Working Base Config for Taiga #1

Merged
patdyn merged 60 commits from config-play into main 2023-09-01 10:38:18 +00:00
12 changed files with 52 additions and 39 deletions
Showing only changes of commit f5c352a80e - Show all commits

View file

@ -0,0 +1,13 @@
Comment EVENTS_PUSH_BACKEND_URL in taiga-events-deployment
Indent name fields in envFrom field in taiga-back-deployment
Remove indentation from name field in taiga-gateway-deployment
Switch name and mountPath field positions in taiga-gateway-deployment
Change postres to 1Gi in pvc.yaml
b64 encoded values in *-secret.yaml
Change integers to strings in env vars in deployments and configmaps
Change bools to strings in env vars in deployments and configmaps
Increase storage to 8Gi in pvc.yaml
Change storageClassName to local-path in pvc.yaml
Correct volume names in async, back, gateway
Use service name as address in taiga-gateway-configmap.yaml
Correct reference to taiga-configmap and taiga-secret in taiga-back-deployment

View file

@ -5,7 +5,7 @@ metadata:
labels: labels:
type: local type: local
spec: spec:
storageClassName: manual storageClassName: local-path
accessModes: accessModes:
- ReadWriteOnce - ReadWriteOnce
capacity: capacity:

View file

@ -5,9 +5,9 @@ metadata:
labels: labels:
app: postgres app: postgres
spec: spec:
storageClassName: postgres storageClassName: local-path
accessModes: accessModes:
- ReadWriteOnce - ReadWriteOnce
resources: resources:
requests: requests:
storage: postgres storage: 8Gi

View file

@ -4,5 +4,5 @@ metadata:
name: postgres-secret name: postgres-secret
type: Opaque type: Opaque
data: data:
postgres-user: "psql-user" postgres-user: "cHNxbC11c2Vy"
postgres-password: "psql-pw" postgres-password: "ZGZnc2RoNDU2NzdzZGZnc2RmZw=="

View file

@ -54,12 +54,12 @@ spec:
- name: POSTGRES_HOST - name: POSTGRES_HOST
value: "postgresql-service" value: "postgresql-service"
- name: POSTGRES_PORT - name: POSTGRES_PORT
value: 5432 value: "5432"
volumes: volumes:
- name: taiga-static - name: taiga-static
persistentVolumeClaim: persistentVolumeClaim:
claimName: taiga-static claimName: taiga-static-data
- name: taiga-media - name: taiga-media
persistentVolumeClaim: persistentVolumeClaim:
claimName: taiga-media claimName: taiga-media-data

View file

@ -33,9 +33,9 @@ spec:
readOnly: false readOnly: false
envFrom: envFrom:
- configMapRef: - configMapRef:
name: taiga-back-configmap name: taiga-configmap
- secretRef: - secretRef:
name: taiga-back-secret name: taiga-secret
- secretRef: - secretRef:
name: taiga-rabbitmq-secret name: taiga-rabbitmq-secret
env: env:
@ -57,9 +57,9 @@ spec:
- name: POSTGRES_HOST - name: POSTGRES_HOST
value: "postgresql-service" value: "postgresql-service"
- name: POSTGRES_PORT - name: POSTGRES_PORT
value: 5432 value: "5432"
- name: CELERY_ENABLED - name: CELERY_ENABLED
value: false value: "false"
containers: containers:
- name: taiga-back - name: taiga-back
image: taigaio/taiga-back:latest image: taigaio/taiga-back:latest
@ -100,12 +100,12 @@ spec:
- name: POSTGRES_HOST - name: POSTGRES_HOST
value: "postgresql-service" value: "postgresql-service"
- name: POSTGRES_PORT - name: POSTGRES_PORT
value: 5432 value: "5432"
volumes: # ToDo: Remove Volumes where not necessary volumes: # ToDo: Remove Volumes where not necessary
- name: taiga-static - name: taiga-static
persistentVolumeClaim: persistentVolumeClaim:
claimName: taiga-static claimName: taiga-static-data
- name: taiga-media - name: taiga-media
persistentVolumeClaim: persistentVolumeClaim:
claimName: taiga-media claimName: taiga-media-data

View file

@ -15,13 +15,13 @@ data:
# Email settings. # Email settings.
EMAIL_BACKEND: console # django.core.mail.backends.${EMAIL_BACKEND}.EmailBackend # ToDo move to code base EMAIL_BACKEND: console # django.core.mail.backends.${EMAIL_BACKEND}.EmailBackend # ToDo move to code base
DEFAULT_FROM_EMAIL: meissa@meissa.de DEFAULT_FROM_EMAIL: meissa@meissa.de
EMAIL_USE_TLS: false EMAIL_USE_TLS: "false"
EMAIL_USE_SSL: false EMAIL_USE_SSL: "false"
EMAIL_HOST: smpt.meissa.de EMAIL_HOST: smpt.meissa.de
EMAIL_PORT: 39 EMAIL_PORT: "39"
# Telemetry settings # Telemetry settings
ENABLE_TELEMETRY: false ENABLE_TELEMETRY: "false"
# ...your customizations go here # ...your customizations go here
# Taiga Events Settings # Taiga Events Settings

