deployment.yaml (14091B)
1 apiVersion: apps/v1 2 kind: Deployment 3 metadata: 4 name: bugzilla 5 labels: 6 app.kubernetes.io/name: bugzilla 7 app.kubernetes.io/instance: bugzilla 8 spec: 9 replicas: 0 10 selector: 11 matchLabels: 12 app.kubernetes.io/name: bugzilla 13 app.kubernetes.io/instance: bugzilla 14 template: 15 metadata: 16 labels: 17 app.kubernetes.io/name: bugzilla 18 app.kubernetes.io/instance: bugzilla 19 annotations: 20 prometheus.io/scrape: "true" 21 prometheus.io/port: "9117" 22 spec: 23 initContainers: 24 - name: init-bugzilla-vol 25 image: alpine:3.21 26 command: 27 - chown 28 - -R 29 - 10001:10001 30 - /app/data 31 volumeMounts: 32 - mountPath: /app/data 33 name: bugzilla-data 34 containers: 35 - name: bugzilla 36 image: ghcr.io/mtrnord/bugzilla:latest 37 imagePullPolicy: Always 38 securityContext: 39 runAsUser: 10001 40 runAsGroup: 10001 41 fsGroup: 10001 42 resources: 43 limits: 44 cpu: 100m 45 memory: 512Mi 46 requests: 47 cpu: 100m 48 memory: 512Mi 49 args: 50 - while true; do sleep 30; done; 51 command: 52 - /bin/bash 53 - -c 54 - -- 55 env: 56 - name: BMO_urlbase 57 value: https://bugzilla.midnightthoughts.space/ 58 - name: BMO_db_driver 59 value: mysql 60 - name: BMO_db_host 61 value: mariadb-maxscale.mariadb-operator.svc.cluster.local 62 - name: BMO_db_user 63 value: bugzilla 64 - name: PORT 65 value: "8000" 66 #- name: MOJO_REVERSE_PROXY 67 # value: "1" 68 # value: pg 69 - name: BMO_db_name 70 value: bugzilla 71 - name: BMO_db_pass 72 valueFrom: 73 secretKeyRef: 74 name: bugzilla 75 key: ENC[AES256_GCM,data:btiBZRM7WpcB/fo=,iv:+DnT6m1VkLR6zovn97uFgsbt6IpX2wYeGsnK6l6wtkg=,tag:6TvBlVoHBVxPq/ImXH+cIA==,type:str] 76 - name: BMO_site_wide_secret 77 valueFrom: 78 secretKeyRef: 79 name: bugzilla 80 key: ENC[AES256_GCM,data:U611SuKuZ9qPJADOysIlxw==,iv:4Si5ieeNQDJtS79Y79IfSdYJZ5vnr5LeAkS6UEN8970=,tag:ldtHmaZnkQZ9hDbItOGJZg==,type:str] 81 - name: BMO_jwt_secret 82 valueFrom: 83 secretKeyRef: 84 name: bugzilla 85 key: ENC[AES256_GCM,data:7TvEhWnoyJEOIw==,iv:scYQHkuQd2Q/HoqtKy6Lx7m4AmgAFXi0R2Cx3gcScVA=,tag:rq0X4Q+JC5WsdHTtEoMJNQ==,type:str] 86 #- name: BMO_inbound_proxies 87 # value: "*" 88 - name: BMO_memcached_servers 89 value: "" 90 - name: BMO_memcached_namespace 91 value: "" 92 - name: MOJO_WORKERS 93 value: "3" 94 ports: 95 - name: http 96 containerPort: 8000 97 protocol: TCP 98 livenessProbe: 99 httpGet: 100 path: / 101 port: http 102 readinessProbe: 103 httpGet: 104 path: / 105 port: http 106 volumeMounts: 107 - mountPath: /app/data 108 name: bugzilla-data 109 volumes: 110 - name: bugzilla-data 111 persistentVolumeClaim: 112 claimName: bugzilla-data 113 sops: 114 kms: [] 115 gcp_kms: [] 116 azure_kv: [] 117 hc_vault: [] 118 age: 119 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 120 enc: | 121 -----BEGIN AGE ENCRYPTED FILE----- 122 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy 123 YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 124 bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay 125 MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl 126 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== 127 -----END AGE ENCRYPTED FILE----- 128 lastmodified: "2025-03-31T14:12:11Z" 129 mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] 130 pgp: [] 131 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 132 version: 3.9.1 133 --- 134 apiVersion: v1 135 kind: Service 136 metadata: 137 name: bugzilla 138 labels: 139 app.kubernetes.io/name: bugzilla 140 app.kubernetes.io/instance: bugzilla 141 spec: 142 ports: 143 - name: http 144 port: 8000 145 targetPort: http 146 selector: 147 app.kubernetes.io/name: bugzilla 148 app.kubernetes.io/instance: bugzilla 149 sops: 150 kms: [] 151 gcp_kms: [] 152 azure_kv: [] 153 hc_vault: [] 154 age: 155 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 156 enc: | 