grafana, gitea, etc

freshrss/freshrss-claim0-persistentvolumeclaim.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: freshrss
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 10Gi
+  volumeName: freshrss

freshrss/freshrss-daemonset.yaml

@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    run: freshrss
+  name: freshrss
+spec:
+  selector:
+    matchLabels:
+      run: freshrss
+  template:
+    metadata:
+      labels:
+        run: freshrss
+    spec:
+      containers:
+        - env:
+            - name: PGID
+              value: "1000"
+            - name: PUID
+              value: "1000"
+            - name: TZ
+              value: Europe/London
+          image: ghcr.io/linuxserver/freshrss
+          name: freshrss
+          resources: {}
+          volumeMounts:
+            - mountPath: /config
+              name: freshrss
+      restartPolicy: Always
+      volumes:
+        - name: freshrss
+          persistentVolumeClaim:
+            claimName: freshrss

freshrss/freshrss-ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: freshrss-ingr
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: rss.squi.fr
+      http:
+        paths:
+          - pathType: Prefix
+            backend:
+              service:
+                name: freshrss
+                port:
+                  number: 80
+            path: /
+

freshrss/freshrss-service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: freshrss
+  name: freshrss
+spec:
+  ports:
+    - name: "web"
+      port: 80
+      targetPort: 80
+  selector:
+    run: freshrss

freshrss/freshrss-volumeclaim.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: freshrss
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/freshrss/config"
+  mountOptions:
+    - nfsvers=4.2
+

gitea/gitea-deployment.yaml

@@ -0,0 +1,87 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    run: gitea
+  name: gitea
+spec:
+  selector:
+    matchLabels:
+      run: gitea
+  template:
+    metadata:
+      labels:
+        run: gitea
+    spec:
+      containers:
+        - env:
+            - name: USER_GID
+              value: "1000"
+            - name: USER_UID
+              value: "1000"
+
+          image: gitea/gitea:latest
+          name: gitea
+          ports:
+            - containerPort: 22
+          volumeMounts:
+            - mountPath: /etc/timezone
+              name: timezone
+              readOnly: true
+            - mountPath: /etc/localtime
+              name: localtime
+              readOnly: true
+            - mountPath: /data
+              name: gitea
+              readOnly: false
+      restartPolicy: Always
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /etc/timezone
+            type: File
+        - name: localtime
+          hostPath:
+            path: /etc/localtime
+            type: File
+        - name: gitea
+          persistentVolumeClaim:
+            claimName: gitea
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    run: giteadb
+  name: giteadb
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      run: giteadb
+  template:
+    metadata:
+      labels:
+        run: giteadb
+    spec:
+      containers:
+        - env:
+            - name: MYSQL_DATABASE
+              value: gitea
+            - name: MYSQL_PASSWORD
+              value: ithaibai0C
+            - name: MYSQL_ROOT_PASSWORD
+              value: ithaibai0C
+            - name: MYSQL_USER
+              value: gitea
+          image: mariadb:latest
+          name: mariadb-gitea
+          volumeMounts:
+            - mountPath: /var/lib/mysql
+              name: giteadb
+      restartPolicy: Always
+      volumes:
+        - name: giteadb
+          persistentVolumeClaim:
+            claimName: giteadb

gitea/gitea-ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: gitea-ingr
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: gitea.squi.fr
+      http:
+        paths:
+          - pathType: Prefix
+            backend:
+              service:
+                name: gitea
+                port:
+                  number: 80
+            path: /
+

gitea/gitea-pvc.yaml

@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: gitea
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 50Gi
+  volumeName: gitea
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: giteadb
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 60Gi
+  volumeName: giteadb
+

gitea/gitea-services.yaml

@@ -0,0 +1,45 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: gitea
+  name: gitea
+spec:
+  ports:
+    - name: "gitea"
+      port: 80
+      targetPort: 3000
+  selector:
+    run: gitea
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: giteassh
+  name: giteassh
+spec:
+  ports:
+    - name: "giteassh"
+      port: 3022
+      targetPort: 22
+  selector:
+    run: gitea
+  type: LoadBalancer
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: giteadb
+  name: giteadb
+spec:
+  ports:
+    - name: "mysql"
+      port: 3306
+      targetPort: 3306
+  selector:
+    run: giteadb
+

gitea/gitea-volumeclaims.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: gitea
+spec:
+  capacity:
+    storage: 50Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/gitea/gitea"
+  mountOptions:
+    - nfsvers=4.2
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: giteadb
+spec:
+  capacity:
+    storage: 60Gi
+  accessModes:
+    - ReadWriteOnce
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/gitea/gitea_db"
+  mountOptions:
+    - nfsvers=4.2
+

