This commit is contained in:
2023-10-18 18:21:30 +02:00
parent 2197dd83a0
commit 1fac3163f7
3 changed files with 55 additions and 67 deletions

View File

@@ -44,8 +44,6 @@ locals {
"OAUTH_LOGIN_FIELD" = "nickname"
"OAUTH_SCOPE" = "email"
}
connections = join(",",concat(local.pg_conns, local.maria_conns, local.mongo_conns))
connection_vars = merge(local.pg_vars, local.maria_vars, local.mongo_vars)
connection_secrets = merge(local.pg_secrets,local.mongo_secrets)

View File

@@ -40,23 +40,20 @@ resource "kubectl_manifest" "deploy" {
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsUser: 0
runAsUser: 1000
containers:
- name: dbgate
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsNonRoot: false
runAsUser: 0
runAsNonRoot: true
runAsUser: 1000
envFrom:
- secretRef:
name: "${var.component}-${var.instance}"
- configMapRef:
name: "${var.component}-${var.instance}"
env: ${jsonencode(local.deploy-envs)}
command:
- "/bin/bash"
- "/start.sh"
image: "${var.images.dbgate.registry}/${var.images.dbgate.repository}:${var.images.dbgate.tag}"
imagePullPolicy: "${var.images.dbgate.pullPolicy}"
ports:
@@ -87,9 +84,6 @@ resource "kubectl_manifest" "deploy" {
readOnly: true
- name: data
mountPath: /home/node/.dbgate
- name: init
mountPath: "/start.sh"
subPath: "start.sh"
restartPolicy: Always
volumes:
- name: certs
@@ -101,9 +95,5 @@ resource "kubectl_manifest" "deploy" {
claimName: "${var.component}-${var.instance}"
- name: run
emptyDir: {}
- name: init
configMap:
name: "${var.component}-${var.instance}-init"
defaultMode: 0777
EOF
}

View File

@@ -6,12 +6,12 @@ metadata:
name: dbgate
description: null
options:
issuer:
default: letsencrypt-prod
app-group:
default: dev
examples:
- letsencrypt-prod
- dev
type: string
maria:
mongo:
default: []
examples:
- []
@@ -40,11 +40,6 @@ options:
type: string
type: object
type: array
use-oauth:
default: false
examples:
- false
type: boolean
images:
default:
dbgate:
@@ -84,30 +79,54 @@ options:
type: string
type: object
type: object
domain-name:
default: your_company.com
issuer:
default: letsencrypt-prod
examples:
- your_company.com
- letsencrypt-prod
type: string
domain:
default: your-company
use-oauth:
default: false
examples:
- your-company
type: string
ingress-class:
default: traefik
examples:
- traefik
type: string
- false
type: boolean
sub-domain:
default: dbgate
examples:
- dbgate
type: string
app-group:
default: dev
maria:
default: []
examples:
- dev
- []
items:
properties:
dbname:
default: ''
type: string
name:
default: ''
type: string
namespace:
default: ''
type: string
secret:
properties:
key:
default: ''
type: string
name:
default: ''
type: string
type: object
username:
default: ''
type: string
type: object
type: array
domain:
default: your-company
examples:
- your-company
type: string
storage:
default:
@@ -136,6 +155,11 @@ options:
- Block
type: string
type: object
ingress-class:
default: traefik
examples:
- traefik
type: string
pg:
default: []
examples:
@@ -165,35 +189,11 @@ options:
type: string
type: object
type: array
mongo:
default: []
domain-name:
default: your_company.com
examples:
- []
items:
properties:
dbname:
default: ''
type: string
name:
default: ''
type: string
namespace:
default: ''
type: string
secret:
properties:
key:
default: ''
type: string
name:
default: ''
type: string
type: object
username:
default: ''
type: string
type: object
type: array
- your_company.com
type: string
dependencies:
- dist: null
category: share