Kubernetes.K3s.installLog/services/Guacamole/deployment-guacamole.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: guacamole
  namespace: guacamole
  labels:
    app: guacamole
spec:
  replicas: 1
  selector:
    matchLabels:
      app: guacamole
  template:
    metadata:
      labels:
        app: guacamole
    spec:
      hostname: guacamole
      containers:
      - name: guacamole
        image: guacamole/guacamole:1.6.0
        env:
        - name: BAN_ENABLED
          value: 'false'
        - name: TOTP_ENABLED
          value: 'true'
        - name: GUACD_HOSTNAME
          value: 'guacamole.guacamole.svc.cluster.local'
        - name: POSTGRESQL_HOSTNAME
          value: 'guacamole.guacamole.svc.cluster.local'
        - name: GUACAMOLE_HOME
          value: '/etc/guacamole'
        - name: POSTGRESQL_DATABASE
          valueFrom:
            secretKeyRef:
              name: guacamole-db-secret
              key: POSTGRES_DATABASE
        - name: POSTGRESQL_PASSWORD
          valueFrom:
            secretKeyRef:
              name: guacamole-db-secret
              key: POSTGRES_PASSWORD
        - name: POSTGRESQL_USER
          valueFrom:
            secretKeyRef:
              name: guacamole-db-secret
              key: POSTGRES_USER
        volumeMounts:
        - name: csismb-guacamole-home
          mountPath: /etc/guacamole
        ports:
          - name: ui
            containerPort: 8080
        livenessProbe:
          httpGet:
            port: ui
            path: /guacamole
      - name: guacd
        image: guacamole/guacd:1.6.0
        env:
        - name: GUACD_LOG_LEVEL
          value: 'debug'
        ports:
          - name: proxy
            containerPort: 4822
        livenessProbe:
          tcpSocket:
            port: 4822
      - name: db
        image: postgres:16-alpine
        securityContext:
          runAsUser: 70
          runAsGroup: 70
        env:
        - name: PGDATA
          value: /var/lib/postgresql/data/pgdata
        envFrom:
        - secretRef:
            name: guacamole-db-secret
        volumeMounts:
        - name: csismb-guacamole-db
          mountPath: /var/lib/postgresql/data
        ports:
          - name: db
            containerPort: 5432
        livenessProbe:
          exec:
            command: ["pg_isready" ,"-U" ,"$POSTGRES_USER", "-d" ,"$POSTGRES_DATABASE"]
      volumes:
      - name: csismb-guacamole-db
        persistentVolumeClaim:
          claimName: csismb-guacamole-db
      - name: csismb-guacamole-home
        persistentVolumeClaim:
          claimName: csismb-guacamole-home