_passbolt.tpl 2.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859
  1. {{- define "passbolt.workload" -}}
  2. workload:
  3. passbolt:
  4. enabled: true
  5. primary: true
  6. type: Deployment
  7. podSpec:
  8. hostNetwork: {{ .Values.passboltNetwork.hostNetwork }}
  9. containers:
  10. passbolt:
  11. enabled: true
  12. primary: true
  13. imageSelector: image
  14. securityContext:
  15. runAsUser: 33
  16. runAsGroup: 33
  17. readOnlyRootFilesystem: false
  18. envFrom:
  19. - secretRef:
  20. name: passbolt-creds
  21. - configMapRef:
  22. name: passbolt-config
  23. {{ with .Values.passboltConfig.additionalEnvs }}
  24. envList:
  25. {{ range $env := . }}
  26. - name: {{ $env.name }}
  27. value: {{ $env.value }}
  28. {{ end }}
  29. {{ end }}
  30. probes:
  31. {{- $port := 8080 -}}
  32. {{- $protocol := "http" -}}
  33. {{- if .Values.passboltNetwork.certificateID -}}
  34. {{- $port = 4433 -}}
  35. {{- $protocol = "https" -}}
  36. {{- end }}
  37. liveness:
  38. enabled: true
  39. type: {{ $protocol }}
  40. port: {{ $port }}
  41. path: /healthcheck/status
  42. readiness:
  43. enabled: true
  44. type: {{ $protocol }}
  45. port: {{ $port }}
  46. path: /healthcheck/status
  47. startup:
  48. enabled: true
  49. type: {{ $protocol }}
  50. port: {{ $port }}
  51. path: /healthcheck/status
  52. initContainers:
  53. {{- include "ix.v1.common.app.permissions" (dict "containerName" "01-permissions"
  54. "UID" 33
  55. "GID" 33
  56. "type" "install") | nindent 8 }}
  57. {{- include "ix.v1.common.app.mariadbWait" (dict "name" "02-mariadb-wait"
  58. "secretName" "mariadb-creds") | nindent 8 }}
  59. {{- end -}}