Pin Guacamole;Fix volume DDclient

2023-03-03 11:31:06 +01:00 · 2023-03-03 11:31:06 +01:00 · 8be0075ead
parent fa7da06085
commit 8be0075ead
16 changed files with 285 additions and 233 deletions
--- a/services/DDclient/_namespace-DDclient.yml
+++ b/services/DDclient/_namespace-DDclient.yml
@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ddclient
--- a/services/DDclient/deployment-DDclient.yml
+++ b/services/DDclient/deployment-DDclient.yml
@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: ddclient
+  namespace: ddclient
  labels:
    app: ddclient
 spec:
@ -19,8 +20,8 @@ spec:
        image: bv11-cr01.bessems.eu/proxy/linuxserver/ddclient
        volumeMounts:
        - mountPath: /config
-          name: ddclient-secret
+          name: flexvolsmb-ddclient-config
      volumes:
-      - name: ddclient-secret
-        secret:
-          secretName: ddclient-secret
+      - name: flexvolsmb-ddclient-config
+        persistentVolumeClaim:
+          claimName: flexvolsmb-ddclient-config
--- a/services/DDclient/persistentVolume-DDclient.yml
+++ b/services/DDclient/persistentVolume-DDclient.yml
@ -0,0 +1,19 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-ddclient-config
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-ddclient-config
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+    options:
+      opts: domain=bessems.eu,file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/ddclient/config
--- a/services/DDclient/persistentVolumeClaim-DDclient.yml
+++ b/services/DDclient/persistentVolumeClaim-DDclient.yml
@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-ddclient-config
+  namespace: ddclient
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-ddclient-config
+  resources:
+    requests:
+      storage: 1Gi
--- a/services/DDclient/sealedSecret-DDclient.yml
+++ b/services/DDclient/sealedSecret-DDclient.yml
@ -1,26 +0,0 @@
-{
-  "kind": "SealedSecret",
-  "apiVersion": "bitnami.com/v1alpha1",
-  "metadata": {
-    "name": "ddclient-secret",
-    "namespace": "default",
-    "creationTimestamp": null
-  },
-  "spec": {
-    "template": {
-      "metadata": {
-        "name": "ddclient-secret",
-        "namespace": "default",
-        "creationTimestamp": null,
-        "labels": {
-          "app": "ddclient"
-        }
-      },
-      "type": "Opaque",
-      "data": null
-    },
-    "encryptedData": {
-      "ddclient.conf": "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"
-    }
-  }
-}
--- a/services/DDclient/sealedSecret-SMBSecret.yml
+++ b/services/DDclient/sealedSecret-SMBSecret.yml
@ -0,0 +1,18 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-secret
+  namespace: ddclient
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      name: smb-secret
+      namespace: ddclient
+    type: mount/smb
+
--- a/services/Guacamole/_namespace-Guacamole.yml
+++ b/services/Guacamole/_namespace-Guacamole.yml
@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: guacamole
--- a/services/Guacamole/deploy-Guacamole.yml
+++ b/services/Guacamole/deploy-Guacamole.yml
@ -1,176 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: guacamole
-spec:
-  ports:
-    - protocol: TCP
-      name: ui
-      port: 8080
-    - protocol: TCP
-      name: proxy
-      port: 4822
-    - protocol: TCP
-      name: db
-      port: 3306
-  selector:
-    app: guacamole
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: guacamole
-  labels:
-    app: guacamole
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: guacamole
-  template:
-    metadata:
-      labels:
-        app: guacamole
-    spec:
-      hostname: guacamole
-      containers:
-      - name: guacamole
-        image: bv11-cr01.bessems.eu/proxy/guacamole/guacamole
-        env:
-        - name: GUACD_HOSTNAME
-          value: 'guacamole.default.svc.cluster.local'
-        - name: MYSQL_HOSTNAME
-          value: 'guacamole.default.svc.cluster.local'
