Remove old deployments. Add keycloak.

deployments/kanboard-deployment.yaml

@@ -1,104 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kanboard-pvc
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: local-path
-  resources:
-    requests:
-      storage: 2Gi
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kanboard-deployment
-  labels:
-    app: kanboard
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: kanboard
-  template:
-    metadata:
-      labels:
-        app: kanboard
-    spec:
-      containers:
-      - name: oauth-proxy
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.4.0
-        args:
-        - --cookie-secret=`$COOKIE_SECRET`
-        - --cookie-secure=false
-        - --email-domain=*
-        - --provider=keycloak-oidc
-        - --client-id=kanboard
-        - --client-secret=oT6dMBS87jc385utLumMoffJ9MqLEGRY
-        - --redirect-url=https://kanboard.jpace121.net
-        - --oidc-issuer-url=https://auth.jpace121.net/realms/jpace121-main
-        - --reverse-proxy=true
-        - --upstream=http://localhost:80/
-        - --http-address=0.0.0.0:8080
-        ports:
-        - containerPort: 8080
-        env:
-        - name: COOKIE_SECRET
-          valueFrom:
-            secretKeyRef:
-              name: kanboard-cookie
-              key: cookie-secret
-      - name: kanboard-app
-        image: 192.168.1.149:8443/kanboard:latest
-        ports:
-        - containerPort: 80
-        - containerPort: 443
-        env:
-        - name: DATABASE_URL
-          value: "postgres://postgres:jdsjkksksklw@localhost/kanboard"
-      - name: kanboard-db
-        image: docker.io/library/postgres:bullseye
-        env:
-        - name: POSTGRES_DB
-          value: "kanboard"
-        - name: POSTGRES_PASSWORD
-          value: "jdsjkksksklw"
-        volumeMounts:
-        - name: db-storage
-          mountPath: "/var/lib/postgresql/data"
-      volumes:
-      - name: db-storage
-        persistentVolumeClaim:
-          claimName: kanboard-pvc
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: kanboard-service
-spec:
-  selector:
-    app: kanboard
-  ports:
-    - protocol: TCP
-      targetPort: 8080
-      port: 80
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: kanboard-ingress
-spec:
-  rules:
-  - host: kanboard.jpace121.net
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: kanboard-service
-            port:
-              number: 80

