k8s-manifests/customers/base/nextcloud-deployment.yml

kind: StatefulSet
apiVersion: apps/v1
metadata:
  name: customer-node
  labels:
    app: customer-node
spec:
  replicas: 1
  selector:
    matchLabels:
      app: customer-node
  updateStrategy:
    type: RollingUpdate
  volumeClaimTemplates:
    - metadata:
        name: nextcloud-data
      spec:
        storageClassName: mayastor-3
        accessModes:
          - ReadWriteOnce
        resources:
          requests:
            storage: 1Gi
  template:
    metadata:
      labels:
        app: customer-node
    spec:
      restartPolicy: Always
      containers:
        - name: customer
          #image: docker.sunet.se/drive/nextcloud-custom:25.0.3.3-4
          image: nextcloud:latest
          volumeMounts:
            - name: nextcloud-data
              mountPath: /var/www/html/config
              subPath: config
            - name: apache-config
              mountPath: /etc/apache2/sites-enabled/000-default.conf
              subPath: 000-default.conf
          resources:
            limits:
              cpu: 1500m
              memory: 2048Mi
            requests:
              cpu: 500m
              memory: 256Mi
          readinessProbe:
              tcpSocket:
                port: 80
              initialDelaySeconds: 180
              periodSeconds: 60
          livenessProbe:
              tcpSocket:
                port: 80
              initialDelaySeconds: 300
              periodSeconds: 180
          ports:
            - containerPort: 80
              name: nextcloud-http
          command: ['/bin/sh', '-c', '/etc/init.d/apache2 start']
      initContainers:
        - image: docker.sunet.se/sunet/docker-jinja:latest
          name: init-config
          volumeMounts:
            - name: nextcloud-config-template
              mountPath: /tmp/config.php.template
              subPath: config.php
            - name: nextcloud-data
              mountPath: /var/www/html/config
              subPath: config
          env:
            - name: GSS_MASTER_URL
              value: "https://drive.test.sunet.se"
            - name: GSS_JWT_KEY
              valueFrom:
                secretKeyRef:
                  name: gss-secret
                  key: "jwt_key"
            - name: LOOKUP_SERVER
              value: "https://lookup.drive.test.sunet.se"
            - name: MAIL_DOMAIN
              value: "drive.test.sunet.se"
            - name: MAIL_FROM_ADDRESS
              value: "noreply"
            - name: MAIL_SMTPHOST
              value: "smtp.sunet.se"
            - name: MAIL_SMTPNAME
              value: "noreply@drive.test.sunet.se"
            - name: MAIL_SMTPPASSWORD
              valueFrom:
                secretKeyRef:
                  name: mail-secret
                  key: "smtp_password"
            - name: MYSQL_DATABASE
              value: "customer_nextcloud"
            - name: MYSQL_USER
              value: "customer_nextcloud"
            - name: MYSQL_HOST
              value: "proxysql.proxysql"
            - name: MYSQL_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: db-secret
                  key: "db_password"
            - name: MYSQL_PORT
              value: "6033"
            - name: NEXTCLOUD_TRUSTED_DOMAINS
              value: "customer.drive.test.sunet.se"
            - name: NEXTCLOUD_ADMIN_USER
              value: admin
            - name: NEXTCLOUD_VERSION_STRING
              value: "25.0.3.3"
            - name: NEXTCLOUD_ADMIN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: nc-secret
                  key: "nc_admin_password"
            - name: NEXTCLOUD_PASSWORDSALT
              valueFrom:
                secretKeyRef:
                  name: nc-secret
                  key: "nc_passwordsalt"
            - name: NEXTCLOUD_INSTANCEID
              valueFrom:
                secretKeyRef:
                  name: nc-secret
                  key: "nc_instanceid"
            - name: NEXTCLOUD_SECRET
              valueFrom:
                secretKeyRef:
                  name: nc-secret
                  key: "nc_secret"
            - name: OBJECTSTORE_S3_REGION
              value: "us-east-1"
            - name: OBJECTSTORE_S3_HOST
              value: "s3.sto4.safedc.net"
            - name: OBJECTSTORE_S3_BUCKET
              value: "primary-customer-drive-test.sunet.se"
            - name: OBJECTSTORE_S3_KEY
              valueFrom:
                secretKeyRef:
                  name: s3-secret
                  key: "s3_key"
            - name: OBJECTSTORE_S3_SECRET
              valueFrom:
                secretKeyRef:
                  name: s3-secret
                  key: "s3_secret"
            - name: OBJECTSTORE_S3_USEPATH_STYLE
              value: "true"
            - name: OBJECTSTORE_S3_AUTOCREATE
              value: "true"
            - name: OBJECTSTORE_S3_SSL
              value: "true"
            - name: REDIS_HOST
              value: "redis.redis"
            - name: REDIS_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: redis-secret
                  key: "redis_password"
            - name: SITE_NAME
              value: "customer.drive.test.sunet.se"
          command: ["/bin/sh", "-c", "/usr/bin/j2 -f env -o /var/www/html/config/config.php /tmp/config.php.template"]
      volumes:
        - name: nextcloud-config-template
          configMap:
            name: nextcloud-configmap
            items:
              - key: "config.php"
                path: "config.php"
        - name: apache-config
          configMap:
            name: nextcloud-configmap
            items:
              - key: "000-default.conf"
                path: "000-default.conf"