Add ente-photos deployment

ente-photos/ente-deployment.yaml

@@ -0,0 +1,66 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    io.kompose.service: museum
+  name: museum
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      io.kompose.service: museum
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        io.kompose.service: museum
+    spec:
+      containers:
+        - env:
+          - name: ENTE_CREDENTIALS_FILE
+            valueFrom:
+              secretKeyRef:
+                name: ente-photos-config
+                key: config
+          image: ghcr.io/ente-io/server
+          name: museum
+          ports:
+            - containerPort: 8080
+              protocol: TCP
+            - containerPort: 2112
+              protocol: TCP
+          volumeMounts:
+            - mountPath: /var/logs
+              name: custom-logs
+            - mountPath: /museum.yaml
+              name: museum-claim1
+              readOnly: true
+            - mountPath: /credentials.yaml
+              name: museum-claim2
+              readOnly: true
+            - mountPath: /data
+              name: museum-claim3
+              readOnly: true
+        # - args:
+        #     - TCP-LISTEN:3200,fork,reuseaddr
+        #     - TCP:minio:3200
+        #   image: alpine/socat
+        #   name: socat
+      restartPolicy: Always
+      volumes:
+        - name: custom-logs
+          persistentVolumeClaim:
+            claimName: custom-logs
+        - name: museum-claim1
+          persistentVolumeClaim:
+            claimName: museum-claim1
+            readOnly: true
+        - name: museum-claim2
+          persistentVolumeClaim:
+            claimName: museum-claim2
+            readOnly: true
+        - name: museum-claim3
+          persistentVolumeClaim:
+            claimName: museum-claim3
+            readOnly: true

ente-photos/ente-photos-es.yaml

@@ -0,0 +1,41 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: template
+spec:
+  refreshInterval: "15s"
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: ente-photos-config
+    template:
+      engineVersion: v2
+      data:
+        config: |
+          db:
+              host: postgres
+              port: 5432
+              name: ente_db
+              user: pguser
+              password: "{{ .pgpass }}"
+
+          s3:
+              are_local_buckets: false
+              ente-photos:
+                  key: ente-photos-user
+                  secret: "{{ .ente-pass }}"
+                  endpoint: minio.hensen.io:3200
+                  region: nl
+                  bucket: ente-photos
+
+  data:
+  - secretKey: pgpass
+    remoteRef:
+      key: ente-photos-postgres
+      property: password
+  - secretKey: ente-pass
+    remoteRef:
+      key: minio-ente-photos-user
+      property: password
+

ente-photos/museum-claim1-persistentvolumeclaim.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    io.kompose.service: museum-claim1
+  name: museum-claim1
+spec:
+  accessModes:
+    - ReadOnlyMany
+  resources:
+    requests:
+      storage: 100Mi

ente-photos/museum-claim2-persistentvolumeclaim.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    io.kompose.service: museum-claim2
+  name: museum-claim2
+spec:
+  accessModes:
+    - ReadOnlyMany
+  resources:
+    requests:
+      storage: 100Mi

ente-photos/museum-claim3-persistentvolumeclaim.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    io.kompose.service: museum-claim3
+  name: museum-claim3
+spec:
+  accessModes:
+    - ReadOnlyMany
+  resources:
+    requests:
+      storage: 100Mi

ente-photos/museum-service.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    io.kompose.service: museum
+  name: museum
+spec:
+  ports:
+    - name: "8080"
+      port: 8080
+      targetPort: 8080
+    - name: "2112"
+      port: 2112
+      targetPort: 2112
+  selector:
+    io.kompose.service: museum