL7+nor1jAfv/CwZ5sBibnQFKYaQpCRCw4c4pYX73VjbRsEcTHXJyfUpTJdlw8Jd3yPPL1Uqb6ga5xxUO7YsgfdH4HZYWuLR/x8Pk1Ne/qpctzHZcUkRto6MKPhkK1IW83qSJPGT3wNHgYcx6uMW9f9L/ox7k00GGWZ3Pj79khv9NJ8PXO0thsTuZktjskHYBmZk044CWpSiill0318pCaIXW6mpg5adGbeZLa+LZ9GNxMWP+iOJIcFyYNZs3GmlV08OQ741S2cbumOQhxppJkcWTdpkZrZlAanLa4XZsmW+PXmsujOsMLEuto3PpJxpujYAt3s6Nv7O79FlGqrfisRipdFw==
-    PWP__MAIL_SMTP_USER_NAME: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: passwordpusher-smtp-creds
-      namespace: passwordpusher

infra/overlays/upc-dev/passwordpusher/passwordpusher.yaml

@@ -1,3 +1,9 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: passwordpusher
+---
+
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
@@ -14,19 +20,10 @@ metadata:
 spec:
   project: default
 
-  sources:
+  source:
-  - repoURL: https://pglombardo.github.io/passwordpusher-charts
+    repoURL: ssh://git@git.forteapps.net:2222/Forte/launchpad.git
-    chart: password-pusher
-    targetRevision: "1.4.4"
-    helm:
-      releaseName: passwordpusher
-      valueFiles:
-      - $values/infra/values/base/passwordpusher-values.yaml
-      - $values/infra/values/upc-dev/passwordpusher-values.yaml
-
-  - repoURL: ssh://git@git.forteapps.net:2222/Forte/launchpad.git
     targetRevision: HEAD
-    ref: values
+    path: infra/overlays/upc-dev/passwordpusher/resources
 
   destination:
     server: https://kubernetes.default.svc
@@ -41,3 +38,9 @@ spec:
     - CreateNamespace=true
     - Validate=true
     - ServerSideApply=true
+
+  ignoreDifferences:
+  - group: apps
+    kind: StatefulSet
+    jsonPointers:
+    - /spec/volumeClaimTemplates

infra/overlays/upc-dev/passwordpusher/resources/deployment.yaml

@@ -0,0 +1,77 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: passwordpusher
+  namespace: passwordpusher
+  labels:
+    app.kubernetes.io/name: passwordpusher
+    app.kubernetes.io/instance: passwordpusher
+    app.kubernetes.io/component: app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: passwordpusher
+      app.kubernetes.io/instance: passwordpusher
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: passwordpusher
+        app.kubernetes.io/instance: passwordpusher
+        app.kubernetes.io/component: app
+    spec:
+      containers:
+      - name: passwordpusher
+        image: docker.io/pglombardo/pwpush:release-1.51.0
+        ports:
+        - name: http
+          containerPort: 5100
+        env:
+        - name: PWP__HOST_DOMAIN
+          value: pwpush.forteapps.net
+        - name: PWP__HOST_PROTOCOL
+          value: https
+        - name: PWP__ENABLE_LOGINS
+          value: "true"
+        - name: PWP__ALLOW_ANONYMOUS
+          value: "false"
+        - name: PWP__SIGNUPS_ENABLED
+          value: "false"
+        - name: PWP__MAIL_RAISE_DELIVERY_ERRORS
+          value: "false"
+        - name: PWP__MAIL_SMTP_ADDRESS
+          value: smtp.office365.com
+        - name: PWP__MAIL_SMTP_PORT
+          value: "587"
+        - name: PWP__MAIL_SMTP_AUTHENTICATION
+          value: login
+        - name: PWP__MAIL_SMTP_STARTTLS
+          value: "true"
+        - name: PWP__MAIL_SMTP_DOMAIN
+          value: fortedigital.com
+        - name: PWP__MAIL_SENDER
+          value: noreply@fortedigital.com
+        envFrom:
+        - secretRef:
+            name: passwordpusher-db-creds
+        - secretRef:
+            name: passwordpusher-smtp-creds
+        livenessProbe:
+          httpGet:
+            path: /
+            port: http
+          initialDelaySeconds: 30
+          periodSeconds: 10
+        readinessProbe:
+          httpGet:
+            path: /
+            port: http
+          initialDelaySeconds: 10
+          periodSeconds: 5
+        resources:
+          requests:
+            cpu: 100m
+            memory: 256Mi
+          limits:
+            cpu: 500m
+            memory: 512Mi