-        - name: GUACAMOLE_HOME
-          value: '/etc/guacamole'
-        envFrom:
-        - secretRef:
-            name: secret-guacamole
-        volumeMounts:
-        - name: flexvolsmb-guacamole-home
-          mountPath: /etc/guacamole
-        ports:
-          - name: ui
-            containerPort: 8080
-      - name: guacd
-        image: bv11-cr01.bessems.eu/proxy/guacamole/guacd
-        env:
-        - name: GUACD_LOG_LEVEL
-          value: 'debug'
-        ports:
-          - name: proxy
-            containerPort: 4822
-      - name: mysql
-        image: bv11-cr01.bessems.eu/proxy/library/mysql:latest
-        securityContext:
-          runAsUser: 999
-          runAsGroup: 999
-        env:
-        - name: MYSQL_RANDOM_ROOT_PASSWORD
-          value: 'true'
-        envFrom:
-        - secretRef:
-            name: secret-guacamole
-        volumeMounts:
-        - name: flexvolsmb-guacamole-db
-          mountPath: /var/lib/mysql
-        ports:
-          - name: db
-            containerPort: 3306
-      volumes:
-      - name: flexvolsmb-guacamole-db
-        persistentVolumeClaim:
-          claimName: flexvolsmb-guacamole-db
-      - name: flexvolsmb-guacamole-home
-        persistentVolumeClaim:
-          claimName: flexvolsmb-guacamole-home
---
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: prepend-path-guacamole
-spec:
-  addPrefix:
-    prefix: /guacamole
---
-apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
-metadata:
-  name: guacamole
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`remote.spamasaurus.com`)
-    kind: Rule
-    services:
-    - name: guacamole
-      port: 8080
-    middlewares:
-      - name: prepend-path-guacamole
-      - name: security-headers@file
-      - name: compression@file
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-guacamole-db
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-guacamole-db
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: smb-secret
-    options:
-      opts: domain=bessems.eu,file_mode=0755,dir_mode=0755,uid=999,gid=999,iocharset=utf8,nobrl
-      server: 192.168.11.225
-      share: /K3s.Volumes/guacamole/db
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-guacamole-db
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-guacamole-db
-  resources:
-    requests:
-      storage: 1Gi
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-guacamole-home
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-guacamole-home
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: smb-secret
-    options:
-      opts: domain=bessems.eu,file_mode=0755,dir_mode=0755,uid=999,gid=999,iocharset=utf8
-      server: 192.168.11.225
-      share: /K3s.Volumes/guacamole/home
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-guacamole-home
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-guacamole-home
-  resources:
-    requests:
-      storage: 1Gi
--- a/services/Guacamole/deployment-Guacamole.yml
+++ b/services/Guacamole/deployment-Guacamole.yml
@ -0,0 +1,77 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: guacamole
+  namespace: guacamole
+  labels:
+    app: guacamole
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: guacamole
+  template:
+    metadata:
+      labels:
+        app: guacamole
+    spec:
+      hostname: guacamole
+      containers:
+      - name: guacamole
+        image: bv11-cr01.bessems.eu/proxy/guacamole/guacamole:1.4.0
+#        image: bv11-cr01.bessems.eu/proxy/guacamole/guacamole:1.5.0
+        env:
+        - name: GUACD_HOSTNAME
+          value: 'guacamole.guacamole.svc.cluster.local'
+        - name: MYSQL_HOSTNAME
+          value: 'guacamole.guacamole.svc.cluster.local'
+        - name: GUACAMOLE_HOME
+          value: '/etc/guacamole'
+        envFrom:
+        - secretRef:
+            name: guacamole-db-secret
+        volumeMounts:
+        - name: flexvolsmb-guacamole-home
+          mountPath: /etc/guacamole
+#        - name: flexvolsmb-guacamole-opt
+#          mountPath: /opt/guacamole/mysql/mysql-connector-java-5.1.46.jar
+#          subPath: mysql-connector-java-5.1.46.jar
+        ports:
+          - name: ui
+            containerPort: 8080
+      - name: guacd
+        image: bv11-cr01.bessems.eu/proxy/guacamole/guacd:1.4.0
+#        image: bv11-cr01.bessems.eu/proxy/guacamole/guacd:1.5.0
+        env:
+        - name: GUACD_LOG_LEVEL
+          value: 'debug'
+        ports:
+          - name: proxy
+            containerPort: 4822
+      - name: mysql
+        image: bv11-cr01.bessems.eu/proxy/library/mysql:latest
+        securityContext:
+          runAsUser: 999
+          runAsGroup: 999
+        env:
+        - name: MYSQL_RANDOM_ROOT_PASSWORD
+          value: 'true'
+        envFrom:
+        - secretRef:
+            name: guacamole-db-secret
+        volumeMounts:
+        - name: flexvolsmb-guacamole-db
+          mountPath: /var/lib/mysql
+        ports:
+          - name: db
+            containerPort: 3306
+      volumes:
+      - name: flexvolsmb-guacamole-db
+        persistentVolumeClaim:
+          claimName: flexvolsmb-guacamole-db
+      - name: flexvolsmb-guacamole-home
+        persistentVolumeClaim:
+          claimName: flexvolsmb-guacamole-home
+#      - name: flexvolsmb-guacamole-opt
+#        persistentVolumeClaim:
+#          claimName: flexvolsmb-guacamole-opt
--- a/services/Guacamole/ingressRoute-Guacamole.yml
+++ b/services/Guacamole/ingressRoute-Guacamole.yml
@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: guacamole
+  namespace: guacamole
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`remote.spamasaurus.com`)
+    kind: Rule
+    services:
+    - name: guacamole
+      port: 8080
+    middlewares:
+      - name: prepend-path-guacamole
+      - name: security-headers@file
+      - name: compression@file
--- a/services/Guacamole/middleware-Guacamole.yml
+++ b/services/Guacamole/middleware-Guacamole.yml
@ -0,0 +1,8 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: prepend-path-guacamole
+  namespace: guacamole
+spec:
+  addPrefix:
+    prefix: /guacamole
--- a/services/Guacamole/persistentVolume-Guacamole.yml
+++ b/services/Guacamole/persistentVolume-Guacamole.yml
@ -0,0 +1,37 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-guacamole-db
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-guacamole-db
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+    options:
+      opts: domain=bessems.eu,file_mode=0755,dir_mode=0755,uid=999,gid=999,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/guacamole/db
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-guacamole-home
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-guacamole-home
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+    options:
+      opts: domain=bessems.eu,file_mode=0755,dir_mode=0755,uid=999,gid=999,iocharset=utf8
+      server: 192.168.11.225
+      share: /K3s.Volumes/guacamole/home
--- a/services/Guacamole/persistentVolumeClaim-Guacamole.yml
+++ b/services/Guacamole/persistentVolumeClaim-Guacamole.yml
@ -0,0 +1,25 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-guacamole-db
+  namespace: guacamole
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-guacamole-db
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-guacamole-home
+  namespace: guacamole
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-guacamole-home
+  resources:
+    requests:
+      storage: 1Gi
--- a/services/Guacamole/sealedSecret-Guacamole.yml
+++ b/services/Guacamole/sealedSecret-Guacamole.yml
@ -1,27 +1,21 @@
-{
-  "kind": "SealedSecret",
-  "apiVersion": "bitnami.com/v1alpha1",
-  "metadata": {
-    "name": "secret-guacamole",
-    "namespace": "default",
-    "creationTimestamp": null
-  },
-  "spec": {
-    "template": {
