1
#
2
# CoreDNS Kubernetes Deployment via Quadlet
3
#
4
[Unit]
5
Description=CoreDNS Kubernetes Deployment
6
After=network-online.target
7
Wants=network-online.target
8

9
[Kube]
10
# Namespace for DNS services
11
Namespace=dns
12

13
# The manifest for CoreDNS
14
Yaml='''
15
apiVersion: v1
16
kind: Namespace
17
metadata:
18
  name: dns
19
---
20
apiVersion: v1
21
kind: ConfigMap
22
metadata:
23
  name: coredns-config
24
  namespace: dns
25
data:
26
  Corefile: |
27
    .:53 {
28
        forward . 8.8.8.8 8.8.4.4
29
        log
30
        errors
31
    }
32
    invinsense:53 {
33
        file /etc/coredns/invinsense.db
34
        log
35
        errors
36
    }
37
  invinsense.db: |
38
    $ORIGIN invinsense.
39
    @       3600 IN SOA  coredns.invinsense. admin.invinsense. (
40
            2023062001 ; serial
41
            7200       ; refresh
42
            3600       ; retry
43
            1209600    ; expire
44
            3600       ; minimum
45
    )
46
    @       3600 IN NS  coredns.invinsense.
47
    coredns   IN A     192.168.122.16
48
    ca        IN A     192.168.122.76
49
---
50
apiVersion: apps/v1
51
kind: Deployment
52
metadata:
53
  name: coredns
54
  namespace: dns
55
spec:
56
  replicas: 1
57
  selector:
58
    matchLabels:
59
      app: coredns
60
  template:
61
    metadata:
62
      labels:
63
        app: coredns
64
    spec:
65
      containers:
66
      - name: coredns
67
        image: docker.io/coredns/coredns:1.11.1
68
        args: ["-conf", "/etc/coredns/Corefile"]
69
        ports:
70
        - containerPort: 53
71
          name: dns
72
          protocol: UDP
73
        - containerPort: 53
74
          name: dns-tcp
75
          protocol: TCP
76
        volumeMounts:
77
        - name: config-volume
78
          mountPath: /etc/coredns
79
      volumes:
80
      - name: config-volume
81
        configMap:
82
          name: coredns-config
83
---
84
apiVersion: v1
85
kind: Service
86
metadata:
87
  name: coredns
88
  namespace: dns
89
spec:
90
  selector:
91
    app: coredns
92
  ports:
93
  - name: dns
94
    port: 53
95
    protocol: UDP
96
  - name: dns-tcp
97
    port: 53
98
    protocol: TCP
99
  type: LoadBalancer
100
'''
101

102
[Install]
103
WantedBy=default.target

1
#
2
# StepCA Kubernetes Deployment via Quadlet
3
#
4
[Unit]
5
Description=StepCA Kubernetes Deployment
6
After=network-online.target
7
Wants=network-online.target
8

9
[Kube]
10
# Namespace for PKI services
11
Namespace=pki
12

13
# The manifest for StepCA
14
Yaml='''
15
apiVersion: v1
16
kind: Namespace
17
metadata:
18
  name: pki
19
---
20
apiVersion: v1
21
kind: Secret
22
metadata:
23
  name: stepca-secret
24
  namespace: pki
25
type: Opaque
26
data:
27
  password: ${STEPCA_PASSWORD_BASE64}  # This will be replaced during setup
28
---
29
apiVersion: v1
30
kind: PersistentVolumeClaim
31
metadata:
32
  name: stepca-data
33
  namespace: pki
34
spec:
35
  accessModes:
36
    - ReadWriteOnce
37
  resources:
38
    requests:
39
      storage: 1Gi
40
---
41
apiVersion: apps/v1
42
kind: Deployment
43
metadata:
44
  name: stepca
45
  namespace: pki
46
spec:
47
  replicas: 1
48
  selector:
49
    matchLabels:
50
      app: stepca
51
  template:
52
    metadata:
53
      labels:
54
        app: stepca
55
    spec:
56
      containers:
57
      - name: stepca
58
        image: smallstep/step-ca:0.24.0
59
        ports:
60
        - containerPort: 443
61
        env:
62
        - name: STEPCA_INIT_NAME
63
          value: "Invinsense CA"
64
        - name: STEPCA_INIT_DNS_NAMES
65
          value: "ca.invinsense"
66
        - name: STEPCA_INIT_ADDRESS
67
          value: ":443"
68
        - name: STEPCA_PASSWORD
69
          valueFrom:
70
            secretKeyRef:
71
              name: stepca-secret
72
              key: password
73
        volumeMounts:
74
        - name: stepca-data
75
          mountPath: /home/step
76
      volumes:
77
      - name: stepca-data
78
        persistentVolumeClaim:
79
          claimName: stepca-data
80
---
81
apiVersion: v1
82
kind: Service
83
metadata:
84
  name: stepca
85
  namespace: pki
86
spec:
87
  selector:
88
    app: stepca
89
  ports:
90
  - port: 443
91
    targetPort: 443
92
  type: LoadBalancer
93
'''
94

95
[Install]
96
WantedBy=default.target