-
Notifications
You must be signed in to change notification settings - Fork 26
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- added deployment example
- Loading branch information
Showing
5 changed files
with
347 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,66 @@ | ||
| # oCIS development deployment example | ||
|
|
||
| ## Introduction | ||
|
|
||
| This example will deploy a mostly default oCIS setup to Kubernetes. The intent is that this will | ||
| work "out of the box" after a `helmfile sync`. | ||
|
|
||
| ***Note***: This example is not intended for production use. It is intended to get a working oCIS | ||
| development running in Kubernetes as quickly as possible. It is not hardened in any way. | ||
|
|
||
| ## Getting started | ||
|
|
||
| ### Prerequisites | ||
|
|
||
| This example requires the following things to be installed: | ||
|
|
||
| - [Kubernetes](https://kubernetes.io/) cluster, with an ingress controller installed. | ||
| - [Helm](https://helm.sh/) v3 | ||
| - [Helmfile](https://github.com/helmfile/helmfile) | ||
|
|
||
| ### End result | ||
|
|
||
| After following the steps in this guide, you should be able to access the following endpoint, you | ||
| may want to add these to your `/etc/hosts` file pointing to your ingress controller IP: | ||
|
|
||
| - https://ocis.kube.owncloud.test | ||
| - https://ocis2.kube.owncloud.test | ||
|
|
||
| Note that if you want to use your own hostname and domain, you will have to change the `externalDomain` value. | ||
|
|
||
| ### Deploying | ||
|
|
||
| In this directory, run the following commands: | ||
|
|
||
| ```bash | ||
| $ helmfile sync | ||
| ``` | ||
|
|
||
| This will deploy all the needed steps. | ||
|
|
||
| ### Logging in | ||
|
|
||
| You can get the admin password with the following command: | ||
|
|
||
| ```bash | ||
| $ kubectl -n ocis get secrets/admin-user --template='{{.data.password | base64decode | printf "%s\n" }}' | ||
| ``` | ||
|
|
||
| and | ||
|
|
||
| ```bash | ||
| $ kubectl -n ocis2 get secrets/admin-user --template='{{.data.password | base64decode | printf "%s\n" }}' | ||
| ``` | ||
|
|
||
|
|
||
| You can use this password to login with the user `admin`. | ||
|
|
||
| ### Limitations | ||
|
|
||
| As this is deployed with a `ReadWriteOnce` storage access mode, the deployments persistence will be limited to | ||
| a single pod. If you want to scale the pods, you will need to change the storage access mode to `ReadWriteMany`. | ||
| If you do this, please check if your storage provider supports this access mode. | ||
|
|
||
| ### Development | ||
|
|
||
| Note this chart is made for development, therefore both `demoUsers` is set to true. Using this chart in production is not recommended. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,252 @@ | ||
| releases: | ||
| - name: ocis | ||
| chart: ../../charts/ocis | ||
| namespace: ocis | ||
| values: | ||
| - image: | ||
| tag: "6.4.0" | ||
| - externalDomain: ocis.kube.owncloud.test | ||
| - ingress: | ||
| enabled: true | ||
| ingressClassName: nginx | ||
| annotations: | ||
| nginx.ingress.kubernetes.io/proxy-body-size: 1024m | ||
| tls: | ||
| - secretName: ocis-dev-tls | ||
| hosts: | ||
| - ocis.kube.owncloud.test | ||
|
|
||
| - logging: | ||
| level: debug | ||
|
|
||
| - insecure: | ||
| oidcIdpInsecure: true | ||
| ocisHttpApiInsecure: true | ||
|
|
||
| - features: | ||
| demoUsers: true | ||
| ocm: | ||
| enabled: true | ||
| providers: |- | ||
| [ | ||
| { | ||
| "name": "oCIS Test", | ||
| "full_name": "oCIS Test provider", | ||
| "organization": "oCIS", | ||
| "domain": "ocis2.kube.owncloud.test", | ||
| "homepage": "https://ocis2.kube.owncloud.test", | ||
| "description": "oCIS Example cloud storage", | ||
| "services": [ | ||
| { | ||
| "endpoint": { | ||
| "type": { | ||
| "name": "OCM", | ||
| "description": "ocis2.kube.owncloud.test Open Cloud Mesh API" | ||
| }, | ||
| "name": "ocis2.kube.owncloud.test - OCM API", | ||
| "path": "https://ocis2.kube.owncloud.test/ocm/", | ||
