|
17
|
1 apiVersion: v1
|
|
|
2 kind: PersistentVolume
|
|
|
3 metadata:
|
|
|
4 name: pomerium-db-data
|
|
|
5 labels:
|
|
|
6 type: local
|
|
|
7 spec:
|
|
|
8 storageClassName: manual
|
|
|
9 hostPath:
|
|
|
10 path: "/opt/pomerium-db"
|
|
|
11 capacity:
|
|
|
12 storage: 50Gi
|
|
|
13 accessModes:
|
|
|
14 - ReadWriteOnce
|
|
|
15 persistentVolumeReclaimPolicy: Retain
|
|
|
16 claimRef:
|
|
|
17 namespace: pomerium
|
|
|
18 name: pomerium-db-data
|
|
|
19 ---
|
|
|
20 apiVersion: v1
|
|
|
21 kind: PersistentVolumeClaim
|
|
|
22 metadata:
|
|
|
23 namespace: pomerium
|
|
|
24 name: pomerium-db-data
|
|
|
25 spec:
|
|
|
26 storageClassName: ""
|
|
|
27 volumeName: "pomerium-db-data"
|
|
|
28 accessModes:
|
|
|
29 - ReadWriteOnce
|
|
|
30 resources:
|
|
|
31 requests:
|
|
|
32 storage: 50Gi
|
|
|
33 ---
|
|
|
34 apiVersion: apps/v1
|
|
|
35 kind: Deployment
|
|
|
36 metadata:
|
|
|
37 namespace: pomerium
|
|
|
38 name: pomerium-db
|
|
|
39 spec:
|
|
|
40 replicas: 1
|
|
19
|
41 strategy: { type: Recreate }
|
|
17
|
42 selector:
|
|
|
43 matchLabels:
|
|
|
44 app: pomerium-db
|
|
|
45 template:
|
|
|
46 metadata:
|
|
|
47 labels:
|
|
|
48 app: pomerium-db
|
|
|
49 annotations:
|
|
|
50 prometheus.io/scrape: "false"
|
|
|
51 spec:
|
|
|
52 volumes:
|
|
|
53 - name: pomerium-db-data
|
|
|
54 persistentVolumeClaim:
|
|
|
55 claimName: pomerium-db-data
|
|
|
56 containers:
|
|
|
57 # see /my/serv/photoprism/deploy.yaml for exporter example (for mariadb)
|
|
|
58 - name: pomerium-db
|
|
|
59 image: postgres:14.2-alpine3.15
|
|
|
60 env:
|
|
19
|
61 - { name: POSTGRES_PASSWORD, value: admin }
|
|
|
62 - { name: POSTGRES_DB, value: pomerium }
|
|
17
|
63 ports:
|
|
19
|
64 - containerPort: 5432
|
|
17
|
65 volumeMounts:
|
|
19
|
66 - name: pomerium-db-data
|
|
|
67 mountPath: /var/lib/postgresql/data
|
|
17
|
68 affinity:
|
|
|
69 nodeAffinity:
|
|
|
70 requiredDuringSchedulingIgnoredDuringExecution:
|
|
|
71 nodeSelectorTerms:
|
|
19
|
72 - matchExpressions:
|
|
|
73 - key: "kubernetes.io/hostname"
|
|
|
74 operator: In
|
|
|
75 values: ["ditto"]
|
|
17
|
76 ---
|
|
|
77 apiVersion: v1
|
|
|
78 kind: Service
|
|
|
79 metadata:
|
|
|
80 namespace: pomerium
|
|
|
81 name: pomerium-db
|
|
|
82 spec:
|
|
|
83 ports:
|
|
19
|
84 - port: 5432
|
|
|
85 targetPort: 5432
|
|
17
|
86 selector:
|
|
|
87 app: pomerium-db
|
|
|
88 ---
|
|
|
89 apiVersion: v1
|
|
|
90 kind: Secret
|
|
|
91 metadata:
|
|
|
92 namespace: pomerium
|
|
|
93 name: postgres-connection-key
|
|
|
94 type: Opaque
|
|
19
|
95 stringData:
|
|
17
|
96 connection: postgresql://pom:pom@pomerium-db/pomerium
|