infra/overlays/upc-dev/passwordpusher/resources/ingress.yaml

@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: passwordpusher
+  namespace: passwordpusher
+  labels:
+    app.kubernetes.io/name: passwordpusher
+    app.kubernetes.io/instance: passwordpusher
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    gethomepage.dev/enabled: "true"
+    gethomepage.dev/name: "PasswordPusher"
+    gethomepage.dev/description: "Share passwords securely with expiring links"
+    gethomepage.dev/group: "Security"
+    gethomepage.dev/icon: "passwordpusher"
+    gethomepage.dev/href: "https://pwpush.forteapps.net"
+spec:
+  ingressClassName: traefik
+  tls:
+  - secretName: passwordpusher-tls
+    hosts:
+    - pwpush.forteapps.net
+  rules:
+  - host: pwpush.forteapps.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: passwordpusher
+            port:
+              name: http

infra/overlays/upc-dev/passwordpusher/resources/kustomization.yaml

@@ -2,5 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - postgresql.yaml
+- deployment.yaml
+- service.yaml
+- ingress.yaml
 - passwordpusher-db-secret-sealed.yaml
 - passwordpusher-smtp-secret-sealed.yaml

infra/overlays/upc-dev/passwordpusher/resources/passwordpusher-db-secret-sealed.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: passwordpusher-db-creds
+  namespace: passwordpusher
+spec:
+  encryptedData:
+    DATABASE_URL: AgBzQyFkhTceQqpUN528xXnxf/P0veuO8I74wSOEuY2qThascssUhNnYmYXpIEwSpwYasEz1WksNQLR1IXBgrl/2FPUF4TOR/CvmF60zToXTp2mxCw4EBynXcsWDzQteTEL7DMmoGs4YdGqn/T2c8CQ873z1lgDEgZXDreZnL3bnQtbyyBvwK0xvhsPYsEhT490t0D0r0lfPmW1GoWkHRsPjGPJUZONrmULVW3unlqUGqO9t6A9XU5NasiEGwgfjToZo/bK4FpQOrGnI/N5PNp22zbZ6u+j9rKMkn6IFrbY3uTNdrDxu8I7OnrDD2DYMbDoFDj8W8Gt/VlLk1OK+gL4rf6U6SYKJMsJ1FyleuGHjY8aw1Xcgkwe7XwE/YjI7AEDCbH04HFb6MTHKcc/kNOoBpevhAWNtpXlTl10rRLsfEa3SVefN957R/bdTNshlNq1g0fXK5wSsDk1I4xWo8j17iHuVMXiRHcybapK849IWCxhUZBPE/OdN47LQ98AmNMolgpt7UGKkvb77MG1MS7QsaNfXkqnhZ0Gp2v6LL/UWhg72EdLozECA981XMdCRd5H36LYANtq5BeMgRw54uwfTw551SeP8+SCx/NBjaaHQCMHVHK9WhvjDD9iLWIRGNiPZxt4DP7oC3ERhB6L4aNir+pmS6xmdYAs85mYDbbNCfNjdRu6OyQPOwQI8Yr+LnF/NHpOuNOpIfsjcRwvkVrUD2qL4GnFk2a9jVw5EuTGdDA+Sw3a22SwiFj48GXsKJeanAqc7HrI+Cgsav99gdKB5IFH+AeN+4KX0
+    pgpassword: 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
+    pgusername: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: passwordpusher-db-creds
+      namespace: passwordpusher