| "is_monitored": true | ||
| }, | ||
| "api_version": "0.0.1", | ||
| "host": "http://ocis2.kube.owncloud.test" | ||
| }, | ||
| { | ||
| "endpoint": { | ||
| "type": { | ||
| "name": "Webdav", | ||
| "description": "ocis2.kube.owncloud.test Webdav API" | ||
| }, | ||
| "name": "ocis2.kube.owncloud.test Example - Webdav API", | ||
| "path": "https://ocis2.kube.owncloud.test/dav/", | ||
| "is_monitored": true | ||
| }, | ||
| "api_version": "0.0.1", | ||
| "host": "https://ocis2.kube.owncloud.test/" | ||
| } | ||
| ] | ||
| } | ||
| ] | ||
| - services: | ||
| idm: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| nats: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| search: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| storagesystem: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| storageusers: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
| maintenance: | ||
| cleanUpExpiredUploads: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
| purgeExpiredTrashBinItems: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
| restartPostprocessing: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
|
|
||
| thumbnails: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
| maintenance: | ||
| cleanUpOldThumbnails: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
|
|
||
| web: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| - name: ocis2 | ||
| chart: ../../charts/ocis | ||
| namespace: ocis2 | ||
| values: | ||
| - image: | ||
| tag: "6.4.0" | ||
| - externalDomain: ocis2.kube.owncloud.test | ||
| - ingress: | ||
| enabled: true | ||
| ingressClassName: nginx | ||
| annotations: | ||
| nginx.ingress.kubernetes.io/proxy-body-size: 1024m | ||
| tls: | ||
| - secretName: ocis-dev-tls | ||
| hosts: | ||
| - ocis2.kube.owncloud.test | ||
|
|
||
| - logging: | ||
| level: debug | ||
|
|
||
| - insecure: | ||
| oidcIdpInsecure: true | ||
| ocisHttpApiInsecure: true | ||
| ocmInsecure: true | ||
|
|
||
| - features: | ||
| demoUsers: true | ||
| ocm: | ||
| enabled: true | ||
| providers: |- | ||
| [ | ||
| { | ||
| "name": "oCIS Test", | ||
| "full_name": "oCIS Test provider", | ||
| "organization": "oCIS", | ||
| "domain": "ocis.kube.owncloud.test", | ||
| "homepage": "https://ocis.kube.owncloud.test", | ||
| "description": "oCIS Example cloud storage", | ||
| "services": [ | ||
| { | ||
| "endpoint": { | ||
| "type": { | ||
| "name": "OCM", | ||
| "description": "ocis.kube.owncloud.test Open Cloud Mesh API" | ||
| }, | ||
| "name": "ocis.kube.owncloud.test - OCM API", | ||
| "path": "https://ocis.kube.owncloud.test/ocm/", | ||
| "is_monitored": true | ||
| }, | ||
| "api_version": "0.0.1", | ||
| "host": "http://ocis.kube.owncloud.test" | ||
| }, | ||
| { | ||
| "endpoint": { | ||
| "type": { | ||
| "name": "Webdav", | ||
| "description": "ocis.kube.owncloud.test Webdav API" | ||
| }, | ||
| "name": "ocis.kube.owncloud.test Example - Webdav API", | ||
| "path": "https://ocis.kube.owncloud.test/dav/", | ||
| "is_monitored": true | ||
| }, | ||
| "api_version": "0.0.1", | ||
| "host": "https://ocis.kube.owncloud.test/" | ||
| } | ||
| ] | ||
| } | ||
| ] | ||
| - services: | ||
| idm: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| nats: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| search: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| storagesystem: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
|
|
||
| storageusers: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
| maintenance: | ||
| cleanUpExpiredUploads: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
| purgeExpiredTrashBinItems: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
| restartPostprocessing: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
|
|
||
| thumbnails: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce | ||
| maintenance: | ||
| cleanUpOldThumbnails: | ||
| enabled: true | ||
| schedule: "* * * * *" | ||
|
|
||
| web: | ||
| persistence: | ||
| enabled: true | ||
| accessModes: | ||
| - ReadWriteOnce |