Files
CoreID/deploy/20-deploy.yaml
garrettmills 679b2e47b3
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Rework Docker CI config
2026-09-22 00:19:52 -05:00

85 lines
2.4 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: coreid
namespace: coreid
spec:
strategy:
type: Recreate
selector:
matchLabels:
app: coreid
template:
metadata:
name: coreid
labels:
app: coreid
spec:
volumes:
- name: coreid-secrets-vol
secret:
secretName: coreid-secrets
optional: false
containers:
- name: coreid
image: registry.apps.millslan.net/starship/coreid:latest
imagePullPolicy: Always
volumeMounts:
- name: coreid-secrets-vol
mountPath: /secrets
readOnly: true
env:
- name: APP_URL
value: "https://coreid.garrettmills.dev/"
- name: DATABASE_HOST
value: 'db03.millslan.net'
- name: DATABASE_NAME
value: 'coreid_p1'
- name: LDAP_BASE_DC
value: 'dc=platform,dc=local'
- name: REDIS_HOST
value: coreid-redis.coreid.svc.cluster.local
- name: SECRET
valueFrom:
secretKeyRef:
key: SECRET
name: coreid-secrets
optional: false
- name: APP_NAME
value: "Starship CoreID"
- name: SERVER_PORT
value: '8000'
- name: DATABASE_PORT
value: '27017'
- name: DATABASE_AUTH
value: 'false'
- name: ENVIRONMENT
value: production
- name: SSL_ENABLE
value: 'false'
- name: LDAP_SERVER_PORT
value: '636'
- name: LDAP_SSL_ENABLE
value: 'true'
- name: LDAP_CERT_PATH
value: '/secrets/X509_CERT'
- name: LDAP_CERT_KEY_PATH
value: '/secrets/X509_KEY'
- name: SAML_CERT_FILE
value: '/secrets/X509_CERT'
- name: SAML_KEY_FILE
value: '/secrets/X509_KEY'
- name: RADIUS_CERT_FILE
value: '/secrets/X509_CERT'
- name: RADIUS_KEY_FILE
value: '/secrets/X509_KEY'
- name: REDIS_PORT
value: '6379'
- name: SMTP_PORT
value: '587'
- name: OPENID_CONNECT_PROXY
value: 'true'
- name: SESSION_MAX_AGE
value: '1209600000'