229 lines
7 KiB
YAML
229 lines
7 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: ${CI_PROJECT_PATH_SLUG}-config-map
|
|
data:
|
|
APP_NAME: "${APP_APP_NAME}"
|
|
APP_ENV: "${APP_APP_ENV}"
|
|
APP_KEY: "${APP_APP_KEY}"
|
|
APP_DEBUG: "${APP_APP_DEBUG}"
|
|
APP_URL: "https://${REDIRECT}${APP_DOMAIN}"
|
|
LOG_CHANNEL: "k8s"
|
|
DB_HOST: "${APP_GLOBAL_OVH_MYSQL_HOST}"
|
|
DB_PORT: "${APP_GLOBAL_OVH_MYSQL_PORT}"
|
|
DB_DATABASE: "${APP_DB_DATABASE}"
|
|
DB_USERNAME: "${APP_DB_USERNAME}"
|
|
DB_PASSWORD: "${APP_DB_PASSWORD}"
|
|
MAIL_HOST: "${APP_MAIL_HOST}"
|
|
MAIL_PORT: "${APP_MAIL_PORT}"
|
|
MAIL_USERNAME: "${APP_MAIL_USERNAME}"
|
|
MAIL_PASSWORD: "${APP_MAIL_PASSWORD}"
|
|
MAIL_ENCRYPTION: "${APP_MAIL_ENCRYPTION}"
|
|
MAIL_FROM_ADDRESS: "${APP_MAIL_FROM_ADDRESS}"
|
|
MAIL_FROM_NAME: "${APP_APP_NAME}"
|
|
MAIL_LIST_CONTACT: "${APP_MAIL_LIST_CONTACT}"
|
|
MAIL_LIST_PASSERELLE: "${APP_MAIL_LIST_PASSERELLE}"
|
|
MAIL_LIST_NL: "${APP_MAIL_LIST_NL}"
|
|
MAIL_MKT_JEUX: "${APP_MAIL_MKT_JEUX}"
|
|
CRM_ENDPOINT: "${APP_CRM_ENDPOINT}"
|
|
CRM_TOKEN: "${APP_CRM_TOKEN}"
|
|
CRM_PASSWORD: "${APP_CRM_PASSWORD}"
|
|
CRM_QUESTION_ID: "${APP_CRM_QUESTION_ID}"
|
|
CRM_SUBJECTS: '${APP_CRM_SUBJECTS}'
|
|
MESBR_REF_SITE: "${APP_MESBR_REF_SITE}"
|
|
MESBR_REF_CAMP: "${APP_MESBR_REF_CAMP}"
|
|
MESBR_ENDPOINT: "${APP_MESBR_ENDPOINT}"
|
|
MATOMO_SITE_ID: "${APP_MATOMO_SITE_ID}"
|
|
SENTRY_LARAVEL_DSN: "${APP_SENTRY_LARAVEL_DSN}"
|
|
DIGITAL_RECRUITER_URL: "${APP_DIGITAL_RECRUITER_URL}"
|
|
LDC_WEB_API_KEY: "${APP_LDC_WEB_API_KEY}"
|
|
SAML2_SP_CERT_x509: "${APP_SAML2_SP_CERT_x509}"
|
|
SAML2_SP_CERT_PRIVATEKEY: "${APP_SAML2_SP_CERT_PRIVATEKEY}"
|
|
SAML2_CONTACT_TECHNICAL_EMAIL: "${APP_SAML2_CONTACT_TECHNICAL_EMAIL}"
|
|
SAML2_CONTACT_SUPPORT_EMAIL: "${APP_SAML2_CONTACT_SUPPORT_EMAIL}"
|
|
SAML2_DEFAULT_TENANT_UUID: "${APP_SAML2_DEFAULT_TENANT_UUID}"
|
|
GOOGLE_RECAPTCHA_PRIVATE: "${APP_GOOGLE_RECAPTCHA_PRIVATE}"
|
|
GOOGLE_RECAPTCHA_PUBLIC: "${APP_GOOGLE_RECAPTCHA_PUBLIC}"
|
|
GOOGLE_RECAPTCHA_VERSION: "${APP_GOOGLE_RECAPTCHA_VERSION}"
|
|
MEILISEARCH_HOST: "meilisearch.common-services:7700"
|
|
MEILISEARCH_KEY: "${APP_MEILISEARCH_KEY}"
|
|
SCOUT_PREFIX: "${APP_SCOUT_PREFIX}"
|
|
SCOUT_QUEUE: "${APP_SCOUT_QUEUE}"
|