deployments/onedev.yaml

@@ -1,340 +0,0 @@
----
-# Source: onedev/templates/serviceaccount.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: onedev
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
----
-# Source: onedev/templates/secret.yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  name: onedev-mysql
-stringData:
-  password: changeit
----
-# Source: onedev/templates/persistentvolumeclaim.yaml
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: onedev
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-    tier: onedev
-  annotations:
-    "helm.sh/resource-policy": keep
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 100Gi
----
-# Source: onedev/templates/persistentvolumeclaim.yaml
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: onedev-mysql
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-    tier: mysql
-  annotations:
-    "helm.sh/resource-policy": keep
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 20Gi
----
-# Source: onedev/templates/clusterrole.yaml
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: onedev
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-rules:
-  - apiGroups: [""]
-    resources: ["namespaces"]
-    verbs: ["get", "list", "create", "delete"] #require this permission to run builds in isolated namespaces
-  - apiGroups: ["rbac.authorization.k8s.io"]
-    resources: ["clusterrolebindings"]
-    verbs: ["get", "list", "create", "delete"] #require this permission to bind cluster roles to service account of running builds
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list"] #require this permission to search nodes matching executor criterias
-  - apiGroups: [""]
-    resources: ["services", "pods", "pods/log", "pods/exec", "secrets", "configmaps", "events"]
-    verbs: ["get", "list", "watch", "create", "patch", "delete"] #require this permission to run builds as pods
-  - apiGroups: ["apps"]
-    resources: ["deployments"]
-    verbs: ["get", "list", "create", "patch", "delete"] #require this permission to run builds as pods
----
-# Source: onedev/templates/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: onedev
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-subjects:
-  - kind: ServiceAccount
-    namespace: default
-    name: onedev
-roleRef:
-  kind: ClusterRole
-  name: onedev
-  apiGroup: rbac.authorization.k8s.io
----
-# Source: onedev/templates/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: onedev
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-    tier: onedev
-  annotations:
-    null
-spec:
-  type: ClusterIP
-  ports:
-    - name: http
-      port: 80
-      targetPort: 6610
-      protocol: TCP
-    - name: ssh
-      port: 2222
-      targetPort: 6611
-      protocol: TCP
-  selector:
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    tier: onedev
----
-# Source: James Custom
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: onedev-ssh
-spec:
-  type: NodePort
-  ports:
-    - name: ssh
-      port: 22
-      targetPort: 6611
-      protocol: TCP
-  selector:
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    tier: onedev
----
-# Source: onedev/templates/service.yaml
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: onedev-mysql
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-    tier: mysql
-spec:
-  ports:
-    - port: 3306
-  selector:
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    tier: mysql
----
-# Source: onedev/templates/deployment.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: onedev
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-    tier: onedev
-spec:
-  replicas: 1 # only allow one replicas as OneDev doesn't support clustering
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: onedev
-      app.kubernetes.io/instance: onedev
-      tier: onedev
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      name: onedev
-      labels:
-        app.kubernetes.io/name: onedev
-        app.kubernetes.io/instance: onedev
-        tier: onedev
-    spec:
-      serviceAccountName: onedev
-      nodeSelector: 
-        kubernetes.io/os: linux
-      containers:
-        - name: onedev
-          resources:
-            requests:
-              memory: 1024Mi
-          volumeMounts:
-          - mountPath: "/opt/onedev"
-            name: onedev
-          image: "1dev/server:7.9.2"
-          ports:
-            - containerPort: 6610
-            - containerPort: 6611
-          env:
-          - name: k8s_service
-            value: onedev
-          - name: ingress_host
-            value: onedev.intenral.jpace121.net
-          - name: ingress_tls
-            value: "false"
-          - name: hibernate_dialect
-            value: org.hibernate.dialect.MySQL5InnoDBDialect
-          - name: hibernate_connection_driver_class
-            value: com.mysql.cj.jdbc.Driver
-          - name: hibernate_connection_url
-            value: jdbc:mysql://onedev-mysql:3306/onedev?serverTimezone=UTC&allowPublicKeyRetrieval=true&useSSL=false
-          - name: hibernate_connection_username
-            value: root
-          - name: hibernate_connection_password
-            valueFrom:
-              secretKeyRef:
-                name: onedev-mysql
-                key: password
-          - name: hibernate_hikari_maximumPoolSize
-            value: "25"
-      initContainers:
-        - name: init
-          image: busybox
-          command: ["sh", "-c", "until nslookup onedev-mysql.default.svc.cluster.local; do echo waiting for mysql; sleep 2; done;"]
-      volumes:
-        - name: onedev
-          persistentVolumeClaim:
-            claimName: onedev
----
-# Source: onedev/templates/deployment.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: onedev-mysql
-  labels:
-    helm.sh/chart: onedev-7.8.5
-    app.kubernetes.io/name: onedev
-    app.kubernetes.io/instance: onedev
-    app.kubernetes.io/version: "7.8.5"
-    app.kubernetes.io/managed-by: Helm
-    tier: mysql
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: onedev
-      app.kubernetes.io/instance: onedev
-      tier: mysql 
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      name: onedev-mysql
-      labels:
-        app.kubernetes.io/name: onedev
-        app.kubernetes.io/instance: onedev
-        tier: mysql
-    spec:
-      nodeSelector: 
-        kubernetes.io/os: linux
-      containers:
-        - name: mysql
-          image: mysql:5.7
-          args:
-            - "--character-set-server=utf8mb4"
-            - "--collation-server=utf8mb4_unicode_ci"
-            - "--ignore-db-dir=lost+found"
-          env:
-            - name: MYSQL_DATABASE
-              value: onedev
-            - name: MYSQL_ROOT_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: onedev-mysql
-                  key: password
-          ports:
-            - containerPort: 3306
-          resources:
-            requests:
-              memory: 256Mi
-          volumeMounts:
-            - name: mysql
-              mountPath: /var/lib/mysql
-          readinessProbe:
-            exec:
-              command:
-                - bash
-                - "-c"
-                - |
-                  mysql -uroot -p$MYSQL_ROOT_PASSWORD -e 'SELECT 1'
-            initialDelaySeconds: 5
-            periodSeconds: 2
-            timeoutSeconds: 1
-      volumes:
-        - name: mysql
-          persistentVolumeClaim:
-            claimName: onedev-mysql
----
-# Source: onedev/templates/ingress.yaml
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: onedev
-spec:
-  rules:
-    - host: onedev.internal.jpace121.net
-      http:
-        paths:
-        - path: /
-          pathType: Prefix
-          backend:
-            service:
-              name: onedev
-              port:
-                number: 80