grafana/graf-deployment.yaml

@@ -0,0 +1,117 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    run: blackbox-exporter
+  name: blackbox-exporter
+spec:
+  selector:
+    matchLabels:
+      run: blackbox-exporter
+  template:
+    metadata:
+      labels:
+        run: blackbox-exporter
+    spec:
+      containers:
+        - image: prom/blackbox-exporter:master
+          name: blackbox-exporter
+          volumeMounts:
+            - mountPath: /etc/blackbox_exporter
+              name: blackbox-exporter
+              readOnly: true
+      restartPolicy: Always
+      volumes:
+        - name: blackbox-exporter
+          persistentVolumeClaim:
+            claimName: blackbox-exporter
+
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    run: grafana
+  name: grafana
+spec:
+  selector:
+    matchLabels:
+      run: grafana
+  template:
+    metadata:
+      labels:
+        run: grafana
+    spec:
+      initContainers:
+        - name: volume-mount-hack
+          image: busybox:1.28
+          command: ["sh", "-c", "chown -R 472:472 /etc/grafana && chown -R 472:472 /var/lib/grafana"]
+          volumeMounts:
+            - mountPath: /var/lib/grafana
+              readOnly: false
+              name: grafana-data
+            - mountPath: /etc/grafana
+              readOnly: false
+              name: grafana-conf
+      volumes:
+        - name: grafana-data
+          persistentVolumeClaim:
+            claimName: grafana-data
+        - name: grafana-conf
+          persistentVolumeClaim:
+            claimName: grafana-conf
+
+      containers:
+        - image: grafana/grafana
+          name: grafana
+          volumeMounts:
+            - mountPath: /var/lib/grafana
+              readOnly: false
+              name: grafana-data
+            - mountPath: /etc/grafana
+              readOnly: false
+              name: grafana-conf
+      restartPolicy: Always
+      volumes:
+        - name: grafana-data
+          persistentVolumeClaim:
+            claimName: grafana-data
+        - name: grafana-conf
+          persistentVolumeClaim:
+            claimName: grafana-conf
+
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    run: prometheus
+  name: prometheus
+spec:
+  selector:
+    matchLabels:
+      run: prometheus
+  template:
+    metadata:
+      labels:
+        run: prometheus
+    spec:
+      containers:
+        - args:
+            - --storage.tsdb.retention.time=1y
+            - --config.file=/etc/prometheus/prometheus.yml
+          image: prom/prometheus
+          name: prometheus
+          ports:
+            - containerPort: 9090
+          volumeMounts:
+            - mountPath: /etc/prometheus
+              readOnly: true
+              name: prometheus
+      restartPolicy: Always
+      volumes:
+        - name: prometheus
+          persistentVolumeClaim:
+            claimName: prometheus
+
+

grafana/graf-ingress.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: grafana-ingr
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: graf.squi.fr
+      http:
+        paths:
+          - pathType: Prefix
+            backend:
+              service:
+                name: grafana 
+                port:
+                  number: 80
+            path: /

grafana/graf-services.yaml

@@ -0,0 +1,46 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: grafana
+  name: grafana
+spec:
+  ports:
+    - name: "grafweb"
+      port: 80
+      targetPort: 3000
+  selector:
+    run: grafana
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: prometheus
+  name: prometheus
+spec:
+  ports:
+    - name: "prom"
+      port: 9090
+      targetPort: 9090
+  selector:
+    run: grafana
+  type: LoadBalancer
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    run: blackbox-exporter
+  name: blackbox-exporter
+spec:
+  ports:
+    - name: "bbox"
+      port: 9115
+      targetPort: 9115
+  selector:
+    run: blackbox-exporter
+
+

grafana/grafana-pvc.yaml

@@ -0,0 +1,56 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: blackbox-exporter
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 10Gi
+  volumeName: blackbox-exporter
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: grafana-data
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 50Gi
+  volumeName: grafana-data
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: grafana-conf
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 10Gi
+  volumeName: grafana-conf
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: prometheus
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 10Gi
+  volumeName: prometheus
+

grafana/grafana-volumeclaims.yaml

@@ -0,0 +1,64 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: blackbox-exporter
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/grafana/blackbox"
+  mountOptions:
+    - nfsvers=4.2
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: grafana-data
+spec:
+  capacity:
+    storage: 50Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/grafana/grafana-data"
+  mountOptions:
+    - nfsvers=4.2
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: grafana-conf
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/grafana/grafana-conf"
+  mountOptions:
+    - nfsvers=4.2
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: prometheus
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: nas.sq.lan
+    path: "/swarmdata/grafana/prometheus-conf"
+  mountOptions:
+    - nfsvers=4.2
+

mediawiki/mediawiki-deployment.yaml

@@ -1,10 +1,11 @@
 apiVersion: apps/v1
-kind: DaemonSet
+kind: Deployment
 metadata:
   labels:
     run: mediawiki
   name: mediawiki
 spec:
+  replicas: 1
   selector:
     matchLabels:
       run: mediawiki

mediawiki/mediawiki-pvc.yaml

@@ -4,7 +4,7 @@ metadata:
   name: wiki-ext
 spec:
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   storageClassName: ""
   resources:
     requests:
@@ -18,7 +18,7 @@ metadata:
   name: wiki-img
 spec:
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   storageClassName: ""
   resources:
     requests:
@@ -32,7 +32,7 @@ metadata:
   name: wiki-set
 spec:
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   storageClassName: ""
   resources:
     requests:
@@ -46,7 +46,7 @@ metadata:
   name: wiki-skins
 spec:
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   storageClassName: ""
   resources:
     requests:

mediawiki/mediawiki-volumeclaims.yaml

@@ -6,7 +6,7 @@ spec:
   capacity:
     storage: 60Gi
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   nfs:
     server: nas.sq.lan
     path: "/swarmdata/mediawiki/images"
@@ -22,7 +22,7 @@ spec:
   capacity:
     storage: 10Gi
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   nfs:
     server: nas.sq.lan
     path: "/swarmdata/mediawiki/"
@@ -38,7 +38,7 @@ spec:
   capacity:
     storage: 10Gi
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   nfs:
     server: nas.sq.lan
     path: "/swarmdata/mediawiki/skins"
@@ -54,7 +54,7 @@ spec:
   capacity:
     storage: 10Gi
   accessModes:
-    - ReadWriteOnce
+    - ReadWriteMany
   nfs:
     server: nas.sq.lan
     path: "/swarmdata/mediawiki/extensions"