added s3 secret base64 encoded and S3 Firewall

2025-07-02 15:18:01 +02:00 · 2025-07-02 15:18:01 +02:00 · eeaece034f
commit eeaece034f
parent d5f8404835
4 changed files with 94 additions and 0 deletions
--- a/firewall-s3/vm/fortigate.yaml
+++ b/firewall-s3/vm/fortigate.yaml
@ -0,0 +1,66 @@
+apiVersion: kubevirt.io/v1
+kind: VirtualMachine
+metadata:
+  name: fortigate-s3
+  namespace: ${TENANT_NAMESPACE}
+spec:
+  dataVolumeTemplates:
+    - metadata:
+        name: fortigate-rootdisk-s3
+      spec:
+        source:
+          http:
+            url: https://glacier-1.kvant.cloud/ocp-virt-images/sources/fortios_7_6_3.qcow2
+            secretRef:
+              name: s3-virt-credentials
+        storage:
+          resources:
+            requests:
+              storage: 30Gi
+  runStrategy: Always
+  template:
+    metadata:
+      labels:
+        kubevirt.io/domain: fortigate-s3
+    spec:
+      domain:
+        cpu:
+          cores: 2
+        memory:
+          guest: 4Gi
+        features:
+          acpi: {}
+          smm:
+            enabled: true
+        firmware:
+          bootloader:
+            efi:
+              secureBoot: true
+        devices:
+          rng: {}
+          networkInterfaceMultiqueue: true
+          interfaces:
+            - name: default
+              masquerade: {}
+              ports:
+                - port: 443
+                - port: 22
+          disks:
+            - disk:
+                bus: sata
+              name: rootdisk
+        resources:
+          requests:
+            memory: 4Gi
+            cpu: 2
+          limits:
+            memory: 4Gi
+            cpu: 2
+      networks:
+        - name: default
+          pod: {}
+      terminationGracePeriodSeconds: 180
+      volumes:
+        - name: rootdisk
+          dataVolume:
+            name: fortigate-rootdisk-s3