feat: multitenancy with capsule

ecommerce-apps/kustomize/ecommerce-online-boutique.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ecommerce-online-boutique
+  namespace: ecommerce-apps
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: ecommerce-apps
+    name: in-cluster
+  project: k8saas
+  source:
+    path: ecommerce-online-boutique
+    repoURL: http://gitea-http.k8saas-system.svc:3000/root/k8saas-frozen
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

ecommerce-apps/kustomize/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ecommerce-online-boutique.yaml

ecommerce-online-boutique/app.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: online-boutique
+  namespace: ecommerce-apps
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: ecommerce-online-boutique
+    name: in-cluster
+  project: ecommerce
+  source:
+    path: ecommerce-online-boutique
+    repoURL: http://gitea-http.k8saas-system.svc:3000/root/k8saas-frozen
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

online-boutique/kustomize/kustomization.yaml → ecommerce-online-boutique/kustomize/kustomization.yaml

@@ -14,7 +14,8 @@ resources:
 - ingress.yaml
 - dashboard.yaml
 - slo.yaml
-- velero-schedule.yaml
+# TODO: Re-enable?
+# - velero-backup.yaml
 components:
 - https://github.com/GoogleCloudPlatform/microservices-demo//kustomize/components/network-policies?timeout=90s&ref=6af73dcf7fe1ca653d95ae7a29e12faf8cf02964
 - https://github.com/GoogleCloudPlatform/microservices-demo//kustomize/components/non-public-frontend?timeout=90s&ref=6af73dcf7fe1ca653d95ae7a29e12faf8cf02964

online-boutique/kustomize/velero-schedule.yaml → ecommerce-online-boutique/kustomize/velero-schedule.yaml

@@ -9,4 +9,4 @@ spec:
   template:
     ttl: 168h0m0s
     includedNamespaces:
-    - online-boutique
+    - ecommerce-online-boutique

online-boutique/app.yaml → tenants/app.yaml

@@ -1,17 +1,17 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: online-boutique
+  name: tenants
   namespace: k8saas-system
   finalizers:
   - resources-finalizer.argocd.argoproj.io
 spec:
   destination:
-    namespace: online-boutique
+    namespace: k8saas-system
     name: in-cluster
-  project: default
+  project: k8saas
   source:
-    path: online-boutique
+    path: tenants
     repoURL: http://gitea-http.k8saas-system.svc:3000/root/k8saas-frozen
     targetRevision: HEAD
   syncPolicy:

tenants/kustomize/ecommerce-tenant.yaml

@@ -0,0 +1,38 @@
+---
+apiVersion: capsule.clastix.io/v1beta1
+kind: Tenant
+metadata:
+  name: ecommerce
+  labels:
+    k8saas.io/tenant: ecommerce
+spec:
+  owners:
+  - name: oidc:[email protected]
+    kind: User
+  - name: oidc:tenant-ecommerce
+    kind: Group
+  namespaceOptions:
+    quota: 1
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ecommerce-apps
+  namespace: k8saas-system
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: ecommerce-apps
+    name: in-cluster
+  project: k8saas
+  source:
+    path: ecommerce-apps
+    repoURL: http://gitea-http.k8saas-system.svc:3000/root/k8saas-frozen
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+    - CreateNamespace=true

tenants/kustomize/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ecommerce-tenant.yaml