add apps/pigallery2

1 files changed, 47 insertions, 0 deletions

diff --git a/roles/apps/pigallery2/templates/pod-spec.yml.j2 b/roles/apps/pigallery2/templates/pod-spec.yml.j2
new file mode 100644
index 00000000..e0921b3b
--- /dev/null
+++ b/roles/apps/pigallery2/templates/pod-spec.yml.j2
@@ -0,0 +1,47 @@
+securityContext:
+  allowPrivilegeEscalation: false
+containers:
+- name: pigallery2
+  image: "bpatrik/pigallery2:{{ item.value.version }}"
+  securityContext:
+    runAsUser: {{ pigallery2_app_uid }}
+    runAsGroup: {{ pigallery2_app_gid }}
+  resources:
+    limits:
+      memory: "1Gi"
+  volumeMounts:
+  - name: config
+    mountPath: /app/data/config
+  - name: db
+    mountPath: /app/data/db
+  - name: tmp
+    mountPath: /app/data/tmp
+  - name: images
+    mountPath: /app/data/images
+    readOnly: true
+  env:
+  - name: PORT
+    value: "{{ item.value.port }}"
+  - name: NODE_ENV
+    value: production
+  ports:
+  - containerPort: {{ item.value.port }}
+    hostPort: {{ item.value.port }}
+    hostIP: 127.0.0.1
+volumes:
+- name: config
+  hostPath:
+    path: "{{ pigallery2_base_path }}/{{ item.key }}/config/"
+    type: Directory
+- name: db
+  hostPath:
+    path: "{{ pigallery2_base_path }}/{{ item.key }}/db/"
+    type: Directory
+- name: tmp
+  hostPath:
+    path: "{{ pigallery2_base_path }}/{{ item.key }}/tmp/"
+    type: Directory
+- name: images
+  hostPath:
+    path: "{{ item.value.images_path }}"
+    type: Directory