uoftctf-2026-chals-public/no-quotes-2/no-quotes-2.yaml at main · UofTCTF/uoftctf-2026-chals-public · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
apiVersion: kube-ctf.downunderctf.com/v1
kind: IsolatedChallenge
metadata:
  name: no-quotes-2
spec:
  expires: 600
  available_at: 1600000000 # 1736553600
  type: web
  template: |
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: "ctf-{{ deployment_id }}"
      namespace: kubectf-challenges-isolated
      labels:
        kube-ctf.downunderctf.com/type: web
        kube-ctf.downunderctf.com/name: no-quotes-2
        isolated-challenge.kube-ctf.downunderctf.com/deployment: "{{ deployment_id }}"
        isolated-challenge.kube-ctf.downunderctf.com/owner: "{{ owner_id }}"
      annotations:
        janitor/expires: "{{ expires }}"
    spec:
      replicas: 1
      selector:
        matchLabels:
          isolated-challenge.kube-ctf.downunderctf.com/deployment: "{{ deployment_id }}"
          isolated-challenge.kube-ctf.downunderctf.com/owner: "{{ owner_id }}"
      template:
        metadata:
          labels:
            role: web
            kube-ctf.downunderctf.com/type: web
            kube-ctf.downunderctf.com/name: no-quotes-2
            isolated-challenge.kube-ctf.downunderctf.com/deployment: "{{ deployment_id }}"
            isolated-challenge.kube-ctf.downunderctf.com/owner: "{{ owner_id }}"
        spec:
          enableServiceLinks: false
          automountServiceAccountToken: false
          containers:
          - name: web
            image: us-east1-docker.pkg.dev/ctfd-uoftctf-2026/chals/no-quotes-2:latest
            resources:
              limits:
                cpu: 80m
                memory: 256Mi
              requests:
                cpu: 40m
                memory: 128Mi
            ports:
             - containerPort: 5000
               name: port-5000

    ---
    apiVersion: v1
    kind: Service
    metadata:
      name: "ctf-{{ deployment_id }}"
      namespace: kubectf-challenges-isolated
      labels:
        kube-ctf.downunderctf.com/type: web
        kube-ctf.downunderctf.com/name: no-quotes-2
        isolated-challenge.kube-ctf.downunderctf.com/deployment: "{{ deployment_id }}"
        isolated-challenge.kube-ctf.downunderctf.com/owner: "{{ owner_id }}"
      annotations:
        janitor/expires: "{{ expires }}"
    spec:
      selector:
        role: web
        isolated-challenge.kube-ctf.downunderctf.com/deployment: "{{ deployment_id }}"
      ports:
        - port: 5000
          name: port-5000
    ---
    apiVersion: traefik.containo.us/v1alpha1
    kind: IngressRoute
    metadata:
      name: ingress-ctf-{{ deployment_id }}
      namespace: kubectf-challenges-isolated
      labels:
        kube-ctf.downunderctf.com/type: web
        kube-ctf.downunderctf.com/name: no-quotes-2
        isolated-challenge.kube-ctf.downunderctf.com/deployment: "{{ deployment_id }}"
        isolated-challenge.kube-ctf.downunderctf.com/owner: "{{ owner_id }}"
      annotations:
        janitor/expires: "{{ expires }}"
    spec:
      entryPoints:
        - web
        - websecure
      tls:
        certResolver: default
      routes:
        - match: Host(`{{ deployment_id }}.{{ domain }}`)
          kind: Rule
          priority: 10
          middlewares:
          - name: secure-headers
          services:
          - name: ctf-{{ deployment_id }}
            port: 5000