apps/etherpad-lite: migrate to new standalone pod role

1 files changed, 49 insertions, 0 deletions

diff --git a/roles/apps/etherpad-lite/templates/pod-spec-with-mariadb.yml.j2 b/roles/apps/etherpad-lite/templates/pod-spec-with-mariadb.yml.j2
new file mode 100644
index 00000000..f608d6ab
--- /dev/null
+++ b/roles/apps/etherpad-lite/templates/pod-spec-with-mariadb.yml.j2
@@ -0,0 +1,49 @@
+securityContext:
+  allowPrivilegeEscalation: false
+containers:
+- name: etherpad-lite
+  image: spreadspace/etherpad-lite:{{ item.value.version }}
+  # securityContext:
+  #   runAsUser: {{ etherpad_lite_app_uid }}
+  #   runAsGroup: {{ etherpad_lite_app_gid }}
+  resources:
+    limits:
+      memory: "4Gi"
+  volumeMounts:
+  - name: config
+    mountPath: /opt/etherpad-lite/settings.json
+    subPath: settings.json
+    readOnly: true
+  ports:
+  - containerPort: 9001
+    hostPort: {{ item.value.port }}
+    hostIP: 127.0.0.1
+- name: database
+  image: "mariadb:{{ item.value.database.version }}"
+  securityContext:
+    runAsUser: {{ etherpad_lite_db_uid }}
+    runAsGroup: {{ etherpad_lite_db_gid }}
+  resources:
+    limits:
+      memory: "4Gi"
+  env:
+  - name: MYSQL_RANDOM_ROOT_PASSWORD
+    value: "true"
+  - name: MYSQL_DATABASE
+    value: etherpad-lite
+  - name: MYSQL_USER
+    value: etherpad-lite
+  - name: MYSQL_PASSWORD
+    value: "{{ item.value.database.password }}"
+  volumeMounts:
+  - name: database
+    mountPath: /var/lib/mysql
+volumes:
+- name: config
+  hostPath:
+    path: "{{ etherpad_lite_base_path }}/{{ item.key }}/config/"
+    type: Directory
+- name: database
+  hostPath:
+    path: "{{ etherpad_lite_base_path }}/{{ item.key }}/{{ item.value.database.type }}"
+    type: Directory