geocrop-platform./k8s/nextgen/20-mattermost.yaml

139 lines
3.9 KiB
YAML

apiVersion: v1
kind: Secret
metadata:
name: mattermost-secrets
namespace: nextgen
type: Opaque
stringData:
# DB Format: postgres://<user>:<password>@<host>:<port>/<db>?sslmode=disable&connect_timeout=10
MM_SQLSETTINGS_DATASOURCE: "postgres://mmuser:mattermost-db-password-change-me@postgres:5432/mattermost?sslmode=disable&connect_timeout=10"
MM_FILESETTINGS_AMAZONS3ACCESSKEYID: "minioadmin"
MM_FILESETTINGS_AMAZONS3SECRETACCESSKEY: "minioadmin123"
---
apiVersion: v1
kind: Service
metadata:
name: mattermost
namespace: nextgen
spec:
selector:
app: mattermost
ports:
- name: http
port: 8065
targetPort: 8065
- name: calls
port: 8443
targetPort: 8443
protocol: UDP
type: ClusterIP
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: mattermost-plugins-pvc
namespace: nextgen
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: mattermost
namespace: nextgen
annotations:
kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer: letsencrypt-prod
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
spec:
tls:
- hosts:
- chat.techarvest.co.zw
secretName: chat-techarvest-tls
rules:
- host: chat.techarvest.co.zw
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: mattermost
port:
number: 8065
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: mattermost
namespace: nextgen
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app: mattermost
template:
metadata:
labels:
app: mattermost
spec:
containers:
- name: mattermost
image: mattermost/mattermost-team-edition:9.11
env:
- name: MM_SQLSETTINGS_DRIVERNAME
value: postgres
- name: MM_SQLSETTINGS_DATASOURCE
valueFrom:
secretKeyRef:
name: mattermost-secrets
key: MM_SQLSETTINGS_DATASOURCE
- name: MM_FILESETTINGS_DRIVERNAME
value: amazons3
- name: MM_FILESETTINGS_AMAZONS3ENDPOINT
value: "minio.geocrop.svc.cluster.local:9000"
- name: MM_FILESETTINGS_AMAZONS3ACCESSKEYID
valueFrom:
secretKeyRef:
name: mattermost-secrets
key: MM_FILESETTINGS_AMAZONS3ACCESSKEYID
- name: MM_FILESETTINGS_AMAZONS3SECRETACCESSKEY
valueFrom:
secretKeyRef:
name: mattermost-secrets
key: MM_FILESETTINGS_AMAZONS3SECRETACCESSKEY
- name: MM_FILESETTINGS_AMAZONS3BUCKET
value: "mattermost"
- name: MM_FILESETTINGS_AMAZONS3SSL
value: "false"
- name: MM_SERVICESETTINGS_SITEURL
value: "https://chat.techarvest.co.zw"
- name: MM_PLUGINSETTINGS_ENABLEUPLOADS
value: "true"
- name: MM_PLUGINSETTINGS_PLUGINSTATES
value: '{"com.mattermost.calls":{"Enable":true}}'
- name: MM_PLUGINSETTINGS_PLUGINS_COM.MATTERMOST.CALLS_UDPLISTENADDRESS
value: ":8443"
- name: MM_PLUGINSETTINGS_PLUGINS_COM.MATTERMOST.CALLS_ICEHOSTOVERRIDE
value: "167.86.68.48"
- name: MM_PLUGINSETTINGS_PLUGINS_COM.MATTERMOST.CALLS_ALLOWSESSIONNATIVE
value: "true"
ports:
- containerPort: 8065
- containerPort: 8443
protocol: UDP
hostPort: 8443
volumeMounts:
- name: mattermost-plugins
mountPath: /mattermost/plugins
volumes:
- name: mattermost-plugins
persistentVolumeClaim:
claimName: mattermost-plugins-pvc