Rework Docker CI config

2026-09-22 00:19:52 -05:00
parent 11ee636988
commit 679b2e47b3
11 changed files with 195 additions and 295 deletions
--- a/deploy/20-deploy.yaml
+++ b/deploy/20-deploy.yaml
@@ -0,0 +1,84 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: coreid
+  namespace: coreid
+spec:
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: coreid
+  template:
+    metadata:
+      name: coreid
+      labels:
+        app: coreid
+    spec:
+      volumes:
+        - name: coreid-secrets-vol
+          secret:
+            secretName: coreid-secrets
+            optional: false
+      containers:
+        - name: coreid
+          image: registry.apps.millslan.net/starship/coreid:latest
+          imagePullPolicy: Always
+          volumeMounts:
+            - name: coreid-secrets-vol
+              mountPath: /secrets
+              readOnly: true
+          env:
+            - name: APP_URL
+              value: "https://coreid.garrettmills.dev/"
+            - name: DATABASE_HOST
+              value: 'db03.millslan.net'
+            - name: DATABASE_NAME
+              value: 'coreid_p1'
+            - name: LDAP_BASE_DC
+              value: 'dc=platform,dc=local'
+            - name: REDIS_HOST
+              value: coreid-redis.coreid.svc.cluster.local
+            - name: SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: SECRET
+                  name: coreid-secrets
+                  optional: false
+            - name: APP_NAME
+              value: "Starship CoreID"
+            - name: SERVER_PORT
+              value: '8000'
+            - name: DATABASE_PORT
+              value: '27017'
+            - name: DATABASE_AUTH
+              value: 'false'
+            - name: ENVIRONMENT
+              value: production
+            - name: SSL_ENABLE
+              value: 'false'
+            - name: LDAP_SERVER_PORT
+              value: '636'
+            - name: LDAP_SSL_ENABLE
+              value: 'true'
+            - name: LDAP_CERT_PATH
+              value: '/secrets/X509_CERT'
+            - name: LDAP_CERT_KEY_PATH
+              value: '/secrets/X509_KEY'
+            - name: SAML_CERT_FILE
+              value: '/secrets/X509_CERT'
+            - name: SAML_KEY_FILE
+              value: '/secrets/X509_KEY'
+            - name: RADIUS_CERT_FILE
+              value: '/secrets/X509_CERT'
+            - name: RADIUS_KEY_FILE
+              value: '/secrets/X509_KEY'
+            - name: REDIS_PORT
+              value: '6379'
+            - name: SMTP_PORT
+              value: '587'
+            - name: OPENID_CONNECT_PROXY
+              value: 'true'
+            - name: SESSION_MAX_AGE
+              value: '1209600000'