apiVersion: v1
kind: Namespace
metadata:
  name: bitwarden
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: bitwarden
  namespace: bitwarden
spec:
  replicas: 1
  selector:
    matchLabels:
      app: bitwarden
  template:
    metadata:
      labels:
        app: bitwarden
    spec:
      hostNetwork: false
      nodeName: kube-master
      containers:

      - name: mssql
        image: bitwarden/mssql:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-mssql
          mountPath: /var/opt/mssql/data
          subPath: data
        - name: bitwarden-logs
          mountPath: /var/opt/mssql/log
          subPath: mssql
        envFrom:
        - configMapRef:
            name: mssql.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: mssql.override.env 

      - name: web
        image: bitwarden/web:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-web
          mountPath: /etc/bitwarden/web
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env

      - name: attachements
        image: bitwarden/attachments:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-core
          mountPath: /etc/bitwarden/core/attachments
          subPath: attachments
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env

      - name: api
        image: bitwarden/api:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-core
          mountPath: /etc/bitwarden/core
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: api
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: global.override.env

      - name: identity
        image: bitwarden/identity:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-identity
          mountPath: /etc/bitwarden/identity
        - name: bitwarden-core
          mountPath: /etc/bitwarden/core
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: identity
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: global.override.env

      - name: sso
        image: bitwarden/sso:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-identity
          mountPath: /etc/bitwarden/identity
        - name: bitwarden-core    
          mountPath: /etc/bitwarden/core
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: sso
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: global.override.env

      - name: admin
        image: bitwarden/admin:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-core    
          mountPath: /etc/bitwarden/core
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: admin
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: global.override.env

      - name: icons
        image: bitwarden/icons:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: icons
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env

      - name: notifications
        image: bitwarden/notifications:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: notifications
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: global.override.env

      - name: events
        image: bitwarden/events:2023.1.0
        imagePullPolicy: Always
        volumeMounts:
        - name: bitwarden-ca-certificates
          mountPath: /etc/bitwarden/ca-certificates
        - name: bitwarden-logs
          mountPath: /etc/bitwarden/logs
          subPath: events
        envFrom:
        - configMapRef:
            name: global.env
        - configMapRef:
            name: uid.env
        - configMapRef:
            name: global.override.env

      - name: nginx
        image: bitwarden/nginx:2023.1.0
        imagePullPolicy: Always
        ports:
        - containerPort: 8080
          name: nginx-http
        - containerPort: 8443
          name: nginx-https
        volumeMounts:
        - name: bitwarden-nginx
          mountPath: /etc/bitwarden/nginx
        - name: bitwarden-letsencrypt
          mountPath: /etc/letsencrypt
        - name: bitwarden-ssl
          mountPath: /etc/ssl
        - name: bitwarden-logs
          mountPath: /var/log/nginx
          subPath: nginx
        envFrom:
        - configMapRef:
            name: uid.env


      securityContext:
        sysctls:
        - name: net.ipv4.conf.all.src_valid_mark
          value: "1"
        - name: net.ipv6.conf.all.disable_ipv6
          value: "1"


      volumes:
      - name: bitwarden-ca-certificates
        persistentVolumeClaim:
          claimName: bitwarden-ca-certificates
      - name: bitwarden-core
        persistentVolumeClaim:
          claimName: bitwarden-core
      - name: bitwarden-identity
        persistentVolumeClaim:
          claimName: bitwarden-identity
      - name: bitwarden-letsencrypt
        persistentVolumeClaim:
          claimName: bitwarden-letsencrypt
      - name: bitwarden-logs
        persistentVolumeClaim:
          claimName: bitwarden-logs
      - name: bitwarden-mssql
        persistentVolumeClaim:
          claimName: bitwarden-mssql
      - name: bitwarden-nginx
        persistentVolumeClaim:
          claimName: bitwarden-nginx
      - name: bitwarden-ssl
        persistentVolumeClaim:
          claimName: bitwarden-ssl
      - name: bitwarden-web
        persistentVolumeClaim:
          claimName: bitwarden-web


---
apiVersion: v1
kind: Service
metadata:
  name: nginx
  namespace: bitwarden
spec:
  ports:
    - name: nginx-http
      port: 8080
      targetPort: nginx-http
      protocol: TCP
    - name: nginx-https
      port: 8443
      targetPort: nginx-http
      protocol: TCP

  selector:
    app: bitwarden