summaryrefslogtreecommitdiffstats
path: root/chart/templates
diff options
context:
space:
mode:
Diffstat (limited to 'chart/templates')
-rw-r--r--chart/templates/NOTES.txt22
-rw-r--r--chart/templates/_helpers.tpl150
-rw-r--r--chart/templates/configmap-env.yaml319
-rw-r--r--chart/templates/cronjob-media-remove.yaml77
-rw-r--r--chart/templates/deployment-sidekiq.yaml132
-rw-r--r--chart/templates/deployment-streaming.yaml88
-rw-r--r--chart/templates/deployment-web.yaml128
-rw-r--r--chart/templates/ingress.yaml71
-rw-r--r--chart/templates/job-assets-precompile.yaml77
-rw-r--r--chart/templates/job-chewy-upgrade.yaml79
-rw-r--r--chart/templates/job-create-admin.yaml84
-rw-r--r--chart/templates/job-db-migrate.yaml77
-rw-r--r--chart/templates/pvc-assets.yaml16
-rw-r--r--chart/templates/pvc-system.yaml16
-rw-r--r--chart/templates/secrets.yaml43
-rw-r--r--chart/templates/service-streaming.yaml16
-rw-r--r--chart/templates/service-web.yaml16
-rw-r--r--chart/templates/serviceaccount.yaml12
-rw-r--r--chart/templates/tests/test-connection.yaml15
19 files changed, 0 insertions, 1438 deletions
diff --git a/chart/templates/NOTES.txt b/chart/templates/NOTES.txt
deleted file mode 100644
index b09c40becf6..00000000000
--- a/chart/templates/NOTES.txt
+++ /dev/null
@@ -1,22 +0,0 @@
-1. Get the application URL by running these commands:
-{{- if .Values.ingress.enabled }}
-{{- range $host := .Values.ingress.hosts }}
- {{- range .paths }}
- http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
- {{- end }}
-{{- end }}
-{{- else if contains "NodePort" .Values.service.type }}
- export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "mastodon.fullname" . }})
- export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
- echo http://$NODE_IP:$NODE_PORT
-{{- else if contains "LoadBalancer" .Values.service.type }}
- NOTE: It may take a few minutes for the LoadBalancer IP to be available.
- You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "mastodon.fullname" . }}'
- export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "mastodon.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
- echo http://$SERVICE_IP:{{ .Values.service.port }}
-{{- else if contains "ClusterIP" .Values.service.type }}
- export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "mastodon.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
- export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
- echo "Visit http://127.0.0.1:8080 to use your application"
- kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
-{{- end }}
diff --git a/chart/templates/_helpers.tpl b/chart/templates/_helpers.tpl
deleted file mode 100644
index 0e1804f9127..00000000000
--- a/chart/templates/_helpers.tpl
+++ /dev/null
@@ -1,150 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-{{/*
-Expand the name of the chart.
-*/}}
-{{- define "mastodon.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
-{{- end }}
-
-{{/*
-Create a default fully qualified app name.
-We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
-If release name contains chart name it will be used as a full name.
-*/}}
-{{- define "mastodon.fullname" -}}
-{{- if .Values.fullnameOverride }}
-{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
-{{- else }}
-{{- $name := default .Chart.Name .Values.nameOverride }}
-{{- if contains $name .Release.Name }}
-{{- .Release.Name | trunc 63 | trimSuffix "-" }}
-{{- else }}
-{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
-{{- end }}
-{{- end }}
-{{- end }}
-
-{{/*
-Create chart name and version as used by the chart label.
-*/}}
-{{- define "mastodon.chart" -}}
-{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
-{{- end }}
-
-{{/*
-Common labels
-*/}}
-{{- define "mastodon.labels" -}}
-helm.sh/chart: {{ include "mastodon.chart" . }}
-{{ include "mastodon.selectorLabels" . }}
-{{- if .Chart.AppVersion }}
-app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
-{{- end }}
-app.kubernetes.io/managed-by: {{ .Release.Service }}
-{{- end }}
-
-{{/*
-Selector labels
-*/}}
-{{- define "mastodon.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "mastodon.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-{{- end }}
-
-{{/*
-Rolling pod annotations
-*/}}
-{{- define "mastodon.rollingPodAnnotations" -}}
-rollme: {{ .Release.Revision | quote }}
-checksum/config-secrets: {{ include ( print $.Template.BasePath "/secrets.yaml" ) . | sha256sum | quote }}
-checksum/config-configmap: {{ include ( print $.Template.BasePath "/configmap-env.yaml" ) . | sha256sum | quote }}
-{{- end }}
-
-{{/*
-Create the name of the service account to use
-*/}}
-{{- define "mastodon.serviceAccountName" -}}
-{{- if .Values.serviceAccount.create }}
-{{- default (include "mastodon.fullname" .) .Values.serviceAccount.name }}
-{{- else }}
-{{- default "default" .Values.serviceAccount.name }}
-{{- end }}
-{{- end }}
-
-{{/*
-Create a default fully qualified name for dependent services.