-      "metadata": {
-        "name": "secret-guacamole",
-        "namespace": "default",
-        "creationTimestamp": null,
-        "labels": {
-          "app": "guacamole"
-        }
-      },
-      "data": null
-    },
-    "encryptedData": {
-      "MYSQL_DATABASE": "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",
-      "MYSQL_PASSWORD": "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",
-      "MYSQL_USER": "AgA2esAjP463d4h5dmKOMOXPlBKs6XO0DcdyuPOyFKsbZ3r4Vwg/rrOjKtVQuCVB8iv2WcrDzpn2STtigmww2HWLFqkCWCD2W+5XfI1vRT086zVvFDtVRmzmeVSsZZ9RZy5vaabTg9e0NbN1Zr/mn31WjHaJAVHrFZpkTHgnQQFsqwZVHoHRl4p9oPl+SF5dSPx1l4sUWj+5VwvcyxFy4UN9la4dG1kx0sCuh9ek4iTfSg5R1k4RQGQ1vy0CAYa4JDkXx62s1FMLEmVmNI5o5GcPUWtxFcBNDKQ2FYS+2z/5RmD2nOFAxbVnvOpaolHa1sD6QTQtNY1HODjn/gbzKgXQO4AgGgJGDaRPd2ckXgzQjf3kxIl6sUAtqK9AJduXrxBpEndeT8zCOZbbqcXA/CPM1qW0ejGmZp+SV3lSBHqY5fzfQP4NF5u8tEDGhlxEop3WZvsXxSNuhxs3qDYwXQFDsuMUxzy5JYrXU0HuWQhlAP7cOrk6Oxi60lWaY5WO6U1hSWwVZHMgwNEfGdJ+mxBlvGnk+uhqRMS3xfKTcWrLGTo7dxism6p+EUZmrW6nZdEfVDfI1OQzE0mIz5ryx5woc8aSCLgxu/6vEe+8tvjOaa0yXZg1z5tdv6LTR+RxL7YWNTzCznnf0hN11ICh5cJzumdr3RxCq35My0jZKhAwuzUTomSjGhnODoLRse//TNONjiyowLCWlyg="
-    }
-  }
-}
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: guacamole-db-secret
+  namespace: guacamole
+spec:
+  encryptedData:
+    MYSQL_DATABASE: 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
+    MYSQL_PASSWORD: AgCM2wl6W2HnTFIvYUFSBRrpeO2wfoBZa6omtVsmyEZQoMQ4hepqB9PdPEMOYuy7hKfqHOWTBGzrpI1eVO71WQiZp5Tt+ix6/NDp1UHPy89ipkZuJiM6Q8+erK6xCrfpMSv9nK3mF3lzEORWcpQEjLodz7duvFxcBQbWt3amATqjmBvkD2FA7nZS8ctJztO1LGtJOgC67TqbUA+7+SF2acsUj+pw+wE+uPw2bw2GZx+Z/87CPUZvWTh9SJ1vQeIpCUY1DIHd5euApAhYZXQYJPNEkOzm2mRgT0ZHEQ+eBg4zmI9HOnY3QP1NyNtpa0HuHtZpPbA/1fr+619UQYh9oXjKr/p7k2qXbszaET5i5mgJV/ztAqXqnZOrRyebmEohUkQZbaiuypZawTERa8FAOitu2M4rD0i7PKnfWObMLZAjEgOWuPesN4vpBR0XSMFJZ+MgoWGwVJocPdP4DLG6MZoyNzS9t2+Zp9g5705TvT4Cou2bqyZJVYPTSpDUOlIghPvDHT3YpM5lMUA5kCRjh61hTutmenpRDprLUm9wpcyCV/hW+Gqs8rMmRrhWewE3tpplTNWo46Wz/PyyjN5270qhhQfuKJyZrm2uxC1RydRi7jMVjgCEsNQT0BgqjjBsvrAkkaeS350z+QIYi0EOVh9gSEOKvuHNljSrgT+3ak5JJSYW6eJKh/JO8S2DsH3SUeSSo2+A40kDCLM=
+    MYSQL_USER: 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
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: guacamole
+      name: guacamole-db-secret
+      namespace: guacamole
+    type: Opaque
+
--- a/services/Guacamole/sealedSecret-SMBSecret.yml
+++ b/services/Guacamole/sealedSecret-SMBSecret.yml
@ -0,0 +1,18 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-secret
+  namespace: guacamole
+spec:
+  encryptedData:
+    password: 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
+    username: AgCiRQ0ql/PDGzdQCPTMM0GqhRD0KCTSQh0JGw2QTEEM2JeKiL0f2c9G/HEkPx+NJHv3E2wIJ+4Tt2OdpuB1jqgnShkc45KGbwZ0BwNoX8XjzEbPyjAEZyBPRiXYqEH2wwIqgce35pcsB6OIXdMV3p1h/j66kpV5rEQkYoj6BPi3UxTNvzgjExOZxeEwLQjVgSytwreex7gRE9B4ZZid8iBeZAzummGkdhpMePfPtrmrC2FYmejdaKEQEMgY3QIH/QHJUHqJ9V8SS8YUZ5/7mhiePnJUv/1spL9Cnp1qbdtKPB1nU3fu5bdqFN+UAMKFFNL/p1eueRDXZxgCobRtd17caRXtbGEc93sKINbd6iCQ6in0zcMTSWjy7ZGQNC0KcouEyR5n1VyJ4dYn82uhDlh9HUU/21WFkvr29CUJFfe/keHjSyaZOqdzFHj9FPLzewdDT0Dg3GPPROPcdd30CKtTKWzKbyJP0/CrIC17YtQSeFDwHLTIiggB5hZ4LaycSyrDdH/5rtYkOCk6O/kfzwHDHpNacWULfbPjqsAC2U9Ex1UOpawX1LX8gqPfHlM8ZBAixYopKTZpvwchUZubWkIchoOy4z/+8ynjXNblkfShs0/yvuV7sIFJCMfn39CP8ngdeJJKbBOGQ+LbqLoDnMA5LqV7vuhAZci27tlSeV7tZmjrAmdjCoFU/IzizqAZL5pGxJS/l3s=
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      name: smb-secret
+      namespace: guacamole
+    type: mount/smb
+
--- a/services/Guacamole/service-Guacamole.yml
+++ b/services/Guacamole/service-Guacamole.yml
@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: guacamole
+  namespace: guacamole
+spec:
+  ports:
+    - protocol: TCP
+      name: ui
+      port: 8080
+    - protocol: TCP
+      name: proxy
+      port: 4822
+    - protocol: TCP
+      name: db
+      port: 3306
+  selector:
+    app: guacamole