mrva/mrva-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wip: add k8s manifest as first step in conversion

Browse Source
This commit is contained in:
michael hohn
2025-11-22 13:13:08 -08:00
committed by =michael hohn
parent 6ff5cd348e
commit 38f5c46f58
19 changed files with 337 additions and 158 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
k8s/configmap.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: mrva-config
namespace: mrva
data:
POSTGRES_USER: "mrva"
POSTGRES_DB: "mrvadb"
POSTGRES_HOST: "postgres"
POSTGRES_PORT: "5432"
RABBITMQ_HOST: "rabbitmq"
RABBITMQ_USER: "user"
RABBITMQ_PORT: "5672"
MINIO_ROOT_USER: "user"
MINIO_ENDPOINT: "http://minio:9000"
MRVA_HEPC_ENDPOINT: "http://hepc:8070"
MRVA_HEPC_CACHE_DURATION: "60"
MRVA_HEPC_TOOL: "codeql-javascript"
MRVA_HEPC_REFROOT: "/refroot/"
MRVA_HEPC_OUTDIR: "WedMay7"
MRVA_HEPC_DATAVIACLI: "0"
MRVA_HEPC_COMMAND: "spigot-cli"
MRVA_MINIO_VIRTUAL_HOST: "0"
SERVER_HOST: "server"
SERVER_PORT: "8080"
ARTIFACT_MINIO_ENDPOINT: "http://minio:9000"
QLDB_MINIO_ENDPOINT: "http://minio:9000"
QLDB_MINIO_ID: "user"
ARTIFACT_MINIO_ID: "user"

33
k8s/hepc/deployment.yaml Normal file
View File

@@ -0,0 +1,33 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: hepc
namespace: mrva
spec:
replicas: 1
selector:
matchLabels:
app: hepc
template:
metadata:
labels:
app: hepc
spec:
containers:
- name: hepc
image: mrva-hepc-container:0.4.0
args:
- "mc-hepc-serve"
- "--codeql-db-dir"
- "db-collection.tmp"
- "--host"
- "0.0.0.0"
- "--port"
- "8070"
envFrom:
- configMapRef:
name: mrva-config
- secretRef:
name: mrva-secrets
ports:
- containerPort: 8070

10
k8s/hepc/service.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: Service
metadata:
name: hepc
namespace: mrva
spec:
ports:
- port: 8070
selector:
app: hepc

10
k8s/minio/pvc.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: minio-data
namespace: mrva
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 20Gi

11
k8s/minio/service.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: v1
kind: Service
metadata:
name: minio
namespace: mrva
spec:
ports:
- port: 9000
- port: 9001
selector:
app: minio

39
k8s/minio/statefulset.yaml Normal file
View File

@@ -0,0 +1,39 @@
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: minio
namespace: mrva
spec:
selector:
matchLabels:
app: minio
serviceName: minio
replicas: 1
template:
metadata:
labels:
app: minio
spec:
containers:
- name: minio
image: minio/minio:RELEASE.2024-06-11T03-13-30Z
args: ["server", "/data", "--console-address", ":9001"]
envFrom:
- configMapRef:
name: mrva-config
- secretRef:
name: mrva-secrets
ports:
- containerPort: 9000
- containerPort: 9001
volumeMounts:
- name: minio-data
mountPath: /data
volumeClaimTemplates:
- metadata:
name: minio-data
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 20Gi

26
k8s/mrva-agent/deployment.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: mrva-agent
namespace: mrva
spec:
replicas: 1
selector:
matchLabels:
app: mrva-agent
template:
metadata:
labels:
app: mrva-agent
spec:
containers:
- name: mrva-agent
image: mrva-agent:0.4.0
args: ["--loglevel=debug"]
envFrom:
- configMapRef:
name: mrva-config
- secretRef:
name: mrva-secrets
ports:
- containerPort: 8071

10
k8s/mrva-agent/service.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: Service
metadata:
name: agent
namespace: mrva
spec:
ports:
- port: 8071
selector:
app: mrva-agent

32
k8s/mrva-server/deployment.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: mrva-server
namespace: mrva
spec:
replicas: 1
selector:
matchLabels:
app: mrva-server
template:
metadata:
labels:
app: mrva-server
spec:
containers:
- name: mrva-server
image: mrva-server:0.4.0
args: ["--mode=container", "--loglevel=debug"]
envFrom:
- configMapRef:
name: mrva-config
- secretRef:
name: mrva-secrets
ports:
- containerPort: 8080
readinessProbe:
httpGet:
path: /health
port: 8080
initialDelaySeconds: 5
periodSeconds: 3

10
k8s/mrva-server/service.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: Service
metadata:
name: server
namespace: mrva
spec:
ports:
- port: 8080
selector:
app: mrva-server

4
k8s/namespace.yaml Normal file
View File

@@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: mrva

10
k8s/postgres/pvc.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: postgres-data
namespace: mrva
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 10Gi

10
k8s/postgres/service.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: Service
metadata:
name: postgres
namespace: mrva
spec:
ports:
- port: 5432
selector:
app: postgres

37
k8s/postgres/statefulset.yaml Normal file
View File

@@ -0,0 +1,37 @@
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: postgres
namespace: mrva
spec:
selector:
matchLabels:
app: postgres
serviceName: postgres
replicas: 1
template:
metadata:
labels:
app: postgres
spec:
containers:
- name: postgres
image: postgres:15
envFrom:
- configMapRef:
name: mrva-config
- secretRef:
name: mrva-secrets
ports:
- containerPort: 5432
volumeMounts:
- name: postgres-data
mountPath: /var/lib/postgresql/data
volumeClaimTemplates:
- metadata:
name: postgres-data
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 10Gi

28
k8s/rabbitmq/deployment.yaml Normal file
View File

@@ -0,0 +1,28 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: rabbitmq
namespace: mrva
spec:
replicas: 1
selector:
matchLabels:
app: rabbitmq
template:
metadata:
labels:
app: rabbitmq
spec:
containers:
- name: rabbitmq
image: rabbitmq:3-management
ports:
- containerPort: 5672
- containerPort: 15672
volumeMounts:
- name: rabbitmq-data
mountPath: /var/lib/rabbitmq
volumes:
- name: rabbitmq-data
persistentVolumeClaim:
claimName: rabbitmq-data

10
k8s/rabbitmq/pvc.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: rabbitmq-data
namespace: mrva
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 2Gi

11
k8s/rabbitmq/service.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: v1
kind: Service
metadata:
name: rabbitmq
namespace: mrva
spec:
ports:
- port: 5672
- port: 15672
selector:
app: rabbitmq

10
k8s/secrets.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: v1
kind: Secret
metadata:
name: mrva-secrets
namespace: mrva
type: Opaque
data:
POSTGRES_PASSWORD: bXJ2YXBn
RABBITMQ_PASSWORD: cGFzc3dvcmQ=
MINIO_ROOT_PASSWORD: bW11c3R5ODQzMg==