-We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
-*/}}
-{{- define "mastodon.elasticsearch.fullname" -}}
-{{- printf "%s-%s" .Release.Name "elasticsearch" | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "mastodon.redis.fullname" -}}
-{{- printf "%s-%s" .Release.Name "redis" | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "mastodon.postgresql.fullname" -}}
-{{- printf "%s-%s" .Release.Name "postgresql" | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/*
-Get the mastodon secret.
-*/}}
-{{- define "mastodon.secretName" -}}
-{{- if .Values.mastodon.secrets.existingSecret }}
- {{- printf "%s" (tpl .Values.mastodon.secrets.existingSecret $) -}}
-{{- else -}}
- {{- printf "%s" (include "common.names.fullname" .) -}}
-{{- end -}}
-{{- end -}}
-
-{{/*
-Get the postgresql secret.
-*/}}
-{{- define "mastodon.postgresql.secretName" -}}
-{{- if (and (or .Values.postgresql.enabled .Values.postgresql.postgresqlHostname) .Values.postgresql.auth.existingSecret) }}
- {{- printf "%s" (tpl .Values.postgresql.auth.existingSecret $) -}}
-{{- else if .Values.postgresql.enabled -}}
- {{- printf "%s-postgresql" (tpl .Release.Name $) -}}
-{{- else -}}
- {{- printf "%s" (include "common.names.fullname" .) -}}
-{{- end -}}
-{{- end -}}
-
-{{/*
-Get the redis secret.
-*/}}
-{{- define "mastodon.redis.secretName" -}}
-{{- if .Values.redis.auth.existingSecret }}
- {{- printf "%s" (tpl .Values.redis.auth.existingSecret $) -}}
-{{- else if .Values.redis.existingSecret }}
- {{- printf "%s" (tpl .Values.redis.existingSecret $) -}}
-{{- else -}}
- {{- printf "%s-redis" (tpl .Release.Name $) -}}
-{{- end -}}
-{{- end -}}
-
-{{/*
-Return true if a mastodon secret object should be created
-*/}}
-{{- define "mastodon.createSecret" -}}
-{{- if (or
- (and .Values.mastodon.s3.enabled (not .Values.mastodon.s3.existingSecret))
- (not .Values.mastodon.secrets.existingSecret )
- (and (not .Values.postgresql.enabled) (not .Values.postgresql.auth.existingSecret))
- ) -}}
- {{- true -}}
-{{- end -}}
-{{- end -}}
-
-{{/*
-Find highest number of needed database connections to set DB_POOL variable
-*/}}
-{{- define "mastodon.maxDbPool" -}}
-{{/* Default MAX_THREADS for Puma is 5 */}}
-{{- $poolSize := 5 }}
-{{- range .Values.mastodon.sidekiq.workers }}
-{{- $poolSize = max $poolSize .concurrency }}
-{{- end }}
-{{- $poolSize | quote }}
-{{- end }}
diff --git a/chart/templates/configmap-env.yaml b/chart/templates/configmap-env.yaml
deleted file mode 100644
index 4d01955689e..00000000000
--- a/chart/templates/configmap-env.yaml
+++ /dev/null
@@ -1,319 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
- name: {{ include "mastodon.fullname" . }}-env
- labels:
- {{- include "mastodon.labels" . | nindent 4 }}
-data:
- {{- if .Values.postgresql.enabled }}
- DB_HOST: {{ template "mastodon.postgresql.fullname" . }}
- DB_PORT: "5432"
- {{- else }}
- DB_HOST: {{ .Values.postgresql.postgresqlHostname }}
- DB_PORT: {{ .Values.postgresql.postgresqlPort | default "5432" | quote }}
- {{- end }}
- DB_NAME: {{ .Values.postgresql.auth.database }}
- DB_POOL: {{ include "mastodon.maxDbPool" . }}
- DB_USER: {{ .Values.postgresql.auth.username }}
- DEFAULT_LOCALE: {{ .Values.mastodon.locale }}
- {{- if .Values.elasticsearch.enabled }}
- ES_ENABLED: "true"
- ES_HOST: {{ template "mastodon.elasticsearch.fullname" . }}-master-hl
- ES_PORT: "9200"
- {{- end }}
- LOCAL_DOMAIN: {{ .Values.mastodon.local_domain }}
- {{- with .Values.mastodon.web_domain }}
- WEB_DOMAIN: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.singleUserMode }}
- SINGLE_USER_MODE: "true"
- {{- end }}
- {{- with .Values.mastodon.authorizedFetch }}
- AUTHORIZED_FETCH: {{ . | quote }}
- {{- end }}
