phpipam: Add manifest for phpipam

phpipam/phpipam.yaml

@@ -0,0 +1,220 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    app.kubernetes.io/instance: phpipam
+    app.kubernetes.io/name: phpipam
+  name: phpipam
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: phpipam-pvc
+  namespace: phpipam
+spec:
+  accessModes:
+  - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  labels:
+    app.kubernetes.io/component: phpipam-db
+    app.kubernetes.io/name: phpipam
+    app.kubernetes.io/instance: phpipam
+    app.kubernetes.io/part-of: phpipam
+  name: phpipam-db
+  namespace: phpipam
+spec:
+  serviceName: phpipam-db
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: phpipam-db
+      app.kubernetes.io/name: phpipam
+      app.kubernetes.io/instance: phpipam
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: phpipam-db
+        app.kubernetes.io/name: phpipam
+        app.kubernetes.io/instance: phpipam
+    spec:
+      containers:
+      - image: docker.io/mariadb
+        imagePullPolicy: IfNotPresent
+        name: phpipam-mariadb
+        env:
+        - name: MYSQL_ROOT_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: phpipam-mysql-root
+              key: password
+        - name: MYSQL_DATABASE
+          value: phpipam
+        - name: MYSQL_USER
+          value: phpipam
+        - name: MYSQL_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: phpipam-mysql
+              key: password
+        volumeMounts:
+        - mountPath: /var/lib/mysql
+          name: phpipam-db
+      volumes:
+      - name: phpipam-db
+        persistentVolumeClaim:
+          claimName: phpipam-pvc
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/component: phpipam-www
+    app.kubernetes.io/name: phpipam
+    app.kubernetes.io/instance: phpipam
+    app.kubernetes.io/part-of: phpipam
+  name: phpipam
+  namespace: phpipam
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: phpipam-www
+      app.kubernetes.io/name: phpipam
+      app.kubernetes.io/instance: phpipam
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: phpipam-www
+        app.kubernetes.io/name: phpipam
+        app.kubernetes.io/instance: phpipam
+    spec:
+      containers:
+      - image: registry.pyrocufflink.blue/phpipam/phpipam-www:1.5x
+        imagePullPolicy: IfNotPresent
+        name: phpipam-web
+        ports:
+        - containerPort: 80
+          name: http
+        env:
+        - name: IPAM_DATABASE_HOST
+          value: phpipam-db
+        - name: IPAM_DATABASE_PASS
+          valueFrom:
+            secretKeyRef:
+              name: phpipam-mysql
+              key: password
+        - name: IPAM_DATABASE_WEBHOST
+          value: '%'
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+            - NET_RAW
+      - image: docker.io/phpipam/phpipam-cron:1.5x
+        imagePullPolicy: IfNotPresent
+        name: phpipam-cron
+        env:
+        - name: IPAM_DATABASE_HOST
+          value: phpipam-db
+        - name: IPAM_DATABASE_PASS
+          valueFrom:
+            secretKeyRef:
+              name: phpipam-mysql
+              key: password
+        - name: SCAN_INTERVAL
+          value: 1h
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+            - NET_RAW
+      affinity:
+        podAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 1
+              podAffinityTerm:
+                labelSelector:
+                  matchExpressions:
+                  - key: app.kubernetes.io/component
+                    operator: In
+                    values:
+                    - phpipam-db
+                topologyKey: kubernetes.io/hostname
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/component: phpipam-db
+    app.kubernetes.io/name: phpipam
+    app.kubernetes.io/instance: phpipam
+    app.kubernetes.io/part-of: phpipam
+  name: phpipam-db
+  namespace: phpipam
+spec:
+  ports:
+  - port: 3306
+    targetPort: 3306
+  selector:
+    app.kubernetes.io/component: phpipam-db
+    app.kubernetes.io/name: phpipam
+    app.kubernetes.io/instance: phpipam
+  type: ClusterIP
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/component: phpipam-www
+    app.kubernetes.io/name: phpipam
+    app.kubernetes.io/instance: phpipam
+    app.kubernetes.io/part-of: phpipam
+  name: phpipam
+  namespace: phpipam
+spec:
+  ports:
+  - port: 80
+    targetPort: 80
+  selector:
+    app.kubernetes.io/component: phpipam-www
+    app.kubernetes.io/name: phpipam
+    app.kubernetes.io/instance: phpipam
+  type: ClusterIP
+status:
+  loadBalancer: {}
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+  name: phpipam
+  namespace: phpipam
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - phpipam.pyrocufflink.blue
+    secretName: pyrocufflink-cert
+  rules:
+  - host: phpipam.pyrocufflink.blue
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: phpipam
+            port:
+              number: 80