View file

@ -12,7 +12,7 @@ data:
# Frontend # Frontend
location / { location / {
proxy_pass http://taiga-front/; proxy_pass http://taiga-front-service/;
proxy_pass_header Server; proxy_pass_header Server;
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_redirect off; proxy_redirect off;
@ -22,7 +22,7 @@ data:
# Api # Api
location /api { location /api {
proxy_pass http://taiga-back:8000/api; proxy_pass http://taiga-back-service:8000/api;
proxy_pass_header Server; proxy_pass_header Server;
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_redirect off; proxy_redirect off;
@ -32,7 +32,7 @@ data:
# Admin # Admin
location /admin { location /admin {
proxy_pass http://taiga-back:8000/admin; proxy_pass http://taiga-back-service:8000/admin;
proxy_pass_header Server; proxy_pass_header Server;
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_redirect off; proxy_redirect off;
@ -64,13 +64,13 @@ data:
proxy_set_header X-Scheme $scheme; proxy_set_header X-Scheme $scheme;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://taiga-protected:8003/; proxy_pass http://taiga-protected-service:8003/;
proxy_redirect off; proxy_redirect off;
} }
# Events # Events
location /events { location /events {
proxy_pass http://taiga-events:8888/events; proxy_pass http://taiga-events-service:8888/events;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";

View file

@ -24,8 +24,8 @@ spec:
- name: http - name: http
containerPort: 80 containerPort: 80
volumeMounts: volumeMounts:
- mountPath: /etc/nginx/conf.d - name: taiga-gateway-configmap
name: taiga-gateway-configmap mountPath: /etc/nginx/conf.d
- name: taiga-static - name: taiga-static
mountPath: /taiga/static mountPath: /taiga/static
readOnly: false readOnly: false
@ -39,7 +39,7 @@ spec:
name: taiga-gateway-configmap name: taiga-gateway-configmap
- name: taiga-static - name: taiga-static
persistentVolumeClaim: persistentVolumeClaim:
claimName: taiga-static claimName: taiga-static-data
- name: taiga-media - name: taiga-media
persistentVolumeClaim: persistentVolumeClaim:
claimName: taiga-media claimName: taiga-media-data

View file

@ -24,7 +24,7 @@ spec:
containerPort: 8003 containerPort: 8003
env: env:
- name: MAX_AGE - name: MAX_AGE
value: 5 value: "5"
- name: SECRET_KEY - name: SECRET_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:

View file

@ -6,5 +6,5 @@ metadata:
app.kubernetes.part-of: taiga app.kubernetes.part-of: taiga
data: data:
# Rabbitmq settings # Rabbitmq settings
RABBITMQ_DEFAULT_USER: rabbit # ToDo: Evaluate if we need two different users and passes for rabbitmq RABBITMQ_DEFAULT_USER: cmFiYml0 # ToDo: Evaluate if we need two different users and passes for rabbitmq
RABBITMQ_DEFAULT_PASS: rabbit_pass RABBITMQ_DEFAULT_PASS: cmFiYml0X3Bhc3M=

View file

@ -7,16 +7,16 @@ metadata:
data: data:
# Taiga settings # Taiga settings
TAIGA_SECRET_KEY: 59dsfgjsdf4jq3ßdfej345 TAIGA_SECRET_KEY: NTlkc2ZnanNkZjRqcTPDn2RmZWozNDU=
# Email settings # Email settings
EMAIL_HOST_USER: meissa@meissa.de EMAIL_HOST_USER: bWVpc3NhQG1laXNzYS5kZQ==
EMAIL_HOST_PASSWORD: asdfasdf EMAIL_HOST_PASSWORD: YXNkZmFzZGY=
# Rabbitmq settings # Rabbitmq settings
RABBITMQ_USER: rabbit RABBITMQ_USER: cmFiYml0
RABBITMQ_PASS: rabbit_pass RABBITMQ_PASS: cmFiYml0X3Bhc3M=
# Django settings # Django settings
DJANGO_SUPERUSER_TAIGAADMIN: taiga DJANGO_SUPERUSER_TAIGAADMIN: dGFpZ2E=
DJANGO_SUPERUSER_PASSWORD: taiga_pass DJANGO_SUPERUSER_PASSWORD: dGFpZ2FfcGFzcw==