feat(wings): deploy ARK SA Wings instance

deployments/game-servers/wings-ark-sa/deployment.yaml

@@ -0,0 +1,121 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wings-ark-sa
+  namespace: game-servers
+  labels:
+    app: wings-ark-sa
+    game: ark-sa
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: wings-ark-sa
+  template:
+    metadata:
+      labels:
+        app: wings-ark-sa
+        game: ark-sa
+    spec:
+      nodeSelector:
+        kubernetes.io/arch: amd64
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: game
+                    operator: In
+                    values: [ark-sa]
+              topologyKey: "kubernetes.io/hostname"
+      volumes:
+        - name: wings-config
+          secret:
+            secretName: wings-ark-sa-config
+        - name: game-data
+          persistentVolumeClaim:
+            claimName: wings-ark-sa-data
+        - name: docker-socket
+          emptyDir: {}
+        - name: autostart-token
+          secret:
+            secretName: pelican-autostart-key
+      containers:
+        - name: dind
+          image: docker:dind
+          args:
+            - "--storage-driver=vfs"
+            - "--iptables=false"
+          securityContext:
+            privileged: true
+          volumeMounts:
+            - name: docker-socket
+              mountPath: /var/run/docker.sock
+          env:
+            - name: DOCKER_TLS_CERTDIR
+              value: ""
+          resources:
+            requests:
+              cpu: "500m"
+              memory: "512Mi"
+            limits:
+              cpu: "1"
+              memory: "1Gi"
+        - name: wings
+          image: ghcr.io/pelican-dev/wings:latest
+          command:
+            - /bin/sh
+            - -c
+            - |
+              export DOCKER_HOST=tcp://localhost:2375
+              exec wings
+          envFrom:
+            - secretRef:
+                name: wings-ark-sa-config
+          env:
+            - name: DOCKER_HOST
+              value: tcp://localhost:2375
+            - name: WATCHDOG_ENABLED
+              value: "true"
+          volumeMounts:
+            - name: wings-config
+              mountPath: /etc/pterodactyl
+              readOnly: true
+            - name: game-data
+              mountPath: /mnt/server
+            - name: docker-socket
+              mountPath: /var/run/docker.sock
+          resources:
+            requests:
+              cpu: "2"
+              memory: "4Gi"
+            limits:
+              cpu: "4"
+              memory: "8Gi"
+        - name: game-autostart
+          image: curlimages/curl:latest
+          command:
+            - /bin/sh
+            - -c
+            - |
+              while true; do
+                sleep 60
+                curl -sf -X POST "https://pelican.khalisio.com/api/client/servers/3fd0b08d-7393-4d0f-b11c-bad5e1d1f771/power" \
+                  -H "Authorization: Bearer $(cat /etc/secrets/autostart/api_key)" \
+                  -H "Content-Type: application/json" \
+                  -d '{"signal":"start"}' > /dev/null 2>&1 || true
+              done
+          volumeMounts:
+            - name: autostart-token
+              mountPath: /etc/secrets/autostart
+              readOnly: true
+          resources:
+            requests:
+              cpu: "50m"
+              memory: "64Mi"
+            limits:
+              cpu: "100m"
+              memory: "128Mi"
+      restartPolicy: Always

deployments/game-servers/wings-ark-sa/externalsecret.yaml

@@ -0,0 +1,26 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: wings-ark-sa-config
+  namespace: game-servers
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: wings-ark-sa-config
+    creationPolicy: Owner
+  data:
+    - secretKey: WINGS_UUID
+      remoteRef:
+        key: wings/ark-sa
+        property: uuid
+    - secretKey: WINGS_TOKEN
+      remoteRef:
+        key: wings/ark-sa
+        property: token
+    - secretKey: LOCALE
+      remoteRef:
+        key: wings/ark-sa
+        property: locale

deployments/game-servers/wings-ark-sa/ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: wings-ark-sa-api
+  namespace: game-servers
+spec:
+  entryPoints:
+    - websecure
+  tls:
+    secretName: wings-ark-sa-tls
+  routes:
+    - match: Host(`wings-ark-sa.khalisio.com`)
+      kind: Rule
+      services:
+        - name: wings-ark-sa-api
+          port: 8081
+          scheme: https
+          serversTransport: wings-ark-sa-st
+---
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: wings-ark-sa-st
+  namespace: game-servers
+spec:
+  serverTransport:
+    insecureSkipVerify: true

deployments/game-servers/wings-ark-sa/pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: wings-ark-sa-data
+  namespace: game-servers
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 150Gi

deployments/game-servers/wings-ark-sa/service-api.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: wings-ark-sa-api
+  namespace: game-servers
+spec:
+  type: ClusterIP
+  ports:
+    - name: api
+      port: 8081
+      targetPort: 8081
+      protocol: TCP
+    - name: sftp
+      port: 2023
+      targetPort: 2023
+      protocol: TCP
+  selector:
+    app: wings-ark-sa

deployments/game-servers/wings-ark-sa/service-game.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: wings-ark-sa-game
+  namespace: game-servers
+  annotations:
+    metallb.universe.tf/address-pool: default-lb-pool
+spec:
+  type: LoadBalancer
+  loadBalancerIP: 10.4.4.200
+  ports:
+    - name: ark-game
+      port: 7777
+      protocol: UDP
+      targetPort: 7777
+    - name: ark-query
+      port: 27015
+      protocol: UDP
+      targetPort: 27015
+    - name: ark-tcp
+      port: 27016
+      protocol: TCP
+      targetPort: 27016
+  selector:
+    app: wings-ark-sa

