f4181349f8
- Add Firecrawl application with full stack: - Firecrawl API (main service) - Firecrawl Worker (background jobs) - Playwright Service (browser automation) - Redis (cache & job queue) - PostgreSQL (state management) - RabbitMQ (message queue) - Configure dual DNS names: - Primary: spaceship-earth.local.mk-labs.cloud (EPCOT theme) - Secondary: firecrawl.local.mk-labs.cloud - Add Gateway API HTTPRoutes with TLS certificates - Update ReferenceGrant for firecrawl namespace - Configure ArgoCD application (wave 20) - Set USE_DB_AUTHENTICATION=false for internal deployment This provides JARVIS with web scraping and search capabilities.
52 lines
1.7 KiB
YAML
52 lines
1.7 KiB
YAML
# ------------------------------------------------------------------------------
|
|
# ReferenceGrant — allow HTTPRoutes from app namespaces to attach to the Gateway
|
|
#
|
|
# IMPORTANT: Every new application namespace that needs to route traffic through
|
|
# the Cilium Gateway MUST have an entry added here. This is a Gateway API
|
|
# security requirement — the grant must live in the gateway namespace.
|
|
#
|
|
# When adding a new application:
|
|
# 1. Add a new `from` entry below with the app namespace
|
|
# 2. Push to main
|
|
# 3. ArgoCD will sync the updated ReferenceGrant automatically
|
|
#
|
|
# Namespaces currently permitted:
|
|
# - default (test workloads)
|
|
# - argocd (ArgoCD UI)
|
|
# - monitoring (Grafana)
|
|
# - authentik (Authentik SSO — future)
|
|
# - gitea (Gitea — future)
|
|
# ------------------------------------------------------------------------------
|
|
apiVersion: gateway.networking.k8s.io/v1beta1
|
|
kind: ReferenceGrant
|
|
metadata:
|
|
name: allow-httproutes
|
|
namespace: gateway
|
|
spec:
|
|
from:
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: default
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: argocd
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: monitoring
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: authentik
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: gitea
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: skyway
|
|
- group: gateway.networking.k8s.io
|
|
kind: HTTPRoute
|
|
namespace: firecrawl
|
|
to:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: fastpass-gateway
|