157 -----BEGIN AGE ENCRYPTED FILE----- 158 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy 159 YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 160 bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay 161 MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl 162 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== 163 -----END AGE ENCRYPTED FILE----- 164 lastmodified: "2025-03-31T14:12:11Z" 165 mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] 166 pgp: [] 167 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 168 version: 3.9.1 169 --- 170 apiVersion: v1 171 kind: PersistentVolumeClaim 172 metadata: 173 name: bugzilla-data 174 spec: 175 accessModes: 176 - ReadWriteMany 177 resources: 178 requests: 179 storage: 2Gi 180 sops: 181 kms: [] 182 gcp_kms: [] 183 azure_kv: [] 184 hc_vault: [] 185 age: 186 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 187 enc: | 188 -----BEGIN AGE ENCRYPTED FILE----- 189 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy 190 YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 191 bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay 192 MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl 193 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== 194 -----END AGE ENCRYPTED FILE----- 195 lastmodified: "2025-03-31T14:12:11Z" 196 mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] 197 pgp: [] 198 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 199 version: 3.9.1 200 --- 201 apiVersion: v1 202 kind: Secret 203 metadata: 204 name: bugzilla 205 type: Opaque 206 stringData: 207 password: ENC[AES256_GCM,data:5le4XY8+PjUNffEZJOPo4x3m6HS57Ns34GQNIYsZ2t3mnDdbAv8F1tmg9/cvzdc3JT1WjqvY/lvWWweIhrBBVA==,iv:IojlNhAzuTBFgHCAnb39O7VXsdU0tX4fXSiFPBbQipk=,tag:DpQPqwMFQTINZReTaRO0vQ==,type:str] 208 site_wide_secret: ENC[AES256_GCM,data:KJXodfkVU9x2CJicLR9riZfqp5k/OKuM70pooZcqx0vBi4Tw22BaKOkV/9IW0lYJ9h4LV+MUria601Wd0W/IEg==,iv:Y0Cwe5CqLReLYpnc5XhHo/rp8/DgE/xv6yEmyL8lXSA=,tag:KwQTZ0otdetpf0ZD5sXQGA==,type:str] 209 sops: 210 kms: [] 211 gcp_kms: [] 212 azure_kv: [] 213 hc_vault: [] 214 age: 215 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 216 enc: | 217 -----BEGIN AGE ENCRYPTED FILE----- 218 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy 219 YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 220 bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay 221 MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl 222 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== 223 -----END AGE ENCRYPTED FILE----- 224 lastmodified: "2025-03-31T14:12:11Z" 225 mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] 226 pgp: [] 227 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 228 version: 3.9.1 229 --- 230 apiVersion: gateway.networking.k8s.io/v1 231 kind: HTTPRoute 232 metadata: 233 name: bugzilla 234 namespace: bugzilla 235 spec: 236 parentRefs: 237 - name: envoy-gateway 238 namespace: envoy-gateway 239 hostnames: 240 - bugzilla.midnightthoughts.space 241 rules: 242 - backendRefs: 243 - name: bugzilla 244 port: 8000 245 timeouts: 246 request: 240s 247 backendRequest: 0s 248 sops: 249 kms: [] 250 gcp_kms: [] 251 azure_kv: [] 252 hc_vault: [] 253 age: 254 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 255 enc: | 256 -----BEGIN AGE ENCRYPTED FILE----- 257 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy 258 YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 259 bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay 260 MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl 261 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== 262 -----END AGE ENCRYPTED FILE----- 263 lastmodified: "2025-03-31T14:12:11Z" 264 mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] 265 pgp: [] 266 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 267 version: 3.9.1