65 lines
1.4 KiB
YAML
65 lines
1.4 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: firefly-iii
|
|
|
|
resources:
|
|
- redis.yaml
|
|
- firefly-iii.yaml
|
|
- ingress.yaml
|
|
- importer.yaml
|
|
- importer-ingress.yaml
|
|
|
|
configMapGenerator:
|
|
- name: firefly-iii
|
|
envs:
|
|
- firefly-iii.env
|
|
options:
|
|
disableNameSuffixHash: true
|
|
- name: firefly-iii-importer
|
|
envs:
|
|
- firefly-iii-importer.env
|
|
options:
|
|
disableNameSuffixHash: true
|
|
|
|
secretGenerator:
|
|
- name: firefly-iii
|
|
files:
|
|
- app.key
|
|
- cron.token
|
|
options:
|
|
disableNameSuffixHash: true
|
|
- name: firefly-iii-importer
|
|
files:
|
|
- dustin.access-token
|
|
- tabitha.access-token
|
|
options:
|
|
disableNameSuffixHash: true
|
|
|
|
patches:
|
|
# This patch changes the source secret for the PostgreSQL database
|
|
# password from the default (`db.password` inside `firefly-iii`) to
|
|
# a secret managed by the postgres operator.
|
|
- patch: |-
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: firefly-iii
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
- name: firefly-iii
|
|
env:
|
|
- name: DB_PASSWORD_FILE
|
|
value: /run/secrets/postgresql/password
|
|
volumeMounts:
|
|
- name: db-secret
|
|
mountPath: /run/secrets/postgresql
|
|
readOnly: true
|
|
volumes:
|
|
- name: db-secret
|
|
secret:
|
|
secretName: firefly-iii.firefly.default.credentials.postgresql.acid.zalan.do
|
|
defaultMode: 0440
|