infra/overlays/upc-dev/passwordpusher/resources/passwordpusher-smtp-secret-sealed.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: passwordpusher-smtp-creds
+  namespace: passwordpusher
+spec:
+  encryptedData:
+    PWP__MAIL_SMTP_PASSWORD: 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
+    PWP__MAIL_SMTP_USER_NAME: AgCd/qHbD0HqewPZsI2gjT9/l5iGb78Q0PCW9fCAt+GkcpvHBkp+eKAwFdglg+A4PJYgbUvb0wFzflnJluxbwdnNRY2kGzYhjCqFsE8TxrqZ+OvEpFy141rUtjYC8HMtT+l+l3JKoo/pkoJNilbFUEi/xK+/R5/hXqngHYvyrh+2T8xRrmlQaG845E3ESTc9ht7TkmQ/9fyrlAIisSNAvYqGnYfjzI2syswwYeRWDLL6/UL2DUaEmf0g6qheM570M8OADae+z/vQWZteC2a+tAdHTZ3w1G/diOkwC5dr95PFS2vW7jVbuE2CmNJ1a08EFJNKT3U+8d0RwGg765KA4RysQ5ygJOa/eBIaTC+QHnMxVMOih222drhphZUSkCPxkxl5NffLeuCubMfstBKRI77iORdIEG1Sqr03/ryAwIuCqXOcBuhDDGlEFG3x3dmW5kR3ADzwaXikNaU7VvRcHjeD9fDbVavqbJvBpevK84cJJ1JpM6nEl2iVXqp5eVR4W9FBgQy0M70sIENuSoxlPTUw1cfgpFuMApT1F53krbBRzOxxOjUqIrod81SYpB8POs5K9SeKVAwvp4MyN7pMDoYl5RMQw4s8+shKeLqZoKO/MfTyD1fpBmvMJiJLQudBi19AgnJj3/JVq2TCZ27/JBV3C1ua37JNdY3T2xwPreHGV5XlzxYPMDQe2WvzkGuJY66NwwIH5Iu46IubIzLfp/cxq/fstS3K8pDJXOOF
+  template:
+    metadata:
+      creationTimestamp: null
+      name: passwordpusher-smtp-creds
+      namespace: passwordpusher

infra/overlays/upc-dev/passwordpusher/resources/service.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: passwordpusher
+  namespace: passwordpusher
+  labels:
+    app.kubernetes.io/name: passwordpusher
+    app.kubernetes.io/instance: passwordpusher
+    app.kubernetes.io/component: app
+spec:
+  type: ClusterIP
+  ports:
+  - name: http
+    port: 5100
+    targetPort: http
+  selector:
+    app.kubernetes.io/name: passwordpusher
+    app.kubernetes.io/instance: passwordpusher

infra/values/base/passwordpusher-values.yaml

@@ -1,7 +0,0 @@
-image:
-  repository: docker.io/pglombardo/pwpush
-  tag: "release-1.51.0"
-
-# Disable the bundled postgresql subchart — we run our own StatefulSet
-postgresql:
-  enabled: false

infra/values/upc-dev/passwordpusher-values.yaml

@@ -1,50 +0,0 @@
-env:
-  PWP__HOST_DOMAIN: pwpush.forteapps.net
-  PWP__HOST_PROTOCOL: https
-  PWP__ENABLE_LOGINS: "true"
-  PWP__ALLOW_ANONYMOUS: "false"
-  PWP__SIGNUPS_ENABLED: "false"
-  PWP__MAIL_RAISE_DELIVERY_ERRORS: "false"
-  PWP__MAIL_SMTP_ADDRESS: smtp.office365.com
-  PWP__MAIL_SMTP_PORT: "587"
-  PWP__MAIL_SMTP_AUTHENTICATION: login
-  PWP__MAIL_SMTP_STARTTLS: "true"
-  PWP__MAIL_SMTP_DOMAIN: fortedigital.com
-  PWP__MAIL_SENDER: noreply@fortedigital.com
-
-envFrom:
-- secretRef:
-    name: passwordpusher-db-creds
-- secretRef:
-    name: passwordpusher-smtp-creds
-
-ingress:
-  enabled: true
-  className: traefik
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
-    gethomepage.dev/enabled: "true"
-    gethomepage.dev/name: "PasswordPusher"
-    gethomepage.dev/description: "Share passwords securely with expiring links"
-    gethomepage.dev/group: "Security"
-    gethomepage.dev/icon: "passwordpusher"
-    gethomepage.dev/href: "https://pwpush.forteapps.net"
-  hosts:
-  - host: pwpush.forteapps.net
-    paths:
-    - path: /
-      pathType: Prefix
-  tls:
-  - secretName: passwordpusher-tls
-    hosts:
-    - pwpush.forteapps.net
-
-resources:
-  requests:
-    cpu: 100m
-    memory: 256Mi
-  limits:
-    cpu: 500m
-    memory: 512Mi
-
-replicaCount: 1