Add Kubernetes manifests for car.stinnesbeck.com

nils/mg4

Namespace, InfluxDB 2.7.12 StatefulSet with PVC and a NetworkPolicy
that admits only the server, the server Deployment (non-root, read-only
root filesystem), a cert-manager Certificate from letsencrypt-prod and a
Traefik IngressRoute. Secrets are a template only. Nothing is applied;
k8s/README.md has the steps. Server version bumped to 1.1.0.

Validated offline with kustomize and kubeconform (including the
cert-manager and Traefik CRD schemas). The InfluxDB container was tested
locally as UID 1000 with no capabilities.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This commit is contained in:

nils

2026-10-17 14:11:58 +02:00

co-authored by

Claude Opus 5.5

parent 4ea66cf424

commit c253876ed2

9 changed files with 367 additions and 3 deletions

									
										k8s/namespace.yaml
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				apiVersion: v1

				kind: Namespace

				metadata:

				  name: mg4