- # https://devcenter.heroku.com/articles/tuning-glibc-memory-behavior
- MALLOC_ARENA_MAX: "2"
- NODE_ENV: "production"
- RAILS_ENV: "production"
- REDIS_HOST: {{ template "mastodon.redis.fullname" . }}-master
- REDIS_PORT: "6379"
- {{- if .Values.mastodon.s3.enabled }}
- S3_BUCKET: {{ .Values.mastodon.s3.bucket }}
- S3_ENABLED: "true"
- S3_ENDPOINT: {{ .Values.mastodon.s3.endpoint }}
- S3_HOSTNAME: {{ .Values.mastodon.s3.hostname }}
- S3_PROTOCOL: "https"
- {{- with .Values.mastodon.s3.region }}
- S3_REGION: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.s3.alias_host }}
- S3_ALIAS_HOST: {{ .Values.mastodon.s3.alias_host}}
- {{- end }}
- {{- end }}
- {{- with .Values.mastodon.smtp.auth_method }}
- SMTP_AUTH_METHOD: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.ca_file }}
- SMTP_CA_FILE: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.delivery_method }}
- SMTP_DELIVERY_METHOD: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.domain }}
- SMTP_DOMAIN: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.enable_starttls }}
- SMTP_ENABLE_STARTTLS: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.smtp.enable_starttls_auto }}
- SMTP_ENABLE_STARTTLS_AUTO: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.smtp.from_address }}
- SMTP_FROM_ADDRESS: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.login }}
- SMTP_LOGIN: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.openssl_verify_mode }}
- SMTP_OPENSSL_VERIFY_MODE: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.password }}
- SMTP_PASSWORD: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.port }}
- SMTP_PORT: {{ . | quote }}
- {{- end }}
- {{- with .Values.mastodon.smtp.reply_to }}
- SMTP_REPLY_TO: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.server }}
- SMTP_SERVER: {{ . }}
- {{- end }}
- {{- with .Values.mastodon.smtp.tls }}
- SMTP_TLS: {{ . | quote }}
- {{- end }}
- STREAMING_CLUSTER_NUM: {{ .Values.mastodon.streaming.workers | quote }}
- {{- with .Values.mastodon.streaming.base_url }}
- STREAMING_API_BASE_URL: {{ . | quote }}
- {{- end }}
- {{- if .Values.externalAuth.oidc.enabled }}
- OIDC_ENABLED: {{ .Values.externalAuth.oidc.enabled | quote }}
- OIDC_DISPLAY_NAME: {{ .Values.externalAuth.oidc.display_name }}
- OIDC_ISSUER: {{ .Values.externalAuth.oidc.issuer }}
- OIDC_DISCOVERY: {{ .Values.externalAuth.oidc.discovery | quote }}
- OIDC_SCOPE: {{ .Values.externalAuth.oidc.scope | quote }}
- OIDC_UID_FIELD: {{ .Values.externalAuth.oidc.uid_field }}
- OIDC_CLIENT_ID: {{ .Values.externalAuth.oidc.client_id }}
- OIDC_CLIENT_SECRET: {{ .Values.externalAuth.oidc.client_secret }}
- OIDC_REDIRECT_URI: {{ .Values.externalAuth.oidc.redirect_uri }}
- OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ .Values.externalAuth.oidc.assume_email_is_verified | quote }}
- {{- with .Values.externalAuth.oidc.client_auth_method }}
- OIDC_CLIENT_AUTH_METHOD: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.response_type }}
- OIDC_RESPONSE_TYPE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.response_mode }}
- OIDC_RESPONSE_MODE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.display }}
- OIDC_DISPLAY: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.prompt }}
- OIDC_PROMPT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.send_nonce }}
- OIDC_SEND_NONCE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.send_scope_to_token_endpoint }}
- OIDC_SEND_SCOPE_TO_TOKEN_ENDPOINT: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.idp_logout_redirect_uri }}
- OIDC_IDP_LOGOUT_REDIRECT_URI: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.http_scheme }}
- OIDC_HTTP_SCHEME: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.host }}
