upload manifests

wekan.yml

@@ -0,0 +1,104 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: wekan-config
+  labels:
+    app: wekan
+    tier: server
+  namespace: wekan
+data:
+  MONGO_URL: REDACTED
+  ROOT_URL: "https://wekan.kmlabz.com"
+  MAIL_URL: "smtp://192.168.42.7:25/?tls={rejectUnauthorized:false}"
+  MAIL_FROM: "Wekan Notifications <wekan@kmlabz.com>"
+  ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE: "3"
+  ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD: "60"
+  ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW: "15"
+  ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE: "3"
+  ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD: "60"
+  ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW: "15"
+  WITH_API: "true"
+  RICHER_CARD_COMMENT_EDITOR: "false"
+  SCROLLINERTIA: "0"
+  SCROLLAMOUNT: "auto"
+  CARD_OPENED_WEBHOOK_ENABLED: "false"
+  BIGEVENTS_PATTERN: "NONE"
+  BROWSER_POLICY_ENABLED: "true"
+  OAUTH2_ID_MAP: preferred_username
+  OAUTH2_USERNAME_MAP: preferred_username
+  OAUTH2_FULLNAME_MAP: given_name
+  OAUTH2_EMAIL_MAP: email
+  OAUTH2_ENABLED: "true"
+  OAUTH2_LOGIN_STYLE: redirect
+  OAUTH2_CLIENT_ID: REDACTED
+  OAUTH2_SERVER_URL: "https://keycloak.kmlabz.com/auth"
+  OAUTH2_AUTH_ENDPOINT: /realms/master/protocol/openid-connect/auth
+  OAUTH2_USERINFO_ENDPOINT: /realms/master/protocol/openid-connect/userinfo
+  OAUTH2_TOKEN_ENDPOINT: /realms/master/protocol/openid-connect/token
+  OAUTH2_SECRET: REDACTED
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wekan
+  namespace: wekan
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: wekan
+      tier: server
+  template:
+    metadata:
+      labels:
+        app: wekan
+        tier: server
+    spec:
+      containers:
+        - name: wekan
+          image: wekanteam/wekan
+          imagePullPolicy: "Always"
+          ports:
+            - containerPort: 8080
+          envFrom:
+            - configMapRef:
+                name: wekan-config
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: wekan
+  namespace: wekan
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8080
+      name: http
+      protocol: TCP
+  selector:
+    app: wekan
+    tier: server
+---
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+  name: wekan
+  namespace: wekan
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  tls:
+  - hosts:
+    - wekan.kmlabz.com
+    secretName: wekan-cert-secret
+  rules:
+  - host: wekan.kmlabz.com
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: wekan
+          servicePort: http