From 8ddeba5216e86bd55e8d3d9f3996cf3d241c3e74 Mon Sep 17 00:00:00 2001
From: Andrei Kartashov <a@ioot.xyz>
Date: Mon, 4 Sep 2023 22:57:56 +0700
Subject: [PATCH] sshct

---
 README.rst                                    |  6 +++
 state/gullfaxi/apps/sshct/application.yaml    | 19 ++++++++
 .../gullfaxi/apps/sshct/manifests/sshct.yaml  | 46 +++++++++++++++++++
 3 files changed, 71 insertions(+)
 create mode 100644 state/gullfaxi/apps/sshct/application.yaml
 create mode 100644 state/gullfaxi/apps/sshct/manifests/sshct.yaml

diff --git a/README.rst b/README.rst
index 3a5fabc..b35500e 100644
--- a/README.rst
+++ b/README.rst
@@ -32,6 +32,8 @@ Applications & Projects
 +------------------------------+----------------------------------------------------------------+-------------------------+
 | Oauth2-proxy_                | `Oauth2 Proxy`_                                                | |oauth2-proxy_status|   |
 +------------------------------+----------------------------------------------------------------+-------------------------+
+| SSHCT_                       | `Personal container with ssh`_                                 | |sshct_status|          |
++------------------------------+----------------------------------------------------------------+-------------------------+
 | Websites_                    | * https://a.ioot.xyz                                           | |websites_status|       |
 |                              | * https://router.ioot.xyz                                      |                         |
 +------------------------------+----------------------------------------------------------------+-------------------------+
@@ -72,6 +74,10 @@ Applications & Projects
 .. _Oauth2 Proxy: https://github.com/oauth2-proxy/oauth2-proxy
 .. |oauth2-proxy_status| image:: https://argocd.ioot.xyz/api/badge?name=oauth2-proxy&revision=true
 
+.. _SSHCT: https://argocd.ioot.xyz/applications/argocd/sshct
+.. _Personal container with ssh: https://github.com/amkartashov/dockerfiles/tree/master/sshct
+.. |sshct_status| image:: https://argocd.ioot.xyz/api/badge?name=sshct&revision=true
+
 .. _Websites: https://argocd.ioot.xyz/applications/argocd/websites
 .. |websites_status| image:: https://argocd.ioot.xyz/api/badge?name=websites&revision=true
 
diff --git a/state/gullfaxi/apps/sshct/application.yaml b/state/gullfaxi/apps/sshct/application.yaml
new file mode 100644
index 0000000..36e321a
--- /dev/null
+++ b/state/gullfaxi/apps/sshct/application.yaml
@@ -0,0 +1,19 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: sshct
+spec:
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: sshct
+  project: apps
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  source:
+    repoURL: git@github.com:amkartashov/gf-k8s.git
+    targetRevision: main
+    path: state/gullfaxi/apps/sshct/manifests/
diff --git a/state/gullfaxi/apps/sshct/manifests/sshct.yaml b/state/gullfaxi/apps/sshct/manifests/sshct.yaml
new file mode 100644
index 0000000..0ecd7a1
--- /dev/null
+++ b/state/gullfaxi/apps/sshct/manifests/sshct.yaml
@@ -0,0 +1,46 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: sshct
+  labels:
+    app: sshct
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: sshct
+  template:
+    metadata:
+      labels:
+        app: sshct
+    spec:
+      hostNetwork: true
+      volumes:
+      - name: home
+        hostPath:
+          path: /home
+          type: DirectoryOrCreate
+      - name: dockersock
+        hostPath:
+          path: /var/run/docker.sock
+          type: Socket
+      containers:
+      - name: sshct
+        securityContext:
+          privileged: true
+        image: ghcr.io/amkartashov/sshct:v3.8.0
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: CT_SSH_PORT
+          value: "30810"
+        #- name: CTUSERPWD
+        #  valueFrom:
+        #    secretKeyRef:
+        #      name: sshct
+        #      key: password
+        volumeMounts:
+        - mountPath: /home
+          name: home
+        - mountPath: /var/run/docker.sock
+          name: dockersock