commit 5906c84f78c45c87cb87a4d8e48ad6ab17e1ec45 Author: pierre Date: Wed Jun 19 14:26:32 2024 +0100 :boom: add all the files diff --git a/bitwarden.kube.yaml b/bitwarden.kube.yaml new file mode 100644 index 0000000..760ddd9 --- /dev/null +++ b/bitwarden.kube.yaml @@ -0,0 +1,276 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: bitwarden +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bitwarden + namespace: bitwarden +spec: + replicas: 1 + selector: + matchLabels: + app: bitwarden + template: + metadata: + labels: + app: bitwarden + spec: + hostNetwork: false + nodeName: kube-master + containers: + + - name: mssql + image: bitwarden/mssql:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-mssql + mountPath: /var/opt/mssql/data + subPath: data + - name: bitwarden-logs + mountPath: /var/opt/mssql/log + subPath: mssql + envFrom: + - configMapRef: + name: mssql.env + - configMapRef: + name: uid.env + - configMapRef: + name: mssql.override.env + + - name: web + image: bitwarden/web:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-web + mountPath: /etc/bitwarden/web + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + + - name: attachements + image: bitwarden/attachments:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-core + mountPath: /etc/bitwarden/core/attachments + subPath: attachments + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + + - name: api + image: bitwarden/api:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-core + mountPath: /etc/bitwarden/core + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: api + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + - configMapRef: + name: global.override.env + + - name: identity + image: bitwarden/identity:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-identity + mountPath: /etc/bitwarden/identity + - name: bitwarden-core + mountPath: /etc/bitwarden/core + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: identity + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + - configMapRef: + name: global.override.env + + - name: sso + image: bitwarden/sso:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-identity + mountPath: /etc/bitwarden/identity + - name: bitwarden-core + mountPath: /etc/bitwarden/core + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: sso + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + - configMapRef: + name: global.override.env + + - name: admin + image: bitwarden/admin:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-core + mountPath: /etc/bitwarden/core + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: admin + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + - configMapRef: + name: global.override.env + + - name: icons + image: bitwarden/icons:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: icons + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + + - name: notifications + image: bitwarden/notifications:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: notifications + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + - configMapRef: + name: global.override.env + + - name: events + image: bitwarden/events:2023.1.0 + imagePullPolicy: Always + volumeMounts: + - name: bitwarden-ca-certificates + mountPath: /etc/bitwarden/ca-certificates + - name: bitwarden-logs + mountPath: /etc/bitwarden/logs + subPath: events + envFrom: + - configMapRef: + name: global.env + - configMapRef: + name: uid.env + - configMapRef: + name: global.override.env + + - name: nginx + image: bitwarden/nginx:2023.1.0 + imagePullPolicy: Always + ports: + - containerPort: 8080 + name: nginx-http + - containerPort: 8443 + name: nginx-https + volumeMounts: + - name: bitwarden-nginx + mountPath: /etc/bitwarden/nginx + - name: bitwarden-letsencrypt + mountPath: /etc/letsencrypt + - name: bitwarden-ssl + mountPath: /etc/ssl + - name: bitwarden-logs + mountPath: /var/log/nginx + subPath: nginx + envFrom: + - configMapRef: + name: uid.env + + + securityContext: + sysctls: + - name: net.ipv4.conf.all.src_valid_mark + value: "1" + - name: net.ipv6.conf.all.disable_ipv6 + value: "1" + + + volumes: + - name: bitwarden-ca-certificates + persistentVolumeClaim: + claimName: bitwarden-ca-certificates + - name: bitwarden-core + persistentVolumeClaim: + claimName: bitwarden-core + - name: bitwarden-identity + persistentVolumeClaim: + claimName: bitwarden-identity + - name: bitwarden-letsencrypt + persistentVolumeClaim: + claimName: bitwarden-letsencrypt + - name: bitwarden-logs + persistentVolumeClaim: + claimName: bitwarden-logs + - name: bitwarden-mssql + persistentVolumeClaim: + claimName: bitwarden-mssql + - name: bitwarden-nginx + persistentVolumeClaim: + claimName: bitwarden-nginx + - name: bitwarden-ssl + persistentVolumeClaim: + claimName: bitwarden-ssl + - name: bitwarden-web + persistentVolumeClaim: + claimName: bitwarden-web + + +--- +apiVersion: v1 +kind: Service +metadata: + name: nginx + namespace: bitwarden +spec: + ports: + - name: nginx-http + port: 8080 + targetPort: nginx-http + protocol: TCP + - name: nginx-https + port: 8443 + targetPort: nginx-http + protocol: TCP + + selector: + app: bitwarden diff --git a/namespace.yaml b/namespace.yaml new file mode 100644 index 0000000..41b2d95 --- /dev/null +++ b/namespace.yaml @@ -0,0 +1,10 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: bitwarden +--- +apiVersion: v1 +kind: Namespace +metadata: + name: bitwarden-helm diff --git a/pvc.claim.yaml b/pvc.claim.yaml new file mode 100644 index 0000000..3095b22 --- /dev/null +++ b/pvc.claim.yaml @@ -0,0 +1,108 @@ +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-mssql +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-logs +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-web +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-core +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-ca-certificates +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-identity +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-nginx +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-letsencrypt +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: bitwarden-ssl +spec: + storageClassName: nfs-storage-intelligent + accessModes: + - ReadWriteMany + resources: + requests: + storage: 200Mi