2 files changed, 51 insertions, 0 deletions
diff --git a/infra/kubernetes/cgit/config.yaml b/infra/kubernetes/cgit/config.yaml
new file mode 100644
index 000000000000..b4794b5e4362
--- /dev/null
+++ b/infra/kubernetes/cgit/config.yaml
@@ -0,0 +1,50 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cgit
+  labels:
+    app: cgit
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: cgit
+  template:
+    metadata:
+      labels:
+        app: cgit
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+      containers:
+      - name: cgit
+        image: nixery.local/shell/third_party.git/third_party.google-cloud-sdk/services.cgit-taz:{{ gitHEAD }}
+        command: [ "cgit-launch" ]
+        env:
+          - name: HOME
+            value: /git
+        volumeMounts:
+          - name: git-volume
+            mountPath: /git
+      volumes:
+        - name: cgit-secrets
+          secret:
+            secretName: cgit-secrets
+            defaultMode: 256
+        - name: git-volume
+          emptyDir: {}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: cgit
+spec:
+  type: NodePort
+  selector:
+    app: cgit
+  ports:
+    - protocol: TCP
+      port: 8080
diff --git a/infra/kubernetes/primary-cluster.yaml b/infra/kubernetes/primary-cluster.yaml
index fab54eeef204..b79181d1758f 100644
--- a/infra/kubernetes/primary-cluster.yaml
+++ b/infra/kubernetes/primary-cluster.yaml
@@ -31,6 +31,7 @@ include:
       repo: ssh://tazjin@gmail.com@source.developers.google.com:2022/p/tazjins-infrastructure/r/depot
       popularity: 'popularity-nixos-unstable-3140fa89c51233397f496f49014f6b23216667c2.json'
   - name: tazblog
+  - name: cgit
   - name: https-lb
   - name: nginx
     values: