feat(charts)!: Update Helm release yourls to 7.1.18 #2506
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.0.0
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "V2N2bE5nSlFEWg=="
- mariadb-password: "MmpIbEpFRWw0Ug=="
+ mariadb-root-password: "WjltZWU3YnpRRw=="
+ mariadb-password: "WXNxZml0S3ZXag=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,8 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
@@ -83,6 +135,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +187,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +203,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +214,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +229,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +239,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +256,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +266,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +301,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -289,8 +384,11 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r3
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
@@ -300,21 +398,50 @@
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +453,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 9c334eee0dda0d7d9ac425dc0c3643c25c864208a96a28ce5974070623b680ad
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +490,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -411,7 +594,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +610,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +648,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +665,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
12e5579 to
9aa2b0a
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.0
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "YzNabjg0dGZCUw=="
- mariadb-password: "TGFWQzBVY1EwYQ=="
+ mariadb-root-password: "dmhEelBENFoyRQ=="
+ mariadb-password: "SzNsWGVZa2JuTw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -289,8 +383,11 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r3
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
@@ -300,21 +397,50 @@
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 1fee1dd6752bbc8db72a4d5e77298f5179a7b8cebad2c74f8064506dd3fb5d30
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
9aa2b0a to
fb14bcb
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.0
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "ZENqdFdFeGFwRw=="
- mariadb-password: "UVBhTG1sMjN2YQ=="
+ mariadb-root-password: "OTVtZDR0VkNLQQ=="
+ mariadb-password: "TVg4Q3dCVE0wZQ=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -289,8 +383,11 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r3
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
@@ -300,21 +397,50 @@
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 1fee1dd6752bbc8db72a4d5e77298f5179a7b8cebad2c74f8064506dd3fb5d30
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
fb14bcb to
9ec54ef
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "dUZrb2FuS0NWbA=="
- mariadb-password: "THo2YWRiQ21jVw=="
+ mariadb-root-password: "VE90QWc2V0JGZg=="
+ mariadb-password: "cXVGdDlrUmlVQw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -289,8 +383,11 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r3
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
@@ -300,21 +397,50 @@
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: b137c12cb19eb6808c39bb0a58af301b721fc06f98b3ac77407f49311d422cbc
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
9ec54ef to
f01d5ac
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "c1pQYkpnRDJOdg=="
- mariadb-password: "U2IzeG1FOHhlUQ=="
+ mariadb-root-password: "WjlyUVZtME9QeQ=="
+ mariadb-password: "cVhMeUdjVGRPYw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r3
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: b137c12cb19eb6808c39bb0a58af301b721fc06f98b3ac77407f49311d422cbc
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
f01d5ac to
d8b941f
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "Mm16VXJGdE51Ug=="
- mariadb-password: "dmltTlM0bEtLZA=="
+ mariadb-root-password: "VWhIZkJYSU1aZQ=="
+ mariadb-password: "NkxiY1BURGdmUQ=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r5
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: b137c12cb19eb6808c39bb0a58af301b721fc06f98b3ac77407f49311d422cbc
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
d8b941f to
50f9a1e
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "UG40dVpRaEJKcg=="
- mariadb-password: "bXNuMFVGcUNFTw=="
+ mariadb-root-password: "NDhxTXJqVU00eg=="
+ mariadb-password: "WmdrQTd4dVM3bQ=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r6
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: b137c12cb19eb6808c39bb0a58af301b721fc06f98b3ac77407f49311d422cbc
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
50f9a1e to
57f2b8c
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.1.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "U1VSWmVEUWxWRQ=="
- mariadb-password: "Y3F4SzJkUFRMVw=="
+ mariadb-root-password: "ZlljcHNyU1JWUA=="
+ mariadb-password: "bEM0YU52SXFacw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r6
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: b137c12cb19eb6808c39bb0a58af301b721fc06f98b3ac77407f49311d422cbc
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
57f2b8c to
0a90ac1
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.2.0
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "ekJvVW5LWWdwcw=="
- mariadb-password: "QnZiSUFOSHdqNQ=="
+ mariadb-root-password: "NlBtNEZ6cHNHQQ=="
+ mariadb-password: "aFA3a3RWQWZXWQ=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r6
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 0f0603bf6de3ec5fa95b90e252d6c2d0257e2f49ef3b3a87c670f5cf009babf7
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r0
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
0a90ac1 to
564bc5d
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.2.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "UkRrY3J1R3VWVw=="
- mariadb-password: "U05vdWVWYmZuSw=="
+ mariadb-root-password: "U0lvWTVqUFllRA=="
+ mariadb-password: "MHY0cGV3Mm1RUw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r6
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 24fcd01a81fe09fa400b99a0f76aeb84f942080cb1701bed94180d6b8b4beb14
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.4
+ helm.sh/chart: mariadb-20.2.2
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "WklSOGNDUDVrVg=="
- mariadb-password: "cmxUZktrNnFkcg=="
+ mariadb-root-password: "T3Jac2VObGQzbw=="
+ mariadb-password: "ajNES044WEhmZw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r13
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 218fb9f55909b440a362fa11087f413d1032e8af189df1ac38fac2a2ba745d0f
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r3
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.4-debian-12-r3
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 375m
+ ephemeral-storage: 2Gi
+ memory: 384Mi
+ requests:
+ cpu: 250m
+ ephemeral-storage: 50Mi
+ memory: 256Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
c93f41b to
cca2013
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.2.4
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "TWNVSE1wTGVVYw=="
- mariadb-password: "SzZqQkpaUkpReQ=="
+ mariadb-root-password: "UDMyWTBScjFRNg=="
+ mariadb-password: "amhKZVMzYXg4Sw=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r13
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 95e20bb77efbec9f80d769c228d6218631af498103b169e9586bac40e86c5318
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
cca2013 to
951809e
Compare
|
Path: @@ -1,3 +1,52 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.2.4
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@@ -5,10 +54,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
- annotations:
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
automountServiceAccountToken: false
---
# Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +67,14 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
type: Opaque
data:
- mariadb-root-password: "NkR5dGlqY2R6Tw=="
- mariadb-password: "bHA5T2dNQ3BkeA=="
+ mariadb-root-password: "VHg2NWdJUjZUVA=="
+ mariadb-password: "dkhzRmdmb3QxcA=="
---
# Source: yourls/templates/secrets.yaml
apiVersion: v1
@@ -33,9 +83,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
type: kubernetes.io/basic-auth
data:
username: "ZGZyb2Jlcmc="
@@ -48,9 +98,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
data:
my.cnf: |-
@@ -58,6 +109,7 @@
skip-name-resolve
explicit_defaults_for_timestamp
basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
plugin_dir=/opt/bitnami/mariadb/plugin
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,9 +121,8 @@
character-set-server=UTF8
collation-server=utf8_general_ci
slow_query_log=0
- slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
long_query_time=10.0
-
+ binlog_expire_logs_seconds=2592000
[client]
port=3306
socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -83,6 +134,51 @@
socket=/opt/bitnami/mariadb/tmp/mysql.sock
pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
# Source: yourls/charts/mariadb/templates/primary/svc.yaml
apiVersion: v1
kind: Service
@@ -90,9 +186,10 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
annotations:
spec:
@@ -105,8 +202,8 @@
targetPort: mysql
nodePort: null
selector:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
---
# Source: yourls/templates/metrics-svc.yaml
@@ -116,12 +213,12 @@
name: yourls-metrics
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
app.kubernetes.io/component: metrics
annotations:
- prometheus.io/port: '9117'
+ prometheus.io/port: "9117"
prometheus.io/scrape: "true"
spec:
type: ClusterIP
@@ -131,8 +228,8 @@
protocol: TCP
targetPort: metrics
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/service.yaml
apiVersion: v1
@@ -141,9 +238,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
type: ClusterIP
ports:
@@ -158,8 +255,8 @@
targetPort: https
nodePort: null
selector:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
---
# Source: yourls/templates/deployment.yaml
apiVersion: apps/v1
@@ -168,24 +265,23 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
spec:
selector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
strategy:
- rollingUpdate: {}
type: RollingUpdate
replicas: 1
template:
metadata:
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
prometheus.io/port: '9117'
prometheus.io/scrape: "true"
@@ -204,10 +300,8 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
- namespaces:
- - "default"
+ app.kubernetes.io/name: yourls
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
@@ -227,7 +321,7 @@
- name: MARIADB_PORT_NUMBER
value: "3306"
- name: YOURLS_DB_HOST
- value: "yourls-mariadb"
+ value: yourls-mariadb:3306
- name: YOURLS_DB_NAME
value: "yourls"
- name: YOURLS_DB_USER
@@ -289,32 +383,64 @@
volumeMounts:
- mountPath: /var/www/html
name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
- name: metrics
- image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r13
imagePullPolicy: "Always"
command:
- /bin/apache_exporter
- --scrape_uri
- - http://status.localhost:8080/server-status/?auto
+ - http://status.localhost:80/server-status/?auto
ports:
- name: metrics
containerPort: 9117
livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 15
- timeoutSeconds: 5
readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
httpGet:
path: /metrics
port: metrics
- initialDelaySeconds: 5
- timeoutSeconds: 1
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
- name: yourls-data
persistentVolumeClaim:
claimName: yourls-config-pvc
@@ -326,31 +452,35 @@
name: yourls-mariadb
namespace: "default"
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
- serviceName: yourls-mariadb
+ serviceName: yourls-mariadb-headless
updateStrategy:
type: RollingUpdate
template:
metadata:
annotations:
- checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+ checksum/configuration: 95e20bb77efbec9f80d769c228d6218631af498103b169e9586bac40e86c5318
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
app.kubernetes.io/component: primary
spec:
+ automountServiceAccountToken: false
serviceAccountName: yourls-mariadb
affinity:
podAffinity:
@@ -359,23 +489,75 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
containers:
- name: mariadb
- image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
env:
- name: BITNAMI_DEBUG
value: "false"
@@ -393,6 +575,8 @@
key: mariadb-password
- name: MARIADB_DATABASE
value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
ports:
- name: mysql
containerPort: 3306
@@ -411,7 +595,7 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin status -uroot -p"${password_aux}"
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 30
@@ -427,17 +611,37 @@
if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
fi
- mysqladmin status -uroot -p"${password_aux}"
+ mariadb-admin ping -uroot -p"${password_aux}"
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
volumeMounts:
- name: data
mountPath: /bitnami/mariadb
- name: config
mountPath: /opt/bitnami/mariadb/conf/my.cnf
subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
volumes:
+ - name: empty-dir
+ emptyDir: {}
- name: config
configMap:
name: yourls-mariadb
@@ -445,8 +649,8 @@
- metadata:
name: data
labels:
- app.kubernetes.io/name: mariadb
app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
app.kubernetes.io/component: primary
spec:
accessModes:
@@ -462,9 +666,9 @@
name: yourls
namespace: "default"
labels:
- app.kubernetes.io/name: yourls
app.kubernetes.io/instance: yourls
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
annotations:
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
external-dns/is-public: "true" |
951809e to
aa5a9bc
Compare
|
Path: @@ -1 +1,690 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.2.4
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "T3J3cXJ4VmVTVA=="
+ mariadb-password: "aWVWT1VtVDIwZA=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r13
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: 95e20bb77efbec9f80d769c228d6218631af498103b169e9586bac40e86c5318
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
aa5a9bc to
738deb3
Compare
|
Path: @@ -1 +1,690 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.2.4
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "MU96cUxFNFhiWQ=="
+ mariadb-password: "SVB6cmZnb0h1UA=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r15
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: 95e20bb77efbec9f80d769c228d6218631af498103b169e9586bac40e86c5318
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
738deb3 to
84a11f5
Compare
|
Path: @@ -1 +1,690 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.2.4
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "UllqTjNYbE1hZw=="
+ mariadb-password: "V0ZFYU1DdWx4MA=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r16
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: 95e20bb77efbec9f80d769c228d6218631af498103b169e9586bac40e86c5318
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r2
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
84a11f5 to
285a83b
Compare
|
Path: @@ -1 +1,691 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.3.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "U0w1SW9LNE5BdA=="
+ mariadb-password: "NkRxcUVmSXl2ZQ=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r16
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: bc4b40fe9dc10df074aa2e9f0d0e0b6d54901bf5b749b8ba9cb187d54cc82868
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
285a83b to
1ce0d9b
Compare
|
Path: @@ -1 +1,691 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.3.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "QnJMbVRvT1g3TQ=="
+ mariadb-password: "NlhQblJZM2xaTw=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r16
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: bc4b40fe9dc10df074aa2e9f0d0e0b6d54901bf5b749b8ba9cb187d54cc82868
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
1ce0d9b to
7a1cf8c
Compare
|
Path: @@ -1 +1,695 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.4.0
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "M2JZZThUZ0ZPQg=="
+ mariadb-password: "VzVWMjlEdnNBWg=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r16
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: e5d683a28c4b41e90f74459deaa86193e3b5e424cfdad7e5b5f52b116e63eec4
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD_FILE
+ value: /opt/bitnami/mariadb/secrets/mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD_FILE
+ value: /opt/bitnami/mariadb/secrets/mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: mariadb-credentials
+ mountPath: /opt/bitnami/mariadb/secrets/
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ - name: mariadb-credentials
+ secret:
+ secretName: yourls-mariadb
+ items:
+ - key: mariadb-root-password
+ path: mariadb-root-password
+ - key: mariadb-password
+ path: mariadb-password
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
Signed-off-by: Danny Froberg <dfroberg@users.noreply.github.com>
7a1cf8c to
ad236d5
Compare
|
Path: @@ -1 +1,695 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/version: 11.4.5
+ helm.sh/chart: mariadb-20.4.1
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 3306
+ - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/charts/mariadb/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+automountServiceAccountToken: false
+---
+# Source: yourls/charts/mariadb/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+type: Opaque
+data:
+ mariadb-root-password: "SzlBZlIyclFkNQ=="
+ mariadb-password: "czVZQzdiTnVEdQ=="
+---
+# Source: yourls/templates/secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+type: kubernetes.io/basic-auth
+data:
+ username: "ZGZyb2Jlcmc="
+ password: "JHtTRUNSRVRfWU9VUkxTX0FETUlOX1BBU1NXT1JEfQ=="
+---
+# Source: yourls/charts/mariadb/templates/primary/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+data:
+ my.cnf: |-
+ [mysqld]
+ skip-name-resolve
+ explicit_defaults_for_timestamp
+ basedir=/opt/bitnami/mariadb
+ datadir=/bitnami/mariadb/data
+ plugin_dir=/opt/bitnami/mariadb/plugin
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ tmpdir=/opt/bitnami/mariadb/tmp
+ max_allowed_packet=16M
+ bind-address=*
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+ log-error=/opt/bitnami/mariadb/logs/mysqld.log
+ character-set-server=UTF8
+ collation-server=utf8_general_ci
+ slow_query_log=0
+ long_query_time=10.0
+ binlog_expire_logs_seconds=2592000
+ [client]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ default-character-set=UTF8
+ plugin_dir=/opt/bitnami/mariadb/plugin
+
+ [manager]
+ port=3306
+ socket=/opt/bitnami/mariadb/tmp/mysql.sock
+ pid-file=/opt/bitnami/mariadb/tmp/mysqld.pid
+---
+# Source: yourls/templates/metrics-httpd-configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: yourls-apache-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+data:
+ 00_status-vhost.conf: |-
+ <VirtualHost 127.0.0.1:80>
+ ServerName status.localhost
+ <Location /server-status>
+ Require local
+ SetHandler server-status
+ </Location>
+ </VirtualHost>
+---
+# Source: yourls/charts/mariadb/templates/headless-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb-headless
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+spec:
+ type: ClusterIP
+ publishNotReadyAddresses: true
+ clusterIP: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+---
+# Source: yourls/charts/mariadb/templates/primary/svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ annotations:
+spec:
+ type: ClusterIP
+ sessionAffinity: None
+ ports:
+ - name: mysql
+ port: 3306
+ protocol: TCP
+ targetPort: mysql
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+---
+# Source: yourls/templates/metrics-svc.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls-metrics
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ app.kubernetes.io/component: metrics
+ annotations:
+ prometheus.io/port: "9117"
+ prometheus.io/scrape: "true"
+spec:
+ type: ClusterIP
+ ports:
+ - name: metrics
+ port: 9117
+ protocol: TCP
+ targetPort: metrics
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ type: ClusterIP
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: http
+ nodePort: null
+ - name: https
+ port: 443
+ protocol: TCP
+ targetPort: https
+ nodePort: null
+ selector:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+---
+# Source: yourls/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ prometheus.io/port: '9117'
+ prometheus.io/scrape: "true"
+ spec:
+ serviceAccountName: default
+ # yamllint disable rule:indentation
+ hostAliases:
+ - hostnames:
+ - status.localhost
+ ip: 127.0.0.1
+ # yamllint enable rule:indentation
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: yourls
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ containers:
+ - name: yourls
+ image: docker.io/yourls:1.9.1-fpm-alpine
+ imagePullPolicy: "Always"
+ env:
+ - name: APP_DEBUG
+ value: "false"
+ - name: ALLOW_EMPTY_PASSWORD
+ value: "yes"
+ - name: MARIADB_HOST
+ value: "yourls-mariadb"
+ - name: MARIADB_PORT_NUMBER
+ value: "3306"
+ - name: YOURLS_DB_HOST
+ value: yourls-mariadb:3306
+ - name: YOURLS_DB_NAME
+ value: "yourls"
+ - name: YOURLS_DB_USER
+ value: "yourls"
+ - name: YOURLS_DB_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls-mariadb
+ key: mariadb-password
+ - name: YOURLS_DB_PREFIX
+ value: "yourls_"
+ - name: YOURLS_SITE
+ value: "http://yourls"
+ - name: YOURLS_USER
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: username
+ - name: YOURLS_PASS
+ valueFrom:
+ secretKeyRef:
+ name: yourls
+ key: password
+ - name: APACHE_HTTP_PORT_NUMBER
+ value: "80"
+ - name: APACHE_HTTPS_PORT_NUMBER
+ value: "443"
+ envFrom:
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ livenessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ readinessProbe:
+ failureThreshold: 6
+ httpGet:
+ httpHeaders: []
+ path: /admin/install.php
+ port: http
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ resources:
+ limits: {}
+ requests:
+ cpu: 300m
+ memory: 512Mi
+ volumeMounts:
+ - mountPath: /var/www/html
+ name: yourls-data
+ - name: apache-metrics
+ mountPath: /etc/apache2/sites-available/00_status-vhost.conf
+ subPath: 00_status-vhost.conf
+ - name: metrics
+ image: docker.io/bitnami/apache-exporter:1.0.9-debian-12-r16
+ imagePullPolicy: "Always"
+ command:
+ - /bin/apache_exporter
+ - --scrape_uri
+ - http://status.localhost:80/server-status/?auto
+ ports:
+ - name: metrics
+ containerPort: 9117
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 15
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
+ httpGet:
+ path: /metrics
+ port: metrics
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 3
+ httpGet:
+ path: /metrics
+ port: metrics
+ resources:
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ volumes:
+ - name: apache-metrics
+ configMap:
+ name: yourls-apache-metrics
+ defaultMode: 0644
+ - name: yourls-data
+ persistentVolumeClaim:
+ claimName: yourls-config-pvc
+---
+# Source: yourls/charts/mariadb/templates/primary/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: yourls-mariadb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+spec:
+ replicas: 1
+ revisionHistoryLimit: 10
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ serviceName: yourls-mariadb-headless
+ updateStrategy:
+ type: RollingUpdate
+ template:
+ metadata:
+ annotations:
+ checksum/configuration: 38a31a6aacbbad69927cc9de63e67bbe08f8fcc7d521879fea0b30f7c480b2ba
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/part-of: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: yourls-mariadb
+ affinity:
+ podAffinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ topologyKey: kubernetes.io/hostname
+ weight: 1
+ nodeAffinity:
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
+ initContainers:
+ - name: preserve-logs-symlinks
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ command:
+ - /bin/bash
+ args:
+ - -ec
+ - |
+ #!/bin/bash
+
+ . /opt/bitnami/scripts/libfs.sh
+ # We copy the logs folder because it has symlinks to stdout and stderr
+ if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+ cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+ fi
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /emptydir
+ containers:
+ - name: mariadb
+ image: docker.io/bitnami/mariadb:11.4.5-debian-12-r4
+ imagePullPolicy: "IfNotPresent"
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ readOnlyRootFilesystem: true
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
+ env:
+ - name: BITNAMI_DEBUG
+ value: "false"
+ - name: MARIADB_ROOT_PASSWORD_FILE
+ value: /opt/bitnami/mariadb/secrets/mariadb-root-password
+ - name: MARIADB_USER
+ value: "yourls"
+ - name: MARIADB_PASSWORD_FILE
+ value: /opt/bitnami/mariadb/secrets/mariadb-password
+ - name: MARIADB_DATABASE
+ value: "yourls"
+ - name: MARIADB_ENABLE_SSL
+ value: "no"
+ ports:
+ - name: mysql
+ containerPort: 3306
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin status -uroot -p"${password_aux}"
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ exec:
+ command:
+ - /bin/bash
+ - -ec
+ - |
+ password_aux="${MARIADB_ROOT_PASSWORD:-}"
+ if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
+ password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
+ fi
+ mariadb-admin ping -uroot -p"${password_aux}"
+ resources:
+ limits:
+ cpu: 750m
+ ephemeral-storage: 2Gi
+ memory: 768Mi
+ requests:
+ cpu: 500m
+ ephemeral-storage: 50Mi
+ memory: 512Mi
+ volumeMounts:
+ - name: data
+ mountPath: /bitnami/mariadb
+ - name: config
+ mountPath: /opt/bitnami/mariadb/conf/my.cnf
+ subPath: my.cnf
+ - name: mariadb-credentials
+ mountPath: /opt/bitnami/mariadb/secrets/
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/conf
+ subPath: app-conf-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/tmp
+ subPath: app-tmp-dir
+ - name: empty-dir
+ mountPath: /opt/bitnami/mariadb/logs
+ subPath: app-logs-dir
+ volumes:
+ - name: empty-dir
+ emptyDir: {}
+ - name: config
+ configMap:
+ name: yourls-mariadb
+ - name: mariadb-credentials
+ secret:
+ secretName: yourls-mariadb
+ items:
+ - key: mariadb-root-password
+ path: mariadb-root-password
+ - key: mariadb-password
+ path: mariadb-password
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/name: mariadb
+ app.kubernetes.io/component: primary
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
+---
+# Source: yourls/templates/ingress.yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: yourls
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: yourls
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: yourls
+ annotations:
+ external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN}
+ external-dns/is-public: "true"
+ haproxy-ingress-proxy.pfsense.org/backend: nginx-443
+ haproxy-ingress-proxy.pfsense.org/enabled: "true"
+ haproxy-ingress-proxy.pfsense.org/frontend: https-443
+ kubernetes.io/ingress.class: nginx
+spec:
+ rules:
+ - host: "yourls.local"
+ http:
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ backend:
+ service:
+ name: yourls
+ port:
+ name: http |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.2.7->7.1.18Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
YOURLS/charts (yourls)
v7.1.18Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.17...yourls-7.1.18
v7.1.17Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.16...yourls-7.1.17
v7.1.16Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.15...yourls-7.1.16
v7.1.15Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.14...yourls-7.1.15
v7.1.14Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.13...yourls-7.1.14
v7.1.13Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.12...yourls-7.1.13
v7.1.12Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.11...yourls-7.1.12
v7.1.11Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.10...yourls-7.1.11
v7.1.10Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.9...yourls-7.1.10
v7.1.9Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.8...yourls-7.1.9
v7.1.8Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.7...yourls-7.1.8
v7.1.7Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.6...yourls-7.1.7
v7.1.6Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.5...yourls-7.1.6
v7.1.5Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.4...yourls-7.1.5
v7.1.4Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.3...yourls-7.1.4
v7.1.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.2...yourls-7.1.3
v7.1.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.1...yourls-7.1.2
v7.1.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.1.0...yourls-7.1.1
v7.1.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.12...yourls-7.1.0
v7.0.12Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.11...yourls-7.0.12
v7.0.11Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.10...yourls-7.0.11
v7.0.10Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.9...yourls-7.0.10
v7.0.9Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.8...yourls-7.0.9
v7.0.8Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.7...yourls-7.0.8
v7.0.7Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.6...yourls-7.0.7
v7.0.6Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.5...yourls-7.0.6
v7.0.5Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.4...yourls-7.0.5
v7.0.4Compare Source
Your Own URL Shortener
What's Changed
New Contributors
Full Changelog: YOURLS/charts@yourls-7.0.3...yourls-7.0.4
v7.0.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.2...yourls-7.0.3
v7.0.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.1...yourls-7.0.2
v7.0.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-7.0.0...yourls-7.0.1
v7.0.0Compare Source
Your Own URL Shortener
Upgrade Notes
This major bump updates the MariaDB sub-chart to version 20.0.0.
