forked from k-space/kube
		
	inventory: migrate to external mogno
This commit is contained in:
		@@ -28,11 +28,6 @@ spec:
 | 
			
		||||
          value: https://minio-cluster-shared.k-space.ee/inventory-5b342be1-60a1-4290-8061-e0b8fc17d40d/
 | 
			
		||||
        - name: OIDC_USERS_NAMESPACE
 | 
			
		||||
          value: oidc-gateway
 | 
			
		||||
        - name: MONGO_URI
 | 
			
		||||
          valueFrom:
 | 
			
		||||
            secretKeyRef:
 | 
			
		||||
              key: connectionString.standard
 | 
			
		||||
              name: inventory-mongodb-application-readwrite
 | 
			
		||||
        - name: SECRET_KEY
 | 
			
		||||
          valueFrom:
 | 
			
		||||
            secretKeyRef:
 | 
			
		||||
@@ -58,6 +53,8 @@ spec:
 | 
			
		||||
            name: miniobucket-inventory-owner-secrets
 | 
			
		||||
        - secretRef:
 | 
			
		||||
            name: oidc-client-inventory-app-owner-secrets
 | 
			
		||||
        - secretRef:
 | 
			
		||||
            name: inventory-mongodb
 | 
			
		||||
        name: inventory
 | 
			
		||||
        ports:
 | 
			
		||||
        - containerPort: 5000
 | 
			
		||||
@@ -87,114 +84,3 @@ spec:
 | 
			
		||||
      terminationGracePeriodSeconds: 30
 | 
			
		||||
      volumes:
 | 
			
		||||
      - name: tmp
 | 
			
		||||
---
 | 
			
		||||
apiVersion: codemowers.cloud/v1beta1
 | 
			
		||||
kind: SecretClaim
 | 
			
		||||
metadata:
 | 
			
		||||
  name: inventory-mongodb-readwrite-password
 | 
			
		||||
spec:
 | 
			
		||||
  size: 32
 | 
			
		||||
  mapping:
 | 
			
		||||
    - key: password
 | 
			
		||||
      value: "%(plaintext)s"
 | 
			
		||||
---
 | 
			
		||||
apiVersion: mongodbcommunity.mongodb.com/v1
 | 
			
		||||
kind: MongoDBCommunity
 | 
			
		||||
metadata:
 | 
			
		||||
  name: inventory-mongodb
 | 
			
		||||
spec:
 | 
			
		||||
  agent:
 | 
			
		||||
    logLevel: ERROR
 | 
			
		||||
    maxLogFileDurationHours: 1
 | 
			
		||||
  additionalMongodConfig:
 | 
			
		||||
    systemLog:
 | 
			
		||||
      quiet: true
 | 
			
		||||
  members: 3
 | 
			
		||||
  type: ReplicaSet
 | 
			
		||||
  version: "6.0.3"
 | 
			
		||||
  security:
 | 
			
		||||
    authentication:
 | 
			
		||||
      modes: ["SCRAM"]
 | 
			
		||||
  users:
 | 
			
		||||
    - name: readwrite
 | 
			
		||||
      db: application
 | 
			
		||||
      passwordSecretRef:
 | 
			
		||||
        name: inventory-mongodb-readwrite-password
 | 
			
		||||
      roles:
 | 
			
		||||
        - name: readWrite
 | 
			
		||||
          db: application
 | 
			
		||||
      scramCredentialsSecretName: inventory-mongodb-readwrite
 | 
			
		||||
  statefulSet:
 | 
			
		||||
    spec:
 | 
			
		||||
      logLevel: WARN
 | 
			
		||||
      template:
 | 
			
		||||
        spec:
 | 
			
		||||
          containers:
 | 
			
		||||
            - name: mongod
 | 
			
		||||
              resources:
 | 
			
		||||
                requests:
 | 
			
		||||
                  cpu: 100m
 | 
			
		||||
                  memory: 1Gi
 | 
			
		||||
                limits:
 | 
			
		||||
                  cpu: 4000m
 | 
			
		||||
                  memory: 1Gi
 | 
			
		||||
              volumeMounts:
 | 
			
		||||
                - name: journal-volume
 | 
			
		||||
                  mountPath: /data/journal
 | 
			
		||||
            - name: mongodb-agent
 | 
			
		||||
              resources:
 | 
			
		||||
                requests:
 | 
			
		||||
                  cpu: 1m
 | 
			
		||||
                  memory: 100Mi
 | 
			
		||||
                limits: {}
 | 
			
		||||
          affinity:
 | 
			
		||||
            podAntiAffinity:
 | 
			
		||||
              requiredDuringSchedulingIgnoredDuringExecution:
 | 
			
		||||
                - labelSelector:
 | 
			
		||||
                    matchExpressions:
 | 
			
		||||
                      - key: app
 | 
			
		||||
                        operator: In
 | 
			
		||||
                        values:
 | 
			
		||||
                          - inventory-mongodb-svc
 | 
			
		||||
                  topologyKey: kubernetes.io/hostname
 | 
			
		||||
          nodeSelector:
 | 
			
		||||
            dedicated: monitoring
 | 
			
		||||
          tolerations:
 | 
			
		||||
            - key: dedicated
 | 
			
		||||
              operator: Equal
 | 
			
		||||
              value: monitoring
 | 
			
		||||
              effect: NoSchedule
 | 
			
		||||
      volumeClaimTemplates:
 | 
			
		||||
        - metadata:
 | 
			
		||||
            name: logs-volume
 | 
			
		||||
            labels:
 | 
			
		||||
              usecase: logs
 | 
			
		||||
          spec:
 | 
			
		||||
            storageClassName: mongo
 | 
			
		||||
            accessModes:
 | 
			
		||||
            - ReadWriteOnce
 | 
			
		||||
            resources:
 | 
			
		||||
              requests:
 | 
			
		||||
                storage: 100Mi
 | 
			
		||||
        - metadata:
 | 
			
		||||
            name: journal-volume
 | 
			
		||||
            labels:
 | 
			
		||||
              usecase: journal
 | 
			
		||||
          spec:
 | 
			
		||||
            storageClassName: mongo
 | 
			
		||||
            accessModes:
 | 
			
		||||
            - ReadWriteOnce
 | 
			
		||||
            resources:
 | 
			
		||||
              requests:
 | 
			
		||||
                storage: 512Mi
 | 
			
		||||
        - metadata:
 | 
			
		||||
            name: data-volume
 | 
			
		||||
            labels:
 | 
			
		||||
              usecase: data
 | 
			
		||||
          spec:
 | 
			
		||||
            storageClassName: mongo
 | 
			
		||||
            accessModes:
 | 
			
		||||
            - ReadWriteOnce
 | 
			
		||||
            resources:
 | 
			
		||||
              requests:
 | 
			
		||||
                storage: 10Gi
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user