diff --git a/hackerspace/inventory.yaml b/hackerspace/inventory.yaml index 097aa76..334bdd7 100644 --- a/hackerspace/inventory.yaml +++ b/hackerspace/inventory.yaml @@ -28,11 +28,6 @@ spec: value: https://minio-cluster-shared.k-space.ee/inventory-5b342be1-60a1-4290-8061-e0b8fc17d40d/ - name: OIDC_USERS_NAMESPACE value: oidc-gateway - - name: MONGO_URI - valueFrom: - secretKeyRef: - key: connectionString.standard - name: inventory-mongodb-application-readwrite - name: SECRET_KEY valueFrom: secretKeyRef: @@ -58,6 +53,8 @@ spec: name: miniobucket-inventory-owner-secrets - secretRef: name: oidc-client-inventory-app-owner-secrets + - secretRef: + name: inventory-mongodb name: inventory ports: - containerPort: 5000 @@ -87,114 +84,3 @@ spec: terminationGracePeriodSeconds: 30 volumes: - name: tmp ---- -apiVersion: codemowers.cloud/v1beta1 -kind: SecretClaim -metadata: - name: inventory-mongodb-readwrite-password -spec: - size: 32 - mapping: - - key: password - value: "%(plaintext)s" ---- -apiVersion: mongodbcommunity.mongodb.com/v1 -kind: MongoDBCommunity -metadata: - name: inventory-mongodb -spec: - agent: - logLevel: ERROR - maxLogFileDurationHours: 1 - additionalMongodConfig: - systemLog: - quiet: true - members: 3 - type: ReplicaSet - version: "6.0.3" - security: - authentication: - modes: ["SCRAM"] - users: - - name: readwrite - db: application - passwordSecretRef: - name: inventory-mongodb-readwrite-password - roles: - - name: readWrite - db: application - scramCredentialsSecretName: inventory-mongodb-readwrite - statefulSet: - spec: - logLevel: WARN - template: - spec: - containers: - - name: mongod - resources: - requests: - cpu: 100m - memory: 1Gi - limits: - cpu: 4000m - memory: 1Gi - volumeMounts: - - name: journal-volume - mountPath: /data/journal - - name: mongodb-agent - resources: - requests: - cpu: 1m - memory: 100Mi - limits: {} - affinity: - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: app - operator: In - values: - - inventory-mongodb-svc - topologyKey: kubernetes.io/hostname - nodeSelector: - dedicated: monitoring - tolerations: - - key: dedicated - operator: Equal - value: monitoring - effect: NoSchedule - volumeClaimTemplates: - - metadata: - name: logs-volume - labels: - usecase: logs - spec: - storageClassName: mongo - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 100Mi - - metadata: - name: journal-volume - labels: - usecase: journal - spec: - storageClassName: mongo - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 512Mi - - metadata: - name: data-volume - labels: - usecase: data - spec: - storageClassName: mongo - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 10Gi