This sub-chart updates the
StatefulSetobjectsserviceNameto use a headless service, as the current non-headless service attached to it was not providing DNS entries.This will cause an upgrade issue because it changes "immutable fields". To workaround it, delete the
StatefulSetobjects as follows (replace theRELEASE_NAMEplaceholder):Then execute
helm upgradeas usual.What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.14...yourls-7.0.0
v6.1.14Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.13...yourls-6.1.14
v6.1.13Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.12...yourls-6.1.13
v6.1.12Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.11...yourls-6.1.12
v6.1.11Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.10...yourls-6.1.11
v6.1.10Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.9...yourls-6.1.10
v6.1.9Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.8...yourls-6.1.9
v6.1.8Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.7...yourls-6.1.8
v6.1.7Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.6...yourls-6.1.7
v6.1.6Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.5...yourls-6.1.6
v6.1.5Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.4...yourls-6.1.5
v6.1.4Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.3...yourls-6.1.4
v6.1.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.2...yourls-6.1.3
v6.1.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.1...yourls-6.1.2
v6.1.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.1.0...yourls-6.1.1
v6.1.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-6.0.0...yourls-6.1.0
v6.0.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.15.0...yourls-6.0.0
v5.15.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.12...yourls-5.15.0
v5.14.12Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.11...yourls-5.14.12
v5.14.11Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.10...yourls-5.14.11
v5.14.10Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.9...yourls-5.14.10
v5.14.9Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.8...yourls-5.14.9
v5.14.8Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.7...yourls-5.14.8
v5.14.7Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.6...yourls-5.14.7
v5.14.6Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.5...yourls-5.14.6
v5.14.5Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.4...yourls-5.14.5
v5.14.4Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.3...yourls-5.14.4
v5.14.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.2...yourls-5.14.3
v5.14.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.1...yourls-5.14.2
v5.14.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.14.0...yourls-5.14.1
v5.14.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.13.3...yourls-5.14.0
v5.13.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.13.2...yourls-5.13.3
v5.13.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.13.1...yourls-5.13.2
v5.13.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.13.0...yourls-5.13.1
v5.13.0Compare Source
Your Own URL Shortener
What's Changed
New Contributors
Full Changelog: YOURLS/charts@yourls-5.12.10...yourls-5.13.0
v5.12.10Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.9...yourls-5.12.10
v5.12.9Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.8...yourls-5.12.9
v5.12.8Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.7...yourls-5.12.8
v5.12.7Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.6...yourls-5.12.7
v5.12.6Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.5...yourls-5.12.6
v5.12.5Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.4...yourls-5.12.5
v5.12.4Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.3...yourls-5.12.4
v5.12.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.2...yourls-5.12.3
v5.12.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.1...yourls-5.12.2
v5.12.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.12.0...yourls-5.12.1
v5.12.0Compare Source
Your Own URL Shortener
Full Changelog: YOURLS/charts@yourls-5.11.3...yourls-5.12.0
v5.11.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.11.2...yourls-5.11.3
v5.11.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.11.1...yourls-5.11.2
v5.11.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.11.0...yourls-5.11.1
v5.11.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.7...yourls-5.11.0
v5.10.7Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.6...yourls-5.10.7
v5.10.6Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.5...yourls-5.10.6
v5.10.5Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.4...yourls-5.10.5
v5.10.4Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.3...yourls-5.10.4
v5.10.3Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.2...yourls-5.10.3
v5.10.2Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.1...yourls-5.10.2
v5.10.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.10.0...yourls-5.10.1
v5.10.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.9.1...yourls-5.10.0
v5.9.1Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.9.0...yourls-5.9.1
v5.9.0Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.17...yourls-5.9.0
v5.8.17Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.16...yourls-5.8.17
v5.8.16Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.15...yourls-5.8.16
v5.8.15Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.14...yourls-5.8.15
v5.8.14Compare Source
Your Own URL Shortener
What's Changed
New Contributors
Full Changelog: YOURLS/charts@yourls-5.8.13...yourls-5.8.14
v5.8.13Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.12...yourls-5.8.13
v5.8.12Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.11...yourls-5.8.12
v5.8.11Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.10...yourls-5.8.11
v5.8.10Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.9...yourls-5.8.10
v5.8.9Compare Source
Your Own URL Shortener
What's Changed
Full Changelog: YOURLS/charts@yourls-5.8.8...yourls-5.8.9
v5.8.8Compare Source
Your Own URL Shortener
What's Changed
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.