cluster

commit e71103056d091f72ab7cc024169e3f0f62511f2f
parent 834dd070fe972fc4a336c9edd8282507f134a0f4
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu,  4 Jan 2024 17:38:05 +0100

Prepare umami

Diffstat:
A
apps/base/umami/deployment.yaml
 | 
37
+++++++++++++++++++++++++++++++++++++
A
apps/base/umami/kustomization.yaml
 | 
6
++++++
A
apps/base/umami/service.yaml
 | 
36
++++++++++++++++++++++++++++++++++++
M
apps/namespaces/kustomization.yaml
 | 
1
+
A
apps/namespaces/umami.yaml
 | 
4
++++
A
apps/production/secrets/umami.yaml
 | 
32
++++++++++++++++++++++++++++++++
M
infrastructure/configs/postgres-clusters.yaml
 | 
2
++

7 files changed, 118 insertions(+), 0 deletions(-)
diff --git a/apps/base/umami/deployment.yaml b/apps/base/umami/deployment.yaml
@@ -0,0 +1,37 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: umami
+  namespace: umami
+spec:
+  selector:
+    matchLabels:
+      app: umami
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: umami
+    spec:
+      containers:
+      - name: umami
+        image: ghcr.io/umami-software/umami:postgresql-latest
+        ports:
+        - containerPort: 3000
+          name: umami
+        env:
+        - name: DATABASE_TYPE
+          value: postgresql
+        - name: DATABASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: zammad.matrix-postgres-cluster.credentials.postgresql.acid.zalan.do
+              key: database-url
+        - name: HASH_SALT
+          valueFrom:
+            secretKeyRef:
+              name: umami-config
+              key: hash-salt
+      nodeSelector:
+        kubernetes.io/hostname: fsn-qws-app2
diff --git a/apps/base/umami/kustomization.yaml b/apps/base/umami/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: umami
+resources:
+  - deployment.yaml
+  - service.yaml
diff --git a/apps/base/umami/service.yaml b/apps/base/umami/service.yaml
@@ -0,0 +1,36 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: umami
+  namespace: umami
+spec:
+  ports:
+  - port: 3000
+    name: web
+  selector:
+    app: umami
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: umami
+  namespace: umami
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-http
+spec:
+  tls:
+  - hosts:
+    - umami.nordgedanken.dev
+    secretName: umami-certs
+  rules:
+  - host: umami.nordgedanken.dev
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: umami
+            port:
+              number: 3000
diff --git a/apps/namespaces/kustomization.yaml b/apps/namespaces/kustomization.yaml
@@ -20,3 +20,4 @@ resources:
   - zuul-system.yaml
   - zuul.yaml
   - piwigo.yaml
+  - umami.yaml
diff --git a/apps/namespaces/umami.yaml b/apps/namespaces/umami.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: umami
diff --git a/apps/production/secrets/umami.yaml b/apps/production/secrets/umami.yaml
@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: umami-config
+    namespace: umami
+type: Opaque
+stringData:
+    #ENC[AES256_GCM,data:fEW8+dtT65GRvnspdIoBAtF18hwy6y+AuTKTJZ+z5O3jCKKx+FRVP2fyfR/FGDgDlas6zUwuPL9OyppJ,iv:r1fcafN4iQv/hgMkNn0beBwQ73DM8YoIsgtf/UWBSwc=,tag:R4VVNxWK81J1UyjKEBivcA==,type:comment]
+    pg-password: ENC[AES256_GCM,data:oY10oFLKFtbIgmQ=,iv:QLVQYHLJqSfNmxlNVzUc/oF0jKxhR8NGF60uQghgEC8=,tag:jf1VWHsMAYo7DCRtQSLakQ==,type:str]
+    database-url: ENC[AES256_GCM,data:fHepKJwZtsQsZWxHVilKc0Kataa/3zDhw1CZu9ZxDiInsaAgRBr3aL0O3gn7V9C7WPmWEQBDsEnJTWLcHQwdxbqNMO/SupX95HCIFiRbWhlMeE9X1yE9OSg/5eRyVYO0qTxUgenrujPnXqU=,iv:2EaE1QpUZTEXMClOj9nYhw2Z9pDIUKcENQY2a4TKbvY=,tag:zGhhm4F79bZPTQa4q0zhgg==,type:str]
+    #ENC[AES256_GCM,data:xx+RkDvzozpieIch6/RhvonAWxpefbYv67whduBYEpcKienpI02APS/K9Z2jiDXJqsI=,iv:bWdCdW6yvLrS0A9rARyh7R67PIZ1qHvCLH8KKuD0ymc=,tag:T/gGoctXq0GQETJWc0sE5g==,type:comment]
+    hash-salt: ENC[AES256_GCM,data:ROxltx5i9+QMfIhS0kwYIvxTwfJ5/+PLMLj514AY6ztyOKDHcefT/zZ6HJ4=,iv:INQbDHOmPJCISSJci8DlMgXVvou7EThagAMU96zB5JE=,tag:dYu70N3bCY4D2Locy0DGAw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwMkJCcVRBcUdpS2pGVzJM
+            VXdLNEtDMVhFQmhhajExNzJzeGI4U3pDMlhjCjZLaEpvdHZQSE5zR3NVMHFMdnhz
+            VzVjRzk2ZlpPSVVRYStlUDllYjR4UEkKLS0tIEF3ZjlJQitGeGhNWmlJNTNpNllh
+            U2lJcm5OTHc0N0tLZUJoQkN2eXE5T28KIcWKOAg0VfUJ1L2IagfhPhHOhRFvhqhT
+            39iOJNmeqRB8YiqnjnhRoJG/h5JppKFaPL4DWtR+VQN+uA1qdwvO1g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-01-04T16:37:56Z"
+    mac: ENC[AES256_GCM,data:kXpPtqadpxbAOHU2RPSSDF1ma6AqF8cWMClUDroc+9t+7whs6cm9xj9O82kiOaro08pBJZoZia8kky/XIYQosGxuu87ANYOi2fX+QeaQxh9zZnjhach3itt+NP2f3MX/zqiqNgcAq7BYw8g3daJjIBnsB1Cl+35Qxbtjp3WtXpY=,iv:23ajzADIDTXcKOYaUINBxnAJxnLebLRT1IvsxQcSPRc=,tag:lx9TdT+JqbajhlWPGd4fKQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+    version: 3.8.1
diff --git a/infrastructure/configs/postgres-clusters.yaml b/infrastructure/configs/postgres-clusters.yaml
@@ -28,6 +28,7 @@ spec:
     zammad: zammad
     bench: bench
     paperless: paperless
+    umami: umami
   numberOfInstances: 3
   resources:
     requests:
@@ -112,6 +113,7 @@ spec:
     zammad: []
     bench: []
     paperless: []
+    umami: []
   volume:
     size: 50Gi
     #    storageClass: nfs-client