Datadir automatic sync

templates/datadirsync/datadirsync-deployment.yaml

@@ -0,0 +1,96 @@
+{{- $webapp := .Values.georchestra.datadirsync  -}}
+{{- if $webapp.enabled -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "georchestra.fullname" . }}-datadirsync
+  labels:
+    {{- include "georchestra.labels" . | nindent 4 }}
+    app.kubernetes.io/component: {{ include "georchestra.fullname" . }}-datadirsync
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: {{ include "georchestra.fullname" . }}-datadirsync
+  template:
+    metadata:
+      labels:
+        app: {{ include "georchestra.fullname" . }}-datadirsync
+    spec:
+      serviceAccountName: {{ include "georchestra.fullname" . }}-datadirsync-serviceaccount
+      initContainers:
+      - name: init-permissions
+        image: busybox
+        command:
+        - sh
+        - -c
+        - |
+          echo "Setting up SSH key..."
+          if cp /tmp-ssh/id_rsa /tmp/git-rollout-operator/id_rsa; then
+            echo "SSH key copied successfully"
+          else
+            echo "Copy failed"
+          fi
+          if chown 1001:1001 /tmp/git-rollout-operator/id_rsa && chmod 600 /tmp/git-rollout-operator/id_rsa; then
+                  echo "SSH key permissions and ownership set successfully"
+          else
+                  echo "Failed to set permissions or ownership"
+          fi
+        volumeMounts:
+        - name: ssh-key-volume
+          mountPath: /tmp-ssh
+        - name: git-rollout-operator-volume
+          mountPath: /tmp/git-rollout-operator
+      containers:
+      - name: operator
+        image: {{ $webapp.image }}
+        env:
+        - name: GIT_REPO_URL
+          value: "{{ .Values.georchestra.datadir.git.url }}"
+        - name: GIT_BRANCH
+          value: "{{ .Values.georchestra.datadir.git.ref }}"
+        - name: POLL_INTERVAL
+          value: "{{ $webapp.pollInterval }}"
+        - name: ROLLOUT_DEPLOYMENTS
+          value: |
+            {{ $prefix := include "georchestra.fullname" . -}}
+            {{ $suffixes := $webapp.deploymentSuffixNameList -}}
+            {{ $deployments := list -}}
+            {{- range $suffix := $suffixes }}
+            {{ $deployments = append $deployments (printf "%s-%s" $prefix $suffix) }}
+            {{- end -}}
+            {{- join ", " $deployments }}
+        - name: ROLLOUT_NAMESPACE
+          value: "{{ .Release.Namespace }}"
+        {{- if and .Values.gitCredentials.username .Values.gitCredentials.token }}          
+        - name: GIT_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: "{{ $webapp.gitCredentials.secretName }}"
+              key: "{{ $webapp.gitCredentials.usernameKey }}"
+        - name: GIT_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: "{{ $webapp.gitCredentials.secretName }}"
+              key: "{{ $webapp.gitCredentials.tokenKey }}"
+        {{- end }}
+        {{- if .Values.gitCredentials.ssh }}
+        - name: GIT_SSH_COMMAND
+          value: ssh -i /tmp/git-rollout-operator/id_rsa -o "IdentitiesOnly=yes" -o "StrictHostKeyChecking=no"
+        volumeMounts:
+        - name: ssh-key-volume
+          mountPath: /tmp-ssh/id_rsa
+          subPath: id_rsa
+        - name: git-rollout-operator-volume
+          mountPath: /tmp/git-rollout-operator
+        {{- end }}
+      volumes:
+      - name: ssh-key-volume
+        secret:
+          secretName: {{ include "georchestra.fullname" . }}-{{ $webapp.gitCredentials.secretSuffixName }}
+          items:
+          - key: {{ $webapp.gitCredentials.sshKey }}
+            path: id_rsa
+      - name: git-rollout-operator-volume
+        emptyDir: {}
+{{- end }}

templates/datadirsync/datadirsync-role.yaml

@@ -0,0 +1,12 @@
+{{- $webapp := .Values.georchestra.datadirsync  -}}
+{{- if $webapp.enabled -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: {{ include "georchestra.fullname" . }}-datadirsync-role
+rules:
+  - apiGroups: ["apps"]
+    resources: ["pods", "deployments"]
+    verbs: ["get", "list", "patch", "update"]
+{{- end }}

templates/datadirsync/datadirsync-rolebinding.yaml

@@ -0,0 +1,15 @@
+{{- $webapp := .Values.georchestra.datadirsync  -}}
+{{- if $webapp.enabled -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "georchestra.fullname" . }}-datadirsync-rolebinding
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "georchestra.fullname" . }}-datadirsync-serviceaccount
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: {{ include "georchestra.fullname" . }}-datadirsync-role
+  apiGroup: rbac.authorization.k8s.io
+{{- end }}

templates/datadirsync/datadirsync-secrets.yaml

@@ -0,0 +1,12 @@
+{{- $webapp := .Values.georchestra.datadirsync  -}}
+{{- if $webapp.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "georchestra.fullname" . }}-datadirsync-credentials
+type: Opaque
+data:
+  username: {{ .Values.gitCredentials.username | b64enc }}
+  token: {{ .Values.gitCredentials.token | b64enc }}
+  ssh: {{ .Values.gitCredentials.ssh | b64enc }}
+{{- end }}

templates/datadirsync/datadirsync-serviceaccount.yaml

@@ -0,0 +1,8 @@
+{{- $webapp := .Values.georchestra.datadirsync  -}}
+{{- if $webapp.enabled -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "georchestra.fullname" . }}-datadirsync-serviceaccount
+  namespace: {{ .Release.Namespace }}
+{{- end }}

values.yaml

@@ -263,6 +263,19 @@ georchestra:
     # relay_username:  aaaa
     # relay_password:  aaaa
     extra_environment: []
+  datadirsync:
+    enabled: true
+    image: jemacchi/simple-git-rollout-operator:1.3.1   # TODO: image should be in context of c2c dockerhub account (?)
+    pollInterval: 10
+    deploymentSuffixNameList:
+      - geoserver
+      - mapstore
+      - header
+    gitCredentials:
+      secretSuffixName: datadirsync-credentials
+      usernameKey: username
+      tokenKey: token
+      sshKey: ssh
 
 fqdn: "georchestra-127-0-1-1.traefik.me"
 
@@ -393,6 +406,11 @@ rabbitmq:
 #    storage_class_name: default
 #    size: 1Gi
 
+gitCredentials:
+  username: ""  # To be provided during helm install
+  token: ""     # To be provided during helm install
+  ssh: ""       # To be provided during helm install
+
 # Allow to override /etc/hosts for ALL apps
 # https://kubernetes.io/docs/tasks/network/customize-hosts-file-for-pods/
 hostAliases: []