- OIDC_HOST: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.port }}
- OIDC_PORT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.jwks_uri }}
- OIDC_JWKS_URI: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.auth_endpoint }}
- OIDC_AUTH_ENDPOINT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.token_endpoint }}
- OIDC_TOKEN_ENDPOINT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.user_info_endpoint }}
- OIDC_USER_INFO_ENDPOINT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.oidc.end_session_endpoint }}
- OIDC_END_SESSION_ENDPOINT: {{ . }}
- {{- end }}
- {{- end }}
- {{- if .Values.externalAuth.saml.enabled }}
- SAML_ENABLED: {{ .Values.externalAuth.saml.enabled | quote }}
- SAML_ACS_URL: {{ .Values.externalAuth.saml.acs_url }}
- SAML_ISSUER: {{ .Values.externalAuth.saml.issuer }}
- SAML_IDP_SSO_TARGET_URL: {{ .Values.externalAuth.saml.idp_sso_target_url }}
- SAML_IDP_CERT: {{ .Values.externalAuth.saml.idp_cert | quote }}
- {{- with .Values.externalAuth.saml.idp_cert_fingerprint }}
- SAML_IDP_CERT_FINGERPRINT: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.name_identifier_format }}
- SAML_NAME_IDENTIFIER_FORMAT: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.saml.cert }}
- SAML_CERT: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.private_key }}
- SAML_PRIVATE_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.want_assertion_signed }}
- SAML_SECURITY_WANT_ASSERTION_SIGNED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.want_assertion_encrypted }}
- SAML_SECURITY_WANT_ASSERTION_ENCRYPTED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.assume_email_is_verified }}
- SAML_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.uid_attribute }}
- SAML_UID_ATTRIBUTE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.uid }}
- SAML_ATTRIBUTES_STATEMENTS_UID: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.email }}
- SAML_ATTRIBUTES_STATEMENTS_EMAIL: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.full_name }}
- SAML_ATTRIBUTES_STATEMENTS_FULL_NAME: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.first_name }}
- SAML_ATTRIBUTES_STATEMENTS_FIRST_NAME: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.last_name }}
- SAML_ATTRIBUTES_STATEMENTS_LAST_NAME: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.verified }}
- SAML_ATTRIBUTES_STATEMENTS_VERIFIED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.saml.attributes_statements.verified_email }}
- SAML_ATTRIBUTES_STATEMENTS_VERIFIED_EMAIL: {{ . | quote }}
- {{- end }}
- {{- end }}
- {{- with .Values.externalAuth.oauth_global.omniauth_only }}
- OMNIAUTH_ONLY: {{ . | quote }}
- {{- end }}
- {{- if .Values.externalAuth.cas.enabled }}
- CAS_ENABLED: {{ .Values.externalAuth.cas.enabled | quote }}
- CAS_URL: {{ .Values.externalAuth.cas.url }}
- CAS_HOST: {{ .Values.externalAuth.cas.host }}
- CAS_PORT: {{ .Values.externalAuth.cas.port }}
- CAS_SSL: {{ .Values.externalAuth.cas.ssl | quote }}
- {{- with .Values.externalAuth.cas.validate_url }}
- CAS_VALIDATE_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.callback_url }}
- CAS_CALLBACK_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.logout_url }}
- CAS_LOGOUT_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.login_url }}
- CAS_LOGIN_URL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.uid_field }}
- CAS_UID_FIELD: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.ca_path }}
- CAS_CA_PATH: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.cas.disable_ssl_verification }}
- CAS_DISABLE_SSL_VERIFICATION: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.assume_email_is_verified }}
