From 2ee6a942f6824692452ea520a4f7abda74859666 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Thu, 12 Sep 2024 14:08:45 +0200 Subject: [PATCH] Add ente-photos deployment --- ente-photos/ente-deployment.yaml | 66 +++++++++++++++++++ ente-photos/ente-photos-es.yaml | 41 ++++++++++++ .../museum-claim1-persistentvolumeclaim.yaml | 12 ++++ .../museum-claim2-persistentvolumeclaim.yaml | 12 ++++ .../museum-claim3-persistentvolumeclaim.yaml | 12 ++++ ente-photos/museum-service.yaml | 16 +++++ 6 files changed, 159 insertions(+) create mode 100644 ente-photos/ente-deployment.yaml create mode 100644 ente-photos/ente-photos-es.yaml create mode 100644 ente-photos/museum-claim1-persistentvolumeclaim.yaml create mode 100644 ente-photos/museum-claim2-persistentvolumeclaim.yaml create mode 100644 ente-photos/museum-claim3-persistentvolumeclaim.yaml create mode 100644 ente-photos/museum-service.yaml diff --git a/ente-photos/ente-deployment.yaml b/ente-photos/ente-deployment.yaml new file mode 100644 index 0000000..7a2e99e --- /dev/null +++ b/ente-photos/ente-deployment.yaml @@ -0,0 +1,66 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + io.kompose.service: museum + name: museum +spec: + replicas: 1 + selector: + matchLabels: + io.kompose.service: museum + strategy: + type: Recreate + template: + metadata: + labels: + io.kompose.service: museum + spec: + containers: + - env: + - name: ENTE_CREDENTIALS_FILE + valueFrom: + secretKeyRef: + name: ente-photos-config + key: config + image: ghcr.io/ente-io/server + name: museum + ports: + - containerPort: 8080 + protocol: TCP + - containerPort: 2112 + protocol: TCP + volumeMounts: + - mountPath: /var/logs + name: custom-logs + - mountPath: /museum.yaml + name: museum-claim1 + readOnly: true + - mountPath: /credentials.yaml + name: museum-claim2 + readOnly: true + - mountPath: /data + name: museum-claim3 + readOnly: true + # - args: + # - TCP-LISTEN:3200,fork,reuseaddr + # - TCP:minio:3200 + # image: alpine/socat + # name: socat + restartPolicy: Always + volumes: + - name: custom-logs + persistentVolumeClaim: + claimName: custom-logs + - name: museum-claim1 + persistentVolumeClaim: + claimName: museum-claim1 + readOnly: true + - name: museum-claim2 + persistentVolumeClaim: + claimName: museum-claim2 + readOnly: true + - name: museum-claim3 + persistentVolumeClaim: + claimName: museum-claim3 + readOnly: true \ No newline at end of file diff --git a/ente-photos/ente-photos-es.yaml b/ente-photos/ente-photos-es.yaml new file mode 100644 index 0000000..17db61e --- /dev/null +++ b/ente-photos/ente-photos-es.yaml @@ -0,0 +1,41 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: template +spec: + refreshInterval: "15s" + secretStoreRef: + name: vault-backend + kind: ClusterSecretStore + target: + name: ente-photos-config + template: + engineVersion: v2 + data: + config: | + db: + host: postgres + port: 5432 + name: ente_db + user: pguser + password: "{{ .pgpass }}" + + s3: + are_local_buckets: false + ente-photos: + key: ente-photos-user + secret: "{{ .ente-pass }}" + endpoint: minio.hensen.io:3200 + region: nl + bucket: ente-photos + + data: + - secretKey: pgpass + remoteRef: + key: ente-photos-postgres + property: password + - secretKey: ente-pass + remoteRef: + key: minio-ente-photos-user + property: password + diff --git a/ente-photos/museum-claim1-persistentvolumeclaim.yaml b/ente-photos/museum-claim1-persistentvolumeclaim.yaml new file mode 100644 index 0000000..04a1b38 --- /dev/null +++ b/ente-photos/museum-claim1-persistentvolumeclaim.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + labels: + io.kompose.service: museum-claim1 + name: museum-claim1 +spec: + accessModes: + - ReadOnlyMany + resources: + requests: + storage: 100Mi diff --git a/ente-photos/museum-claim2-persistentvolumeclaim.yaml b/ente-photos/museum-claim2-persistentvolumeclaim.yaml new file mode 100644 index 0000000..4f0e289 --- /dev/null +++ b/ente-photos/museum-claim2-persistentvolumeclaim.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + labels: + io.kompose.service: museum-claim2 + name: museum-claim2 +spec: + accessModes: + - ReadOnlyMany + resources: + requests: + storage: 100Mi diff --git a/ente-photos/museum-claim3-persistentvolumeclaim.yaml b/ente-photos/museum-claim3-persistentvolumeclaim.yaml new file mode 100644 index 0000000..47c6009 --- /dev/null +++ b/ente-photos/museum-claim3-persistentvolumeclaim.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + labels: + io.kompose.service: museum-claim3 + name: museum-claim3 +spec: + accessModes: + - ReadOnlyMany + resources: + requests: + storage: 100Mi diff --git a/ente-photos/museum-service.yaml b/ente-photos/museum-service.yaml new file mode 100644 index 0000000..5b3b155 --- /dev/null +++ b/ente-photos/museum-service.yaml @@ -0,0 +1,16 @@ +apiVersion: v1 +kind: Service +metadata: + labels: + io.kompose.service: museum + name: museum +spec: + ports: + - name: "8080" + port: 8080 + targetPort: 8080 + - name: "2112" + port: 2112 + targetPort: 2112 + selector: + io.kompose.service: museum