add apiserver ingress

kubernetes/default/apiserver-ingress.jsonnet

@@ -0,0 +1,37 @@
+{
+  apiVersion: 'networking.k8s.io/v1',
+  kind: 'Ingress',
+  metadata: {
+    name: 'kubernetes-api',
+    labels: {
+      "app.kubernetes.io/name": 'kubernetes-api',
+    },
+    annotations: {
+      'kubernetes.io/ingress.class': 'nginx',
+      'nginx.ingress.kubernetes.io/backend-protocol': 'HTTPS',
+    },
+  },
+  spec: {
+    rules: [
+      {
+        host: 'k8s.nzbr.de',
+        http: {
+          paths: [
+            {
+              path: '/',
+              pathType: 'Prefix',
+              backend: {
+                service: {
+                  name: 'kubernetes',
+                  port: {
+                    number: 443,
+                  },
+                },
+              },
+            },
+          ],
+        },
+      },
+    ],
+  },
+}

kubernetes/kube-system/clusterrolebinding.jsonnet

@@ -0,0 +1,20 @@
+{
+  kind: 'ClusterRoleBinding',
+  apiVersion: 'rbac.authorization.k8s.io/v1',
+  metadata: {
+    name: 'admin',
+    labels: {
+      "app.kubernetes.io/name": 'kubernetes-api',
+    },
+  },
+  subjects: [{
+    kind: 'ServiceAccount',
+    name: 'admin',
+    namespace: 'default',
+  }],
+  roleRef: {
+    apiGroup: 'rbac.authorization.k8s.io',
+    kind: 'ClusterRole',
+    name: 'cluster-admin',
+  },
+}

kubernetes/kube-system/serviceaccount-secret.jsonnet

@@ -0,0 +1,14 @@
+{
+  apiVersion: 'v1',
+  kind: 'Secret',
+  metadata: {
+    name: 'admin-token',
+    labels: {
+      "app.kubernetes.io/name": 'kubernetes-api',
+    },
+    annotations: {
+      'kubernetes.io/service-account.name': 'admin',
+    },
+  },
+  type: 'kubernetes.io/service-account-token',
+}

kubernetes/kube-system/serviceaccount.jsonnet

@@ -0,0 +1,10 @@
+{
+  apiVersion: 'v1',
+  kind: 'ServiceAccount',
+  metadata: {
+    name: 'admin',
+    labels: {
+      "app.kubernetes.io/name": 'kubernetes-api',
+    },
+  },
+}