- CAS_SECURITY_ASSUME_EMAIL_IS_VERIFIED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.uid }}
- CAS_UID_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.name }}
- CAS_NAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.email }}
- CAS_EMAIL_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.nickname }}
- CAS_NICKNAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.first_name }}
- CAS_FIRST_NAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.last_name }}
- CAS_LAST_NAME_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.location }}
- CAS_LOCATION_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.image }}
- CAS_IMAGE_KEY: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.cas.keys.phone }}
- CAS_PHONE_KEY: {{ . | quote }}
- {{- end }}
- {{- end }}
- {{- with .Values.externalAuth.pam.enabled }}
- PAM_ENABLED: {{ . | quote }}
- {{- with .Values.externalAuth.pam.email_domain }}
- PAM_EMAIL_DOMAIN: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.pam.default_service }}
- PAM_DEFAULT_SERVICE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.pam.controlled_service }}
- PAM_CONTROLLED_SERVICE: {{ . }}
- {{- end }}
- {{- end }}
- {{- if .Values.externalAuth.ldap.enabled }}
- LDAP_ENABLED: {{ .Values.externalAuth.ldap.enabled | quote }}
- LDAP_HOST: {{ .Values.externalAuth.ldap.host }}
- LDAP_PORT: {{ .Values.externalAuth.ldap.port }}
- LDAP_METHOD: {{ .Values.externalAuth.ldap.method }}
- {{- with .Values.externalAuth.ldap.base }}
- LDAP_BASE: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.bind_on }}
- LDAP_BIND_ON: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.password }}
- LDAP_PASSWORD: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid }}
- LDAP_UID: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.mail }}
- LDAP_MAIL: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.search_filter }}
- LDAP_SEARCH_FILTER: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid_conversion.enabled }}
- LDAP_UID_CONVERSION_ENABLED: {{ . | quote }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid_conversion.search }}
- LDAP_UID_CONVERSION_SEARCH: {{ . }}
- {{- end }}
- {{- with .Values.externalAuth.ldap.uid_conversion.replace }}
- LDAP_UID_CONVERSION_REPLACE: {{ . }}
- {{- end }}
- {{- end }}
- {{- with .Values.mastodon.metrics.statsd.address }}
- STATSD_ADDR: {{ . }}
- {{- end }}
diff --git a/chart/templates/cronjob-media-remove.yaml b/chart/templates/cronjob-media-remove.yaml
deleted file mode 100644
index 41f1feb8256..00000000000
--- a/chart/templates/cronjob-media-remove.yaml
+++ /dev/null
@@ -1,77 +0,0 @@
-{{ if .Values.mastodon.cron.removeMedia.enabled -}}
-apiVersion: batch/v1
-kind: CronJob
-metadata:
- name: {{ include "mastodon.fullname" . }}-media-remove
- labels:
- {{- include "mastodon.labels" . | nindent 4 }}
-spec:
- schedule: {{ .Values.mastodon.cron.removeMedia.schedule }}
- jobTemplate:
- spec:
- template:
- metadata:
- name: {{ include "mastodon.fullname" . }}-media-remove
- {{- with .Values.jobAnnotations }}
- annotations:
- {{- toYaml . | nindent 12 }}
- {{- end }}
- spec:
- restartPolicy: OnFailure
- {{- if (not .Values.mastodon.s3.enabled) }}
- # ensure we run on the same node as the other rails components; only
- # required when using PVCs that are ReadWriteOnce
- {{- if or (eq "ReadWriteOnce" .Values.mastodon.persistence.assets.accessMode) (eq "ReadWriteOnce" .Values.mastodon.persistence.system.accessMode) }}
- affinity:
- podAffinity:
- requiredDuringSchedulingIgnoredDuringExecution:
- - labelSelector:
- matchExpressions:
- - key: app.kubernetes.io/part-of
- operator: In
- values:
- - rails
- topologyKey: kubernetes.io/hostname
- {{- end }}
- volumes:
- - name: assets
- persistentVolumeClaim:
