This commit is contained in:
2026-10-23 11:18:18 -04:00
parent 259c4aa83f
commit d5bbbd4f20
17 changed files with 2303 additions and 154 deletions
+64 -71
View File
@@ -24,6 +24,22 @@
persistence:
size: 4Ti
- name: Create a persistent volume claim for MediaWiki
k8s:
state: present
definition:
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: mediawiki
namespace: mediawiki
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 32Gi
- name: Create Deployment for MediaWiki
k8s:
definition:
@@ -44,62 +60,20 @@
spec:
containers:
- name: mediawiki
image: ericomeehan/mediawiki-extended
image: mediawiki
imagePullPolicy: IfNotPresent
resources:
requests:
memory: 2Gi
env:
- name: WIKI_NAME
value: MediaWiki
- name: WIKI_ADMIN
value: mediawiki_admin
- name: WIKI_ADMIN_PASS
value: "{{ mediawiki_admin_password }}"
- name: WIKI_LANG
value: en
- name: WIKI_URL
value: https://mediawiki.eom.dev/
- name: DB_HOST
value: mariadb
- name: DB_PORT
value: "3306"
- name: DB_NAME
value: mediawiki
- name: DB_USER
value: mediawiki
- name: DB_PASS
value: "{{ mediawiki_admin_password }}"
- name: LDAP_BASE
value: dc=eom,dc=dev
- name: LDAP_SERVER_NAME
value: openldap.openldap.svc.cluster.local
- name: LDAP_SERVER_PORT
value: "389"
- name: LDAP_DOMAINNAME
value: openldap.openldap.svc.cluster.local
- name: LDAP_ENCTYPE
value: clear
- name: LDAP_USER_ATTR
value: uid
- name: LDAP_REAL_NAME_ATTR
value: cn
- name: LDAP_MAIL_ATTR
value: mail
- name: LDAP_BIND_USER
value: cn=readonly,dc=eom,dc=dev
- name: LDAP_BIND_PASS
value: "{{ openldap_readonly_password }}"
- name: LDAP_BUREAUCRAT_GROUP
value: cn=Mediawiki Bureaucrats,ou=MediaWiki,ou=Services,dc=eom,dc=dev
- name: LDAP_INTERFACE_ADMIN_GROUP
value: cn=Mediawiki Interface Administrators,ou=MediaWiki,ou=Services,dc=eom,dc=dev
- name: LDAP_SYSOP_GROUP
value: cn=Mediawiki Sysops,ou=MediaWiki,ou=Services,dc=eom,dc=dev
- name: LDAP_SEARCH_FILTER
value: (&(objectClass=posixAccount)(uid=%1$s)(memberOf=cn=Mediawiki Users,ou=MediaWiki,ou=Services,dc=eom,dc=dev))
ports:
- containerPort: 80
volumemounts:
- name: mediawiki
mountpath: /var/www/html
volumes:
- name: mediawiki
persistentVolumeClaim:
claimName: mediawiki
- name: Create Service for MediaWiki
k8s:
@@ -117,31 +91,50 @@
name: http
type: ClusterIP
- name: Create Ingress
- name: Create OnionService
k8s:
state: present
definition:
apiVersion: networking.k8s.io/v1
kind: Ingress
apiVersion: tor.k8s.torproject.org/v1alpha2
kind: OnionService
metadata:
annotations:
cert-manager.io/cluster-issuer: ca-issuer
name: mediawiki
namespace: mediawiki
spec:
ingressClassName: nginx
version: 3
rules:
- host: mediawiki.eom.dev
http:
paths:
- pathType: Prefix
path: /
backend:
service:
name: mediawiki
port:
number: 80
tls:
- hosts:
- mediawiki.eom.dev
secretName: mediawiki
- port:
number: 80
backend:
service:
name: mediawiki
port:
number: 80
#- name: Create Ingress
# k8s:
# state: present
# definition:
# apiVersion: networking.k8s.io/v1
# kind: Ingress
# metadata:
# annotations:
# cert-manager.io/cluster-issuer: ca-issuer
# name: mediawiki
# namespace: mediawiki
# spec:
# ingressClassName: nginx
# rules:
# - host: mediawiki.eom.dev
# http:
# paths:
# - pathType: Prefix
# path: /
# backend:
# service:
# name: mediawiki
# port:
# number: 80
# tls:
# - hosts:
# - mediawiki.eom.dev
# secretName: mediawiki