ungleich-k8s/ldap/templates/deployment.yaml

103 lines
2.3 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: {{ .Release.Name }}-openldap
spec:
selector:
matchLabels:
instance: {{ .Release.Name }}-openldap
replicas: 1
template:
metadata:
labels:
app: openldap
instance: {{ .Release.Name }}-openldap
spec:
containers:
- name: openldap
image: osixia/openldap:1.5.0
ports:
- containerPort: 389
- containerPort: 636
volumeMounts:
- name: openldap-data
mountPath: "/var/lib/ldap"
resources:
requests:
memory: "64Mi"
cpu: "100m"
limits:
memory: "256Mi"
cpu: "400m"
- name: phpldapadmin
image: osixia/phpldapadmin:0.9.0
ports:
- containerPort: 80
- containerPort: 443
env:
- key: PHPLDAPADMIN_LDAP_HOSTS
value: {{ .Release.Name }}-openldap
resources:
requests:
memory: "64Mi"
cpu: "100m"
limits:
memory: "256Mi"
cpu: "400m"
volumes:
- name: openldap-data
persistentVolumeClaim:
claimName: {{ tpl .Values.identifier . }}-openldap-data
apiVersion: v1
kind: Service
metadata:
name: {{ .Release.Name }}-openldap
labels:
instance: {{ .Release.Name }}-openldap
app: openldap
spec:
type: ClusterIP
ports:
- port: 389
name: openldap
- port: 636
name: openldap-ssl
selector:
instance: {{ .Release.Name }}-openldap
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: {{ tpl .Values.identifier . }}-letsencrypt-certs
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 50Mi
storageClassName: rook-ceph-block
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: {{ tpl .Values.identifier . }}-openldap-data
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: {{ .Values.dbsizeingb }}Gi
storageClassName: rook-ceph-block
# ---
# apiVersion: v1
# kind: Secret
# metadata:
# name: {{ tpl .Values.identifier . }}-openldap-config
# annotations:
# secret-generator.v1.mittwald.de/autogenerate: OPENLDAP_PASSWORD
# stringData:
# OPENLDAP_USER: "openldap"
# OPENLDAP_DB: "zammad"