- claimName: {{ template "mastodon.fullname" . }}-assets
- - name: system
- persistentVolumeClaim:
- claimName: {{ template "mastodon.fullname" . }}-system
- {{- end }}
- containers:
- - name: {{ include "mastodon.fullname" . }}-media-remove
- image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
- imagePullPolicy: {{ .Values.image.pullPolicy }}
- command:
- - bin/tootctl
- - media
- - remove
- envFrom:
- - configMapRef:
- name: {{ include "mastodon.fullname" . }}-env
- - secretRef:
- name: {{ template "mastodon.secretName" . }}
- env:
- - name: "DB_PASS"
- valueFrom:
- secretKeyRef:
- name: {{ template "mastodon.postgresql.secretName" . }}
- key: password
- - name: "REDIS_PASSWORD"
- valueFrom:
- secretKeyRef:
- name: {{ template "mastodon.redis.secretName" . }}
- key: redis-password
- - name: "PORT"
- value: {{ .Values.mastodon.web.port | quote }}
- {{- if (not .Values.mastodon.s3.enabled) }}
- volumeMounts:
- - name: assets
- mountPath: /opt/mastodon/public/assets
- - name: system
- mountPath: /opt/mastodon/public/system
- {{- end }}
-{{- end }}
diff --git a/chart/templates/deployment-sidekiq.yaml b/chart/templates/deployment-sidekiq.yaml
deleted file mode 100644
index c7e0c54703c..00000000000
--- a/chart/templates/deployment-sidekiq.yaml
+++ /dev/null
@@ -1,132 +0,0 @@
-{{- $context := . }}
-{{- range .Values.mastodon.sidekiq.workers }}
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: {{ include "mastodon.fullname" $context }}-sidekiq-{{ .name }}
- labels:
- {{- include "mastodon.labels" $context | nindent 4 }}
- app.kubernetes.io/component: sidekiq-{{ .name }}
- app.kubernetes.io/part-of: rails
-spec:
- replicas: {{ .replicas }}
- {{- if (has "scheduler" .queues) }}
- strategy:
- type: Recreate
- {{- end }}
- selector:
- matchLabels:
- {{- include "mastodon.selectorLabels" $context | nindent 6 }}
- app.kubernetes.io/component: sidekiq-{{ .name }}
- app.kubernetes.io/part-of: rails
- template:
- metadata:
- annotations:
- {{- with $context.Values.podAnnotations }}
- {{- toYaml . | nindent 8 }}
- {{- end }}
- # roll the pods to pick up any db migrations or other changes
- {{- include "mastodon.rollingPodAnnotations" $context | nindent 8 }}
- labels:
- {{- include "mastodon.selectorLabels" $context | nindent 8 }}
- app.kubernetes.io/component: sidekiq-{{ .name }}
- app.kubernetes.io/part-of: rails
- spec:
- {{- with $context.Values.imagePullSecrets }}
- imagePullSecrets:
- {{- toYaml . | nindent 8 }}
- {{- end }}
- serviceAccountName: {{ include "mastodon.serviceAccountName" $context }}
- {{- with (default $context.Values.podSecurityContext $context.Values.mastodon.sidekiq.podSecurityContext) }}
- securityContext:
- {{- toYaml . | nindent 8 }}
- {{- end }}
- {{- with (default (default $context.Values.affinity $context.Values.mastodon.sidekiq.affinity) .affinity) }}
- affinity:
- {{- toYaml . | nindent 8 }}
- {{- end }}
- {{- if (not $context.Values.mastodon.s3.enabled) }}
- volumes:
- - name: assets
- persistentVolumeClaim:
- claimName: {{ template "mastodon.fullname" $context }}-assets
- - name: system
- persistentVolumeClaim:
- claimName: {{ template "mastodon.fullname" $context }}-system
- {{- end }}
- containers:
- - name: {{ $context.Chart.Name }}
- securityContext:
- {{- toYaml $context.Values.mastodon.sidekiq.securityContext | nindent 12 }}
- image: "{{ $context.Values.image.repository }}:{{ $context.Values.image.tag | default $context.Chart.AppVersion }}"
- imagePullPolicy: {{ $context.Values.image.pullPolicy }}
- command:
- - bundle
- - exec
- - sidekiq
- - -c
- - {{ .concurrency | quote }}
- {{- range .queues }}
- - -q
- - {{ . | quote }}
- {{- end }}
- envFrom:
- - configMapRef:
- name: {{ include