deployments/pelican/deployment.yaml

@@ -1,107 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: pelican-panel
-  namespace: pelican
-  labels:
-    app.kubernetes.io/name: pelican
-    app.kubernetes.io/component: panel
-    app.kubernetes.io/managed-by: orion
-spec:
-  replicas: 2
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: pelican
-      app.kubernetes.io/component: panel
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: pelican
-        app.kubernetes.io/component: panel
-    spec:
-      containers:
-        - name: panel
-          image: ghcr.io/pelican-dev/panel:latest
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          env:
-            - name: APP_ENV
-              value: production
-            - name: APP_NAME
-              value: "Pelican"
-            - name: APP_URL
-              value: "https://pelican.khalisio.com"
-            - name: DB_HOST
-              value: postgres.pelican.svc.cluster.local
-            - name: DB_PORT
-              value: "5432"
-            - name: DB_DATABASE
-              value: pelican
-            - name: DB_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: pelican-panel-db
-                  key: DB_USER
-            - name: DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: pelican-panel-db
-                  key: DB_PASSWORD
-            - name: APP_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: pelican-panel-app
-                  key: APP_KEY
-            - name: SESSION_SECURE
-              valueFrom:
-                secretKeyRef:
-                  name: pelican-panel-app
-                  key: SESSION_SECURE
-            - name: OAUTH_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: pelican-panel-app
-                  key: OAUTH_CLIENT_SECRET
-            - name: OAUTH_CLIENT_ID
-              value: pelican-panel
-            - name: OAUTH_BASE_URI
-              value: "https://pelican.khalisio.com"
-            - name: OAUTH_AUTH_SERVER_URI
-              value: "https://auth.khalisio.com"
-            - name: OAUTH_CLIENT_PORTAL_URI
-              value: "https://auth.khalisio.com"
-            - name: OAUTH_CLIENT_ADMIN_URI
-              value: "https://auth.khalisio.com"
-            - name: CACHE_DRIVER
-              value: file
-            - name: SESSION_DRIVER
-              value: file
-          volumeMounts:
-            - name: data
-              mountPath: /var/www/app/storage
-            - name: logs
-              mountPath: /var/www/app/storage/logs
-            - name: uploads
-              mountPath: /var/www/app/public/uploads
-            - name: pufferpanel
-              mountPath: /var/www/app/storage/pufferpanel
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: pelican-data
-        - name: logs
-          persistentVolumeClaim:
-            claimName: pelican-logs
-        - name: uploads
-          persistentVolumeClaim:
-            claimName: pelican-data
-        - name: pufferpanel
-          persistentVolumeClaim:
-            claimName: pelican-data

deployments/pelican/externalsecret-app.yaml

@@ -1,23 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: pelican-panel-app
-  namespace: pelican
-spec:
-  refreshInterval: 1h
-  target:
-    name: pelican-panel-app
-    creationPolicy: Owner
-  data:
-    - secretKey: APP_KEY
-      remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/app
-        property: APP_KEY
-    - secretKey: SESSION_SECURE
-      remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/app
-        property: SESSION_SECURE
-    - secretKey: OAUTH_CLIENT_SECRET
-      remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/app
-        property: OAUTH_CLIENT_SECRET

deployments/pelican/externalsecret-autostart.yaml

@@ -1,15 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: pelican-autostart-key
-  namespace: pelican
-spec:
-  refreshInterval: 1h
-  target:
-    name: pelican-autostart-key
-    creationPolicy: Owner
-  data:
-    - secretKey: api_key
-      remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/autostart
-        property: api_key

deployments/pelican/externalsecret-db.yaml

@@ -1,19 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: pelican-panel-db
-  namespace: pelican
-spec:
-  refreshInterval: 1h
-  target:
-    name: pelican-panel-db
-    creationPolicy: Owner
-  data:
-    - secretKey: DB_PASSWORD
-      remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/db
-        property: DB_PASSWORD
-    - secretKey: DB_USER
-      remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/db
-        property: DB_USER

deployments/pelican/ingress.yaml

@@ -1,19 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
-metadata:
-  name: pelican-panel
-  namespace: pelican
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
-spec:
-  entryPoints:
-    - websecure
-  tls:
-    secretName: pelican-panel-tls
-  routes:
-    - match: Host(`pelican.khalisio.com`)
-      kind: Rule
-      services:
-        - name: pelican-panel
-          port: 80
-          scheme: http

deployments/pelican/service.yaml

@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: pelican-panel
-  namespace: pelican
-  labels:
-    app.kubernetes.io/name: pelican
-    app.kubernetes.io/component: panel
-spec:
-  type: ClusterIP
-  selector:
-    app.kubernetes.io/name: pelican
-    app.kubernetes.io/component: panel
-  ports:
-    - name: http
-      port: 80
-      targetPort: 8080
-      protocol: TCP

deployments/pelican/storage.yaml

@@ -1,25 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pelican-data
-  namespace: pelican
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 20Gi
-  storageClassName: longhorn
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pelican-logs
-  namespace: pelican
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: longhorn