|
CACHE_DRIVER: "${APP_CACHE_DRIVER}"
|
|
REDIS_HOST: "${APP_GLOBAL_OVH_REDIS_HOST}"
|
|
REDIS_PORT: "${APP_GLOBAL_OVH_REDIS_PORT}"
|
|
REDIS_USERNAME: "${APP_REDIS_USERNAME}"
|
|
REDIS_PASSWORD: "${APP_REDIS_PASSWORD}"
|
|
REDIS_PREFIX: "${APP_REDIS_PREFIX}"
|
|
REDIS_SCHEME: "${APP_GLOBAL_OVH_REDIS_SCHEME}"
|
|
UWIL_ADMIN_SECURE_CIDR_LIST: "${APP_GLOBAL_UWIL_ADMIN_SECURE_CIDR_LIST}"
|
|
AXEPTA_ENDPOINT: "${APP_AXEPTA_ENDPOINT}"
|
|
AXEPTA_MERCHANT_ID: "${APP_AXEPTA_MERCHANT_ID}"
|
|
AXEPTA_APIKEY: "${APP_AXEPTA_APIKEY}"
|
|
AXEPTA_HMAC: "${APP_AXEPTA_HMAC}"
|
|
GOLDEN_GAME_START: "${APP_GOLDEN_GAME_START}"
|
|
GOLDEN_VOTE_START_AT: "${APP_GOLDEN_VOTE_START_AT}"
|
|
GOLDEN_VOTE_END_AT: "${APP_GOLDEN_VOTE_END_AT}"
|
|
GOLDEN_END_PARTICIPATION_END_AT: "${APP_GOLDEN_END_PARTICIPATION_END_AT}"
|
|
GOLDEN_END_GAME_END_AT: "${APP_GOLDEN_END_GAME_END_AT}"
|
|
MJML_BINARY_PATH: "${APP_MJML_BINARY_PATH}"
|
|
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: ${CI_PROJECT_PATH_SLUG}-pvc-storage
|
|
spec:
|
|
storageClassName: "csi-cinder-classic"
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: $APP_PVC_SIZE
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: ${CI_PROJECT_PATH_SLUG}-deployment
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: ${CI_PROJECT_PATH_SLUG}-app
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: ${CI_PROJECT_PATH_SLUG}-app
|
|
spec:
|
|
containers:
|
|
- name: ${CI_PROJECT_PATH_SLUG}-container
|
|
image: $IMAGE_TAG
|
|
envFrom:
|
|
- configMapRef:
|
|
name: ${CI_PROJECT_PATH_SLUG}-config-map
|
|
resources:
|
|
limits:
|
|
cpu: "${APP_CI_CPU_LIMIT}"
|
|
memory: "${APP_CI_MEMORY_LIMIT}"
|
|
requests:
|
|
cpu: "${APP_CI_CPU_REQUEST}"
|
|
memory: "${APP_CI_MEMORY_REQUEST}"
|
|
volumeMounts:
|
|
- name: storage
|
|
mountPath: /app/srcs/storage
|
|
- name: ${CI_PROJECT_PATH_SLUG}-queue-worker
|
|
image: $IMAGE_TAG
|
|
lifecycle:
|
|
preStop:
|
|
exec:
|
|
command: [ "/bin/sh", "-c", "kill -s TERM 1; while test $(ps ax | grep -v grep | grep bash | wc -l) -gt 0; do sleep 2s; done" ]
|
|
resources:
|
|
limits:
|
|
cpu: "${APP_CI_CPU_LIMIT}"
|
|
memory: "${APP_CI_MEMORY_LIMIT}"
|
|
requests:
|
|
cpu: "${APP_CI_CPU_REQUEST}"
|
|
memory: "${APP_CI_MEMORY_REQUEST}"
|
|
command:
|
|
- "bash"
|
|
args:
|
|
- "k8s-queues.sh"
|
|
envFrom:
|
|
- configMapRef:
|
|
name: ${CI_PROJECT_PATH_SLUG}-config-map
|
|
volumeMounts:
|
|
- name: storage
|
|
mountPath: /app/srcs/storage
|
|
imagePullSecrets:
|
|
- name: docker-registry-credentials
|
|
securityContext:
|
|
runAsUser: 82
|
|
runAsGroup: 82
|
|
fsGroup: 82
|
|
fsGroupChangePolicy: "OnRootMismatch"
|
|
volumes:
|
|
- name: storage
|
|
persistentVolumeClaim:
|
|
claimName: ${CI_PROJECT_PATH_SLUG}-pvc-storage
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: ${CI_PROJECT_PATH_SLUG}-service
|
|
spec:
|
|
selector:
|
|
app: ${CI_PROJECT_PATH_SLUG}-app
|
|
ports:
|
|
- port: 80
|
|
targetPort: 80
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: ${CI_PROJECT_PATH_SLUG}-ingress-route
|
|
spec:
|
|
entryPoints:
|
|
- web
|
|
- websecure
|
|
routes:
|
|
- match: Host(`${APP_DOMAIN}`) || Host(`www.${APP_DOMAIN}`)
|
|
kind: Rule
|
|
services:
|
|
- name: ${CI_PROJECT_PATH_SLUG}-service
|
|
port: 80
|
|
middlewares:
|
|
- name: redirect-no-www-to-www
|
|
tls:
|
|
secretName: ${CRT_TLS_NAME}
|
|
---
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: ${CI_PROJECT_PATH_SLUG}-cronjob
|
|
spec:
|
|
schedule: "* * * * *"
|
|
successfulJobsHistoryLimit: 1
|
|
failedJobsHistoryLimit: 1
|
|
concurrencyPolicy: Forbid
|
|
jobTemplate:
|
|
spec:
|
|
template:
|
|
spec:
|
|
affinity:
|
|
podAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: app
|
|
operator: In
|
|
values:
|
|
- ${CI_PROJECT_PATH_SLUG}-app
|
|
topologyKey: "kubernetes.io/hostname"
|
|
namespaces: [ $KUBE_NAMESPACE ]
|
|
containers:
|
|
- name: ${CI_PROJECT_PATH_SLUG}-scheduled
|
|
image: $IMAGE_TAG
|
|
imagePullPolicy: IfNotPresent
|
|
command:
|
|
- "php"
|
|
args:
|
|
- "artisan"
|
|
- "schedule:run"
|
|
envFrom:
|
|
- configMapRef:
|
|
name: ${CI_PROJECT_PATH_SLUG}-config-map
|
|
volumeMounts:
|
|
- name: storage
|
|
mountPath: /app/srcs/storage
|
|
imagePullSecrets:
|
|
- name: docker-registry-credentials
|
|
volumes:
|
|
- name: storage
|
|
persistentVolumeClaim:
|
|
claimName: ${CI_PROJECT_PATH_SLUG}-pvc-storage
|
|
securityContext:
|
|
runAsUser: 82
|
|
runAsGroup: 82
|
|
fsGroup: 82
|
|
fsGroupChangePolicy: "OnRootMismatch"
|
|
restartPolicy: OnFailure
|