enable django

external_manifests/django/django-db.secret.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+data:
+  DB_DATABASE_NAME: ZGphbmdv
+  DB_HOST: ZGphbmdvLWRiLXN2Yw==
+  DB_PASSWORD: U3VmZnJhZ2UtTW9uZXliYWdzLUlsbHVzaW9uNw==
+  DB_USERNAME: ZGphbmdvX3VzZXJuYW1l
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: django-db-credentials
+  namespace: django

module.tf

@@ -15,6 +15,7 @@ variable "kubernetes" {
       name               = string
       pvc                = optional(bool, false)
       config_map         = optional(bool, false)
+      secret             = optional(bool, false)
       host_path          = optional(string)
       pvc_size           = optional(string)
       storage_class_name = optional(string, "nfs-storage-intelligent")
@@ -463,6 +464,12 @@ resource "kubernetes_deployment_v1" "automatic" {
               }
             }
 
+            dynamic "secret" {
+              for_each = volume.value.secret != null ? [1] : []
+              content {
+                secret_name = volume.value.secret
+              }
+            }
 
           }
         }

variables.auto.tfvars

@@ -1127,9 +1127,8 @@ kubernetes = {
     image = "alexfozor/flaresolverr:pr-1300-experimental"
 
     connected_namespace = "servarr"
-    enabled             = false
+    #enabled             = false
     image        = "ghcr.io/flaresolverr/flaresolverr:latest"
-    connected_namespace = "tservarr"
     service_port = [8191]
 
     environment = {
@@ -1274,7 +1273,7 @@ kubernetes = {
 
   immicht = {
     enabled = false
-    replicas     = 01
+    #replicas     = 0
     namespace    = "immicht"
     image        = "ghcr.io/immich-app/immich-server:v1.134.0"
     service_port = [2283]
@@ -1375,6 +1374,12 @@ kubernetes = {
       POSTGRESQL_SHARED_PRELOAD_LIBRARIES = { value = "pgaudit" }
       POSTGRES_INITDB_ARGS                = { value = "--data-checksums" }
 
+      BITNAMI_DEBUG          = { value = "false" }
+      REDIS_REPLICATION_MODE = { value = "master" }
+      ALLOW_EMPTY_PASSWORD   = { value = "yes" }
+      REDIS_TLS_ENABLED      = { value = "no" }
+      REDIS_PORT             = { value = "6379" }
+
     }
     pvc = {
       immich-data = {
@@ -1388,6 +1393,7 @@ kubernetes = {
   }
   machinelearning = {
     enabled = false
+    #replicas = 0
     connected_namespace = "immicht"
     image               = "ghcr.io/immich-app/immich-machine-learning:v1.134.0"
     service_port        = [3003]
@@ -1441,6 +1447,78 @@ kubernetes = {
 
   }
 
+  django = {
+    #enabled      =false
+    namespace    = "django"
+    image        = "gitea.tryton.geeraert.eu/pi-ux-ce/django-python:latest"
+    service_port = [8000]
+    database = {
+      image = "docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0"
+    }
+
+    requirements = {
+      limits-cpu      = "800m"
+      limits-memory   = "800Mi"
+      requests-cpu    = "10m"
+      requests-memory = "300Mi"
+    }
+    extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/django/kubeconfig.secret.yaml", "/opt/kubernetes/Terraform_kube/external_manifests/django/django-db.secret.yaml"]
+
+    environment = {
+
+      DB_PASSWORD = {
+        value_from = {
+          secret_key_ref = {
+            name = "django-db-credentials"
+            key  = "DB_PASSWORD"
+          }
+        }
+      }
+      POSTGRES_DB = {
+        value_from = {
+          secret_key_ref = {
+            name = "django-db-credentials"
+            key  = "DB_DATABASE_NAME"
+          }
+        }
+      }
+      POSTGRES_USER = {
+        value_from = {
+          secret_key_ref = {
+            name = "django-db-credentials"
+            key  = "DB_USERNAME"
+          }
+        }
+      }
+      POSTGRES_PASSWORD = {
+        value_from = {
+          secret_key_ref = {
+            name = "django-db-credentials"
+            key  = "DB_PASSWORD"
+          }
+        }
+      }
+
+
+      DB_HOSTNAME = {
+        value_from = {
+          secret_key_ref = {
+            name = "django-db-credentials"
+            key  = "DB_HOST"
+          }
+        }
+      }
 
 
     }
+    pvc = {
+      kubeconfig-secret = {
+        secret     = true
+        name       = "kubeconfig-secret"
+        mount_path = "/kubeconfig"
+      }
+
+    }
+  }
+
+}