1 files changed, 185 insertions, 0 deletions
diff --git a/roles/apps/jitsi/meet/templates/pod-spec.yml.j2 b/roles/apps/jitsi/meet/templates/pod-spec.yml.j2
new file mode 100644
index 00000000..7461658f
--- /dev/null
+++ b/roles/apps/jitsi/meet/templates/pod-spec.yml.j2
@@ -0,0 +1,185 @@
+initContainers:
+- name: prepare-config
+  image: busybox
+  workingDir: /config
+  command:
+    - sh
+    - -c
+    - mkdir -p jicofo prosody web jvb
+  volumeMounts:
+  - name: config
+    mountPath: /config
+containers:
+- name: jicofo
+  image: "jitsi/jicofo:{{ jitsi_meet_version }}"
+  resources:
+    requests:
+      memory: "1Gi"
+    limits:
+      memory: "4Gi"
+  volumeMounts:
+  - name: config
+    subPath: jicofo
+    mountPath: /config
+  env:
+  - name: XMPP_SERVER
+    value: 127.0.0.1
+  - name: XMPP_DOMAIN
+    value: meet.jitsi
+  - name: XMPP_AUTH_DOMAIN
+    value: auth.meet.jitsi
+  - name: XMPP_INTERNAL_MUC_DOMAIN
+    value: internal-muc.meet.jitsi
+
+  - name: JICOFO_COMPONENT_SECRET
+    value: "{{ jitsi_meet_secrets.jicofo_component_secret }}"
+  - name: JICOFO_AUTH_USER
+    value: focus
+  - name: JICOFO_AUTH_PASSWORD
+    value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"
+
+  - name: JVB_BREWERY_MUC
+    value: jvbbrewery
+
+  - name: TZ
+    value: {{ jitsi_meet_timezone }}
+
+- name: prosody
+  image: "jitsi/prosody:{{ jitsi_meet_version }}"
+  resources:
+    requests:
+      memory: "128Mi"
+    limits:
+      memory: "512Mi"
+  volumeMounts:
+  - name: scripts
+    subPath: prosody/cont-init.sh
+    mountPath: /etc/cont-init.d/99-k8s
+  - name: config
+    subPath: prosody
+    mountPath: /config
+  env:
+  - name: XMPP_DOMAIN
+    value: meet.jitsi
+  - name: XMPP_AUTH_DOMAIN
+    value: auth.meet.jitsi
+  - name: XMPP_MUC_DOMAIN
+    value: muc.meet.jitsi
+  - name: XMPP_INTERNAL_MUC_DOMAIN
+    value: internal-muc.meet.jitsi
+
+  - name: JICOFO_COMPONENT_SECRET
+    value: "{{ jitsi_meet_secrets.jicofo_component_secret }}"
+  - name: JICOFO_AUTH_USER
+    value: focus
+  - name: JICOFO_AUTH_PASSWORD
+    value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"
+
+  - name: JVB_AUTH_USER
+    value: jvb
+  - name: JVB_AUTH_PASSWORD
+    value: "{{ jitsi_meet_secrets.jvb_auth_password }}"
+  - name: JVB_TCP_HARVESTER_DISABLED
+    value: "true"
+
+  - name: TZ
+    value: {{ jitsi_meet_timezone }}
+
+- name: web
+  image: "jitsi/web:{{ jitsi_meet_version }}"
+  resources:
+    requests:
+      memory: "256Mi"
+    limits:
+      memory: "1Gi"
+  ports:
+  - protocol: TCP
+    containerPort: 80
+    hostPort: {{ jitsi_meet_http_port }}
+    hostIP: 127.0.0.1
+  volumeMounts:
+  - name: config
+    subPath: web
+    mountPath: /config
+  env:
+  - name: DISABLE_HTTPS
+    value: "1"
+  - name: ENABLE_HTTP_REDIRECT
+    value: "0"
+
+  - name: XMPP_SERVER
+    value: 127.0.0.1
+  - name: XMPP_DOMAIN
+    value: meet.jitsi
+  - name: XMPP_AUTH_DOMAIN
+    value: auth.meet.jitsi
+  - name: XMPP_INTERNAL_MUC_DOMAIN
+    value: internal-muc.meet.jitsi
+  - name: XMPP_BOSH_URL_BASE
+    value: http://127.0.0.1:5280
+  - name: XMPP_MUC_DOMAIN
+    value: muc.meet.jitsi
+
+  - name: JICOFO_AUTH_USER
+    value: focus
+
+  - name: JVB_TCP_HARVESTER_DISABLED
+    value: "true"
+
+  - name: TZ
+    value: {{ jitsi_meet_timezone }}
+
+- name: jvb
+  image: "jitsi/jvb:{{ jitsi_meet_version }}"
+  resources:
+    requests:
+      memory: "1Gi"
+    limits:
+      memory: "4Gi"
+  ports:
+  - protocol: UDP
+    containerPort: {{ jitsi_meet_jvb_port }}
+    hostPort: {{ jitsi_meet_jvb_port }}
+    hostIP: "{{ external_ip | default(ansible_default_ipv4.address) }}"
+  volumeMounts:
+  - name: config
+    subPath: jvb
+    mountPath: /config
+  env:
+  - name: XMPP_SERVER
+    value: 127.0.0.1
+  - name: XMPP_DOMAIN
+    value: meet.jitsi
+  - name: XMPP_AUTH_DOMAIN
+    value: auth.meet.jitsi
+  - name: XMPP_INTERNAL_MUC_DOMAIN
+    value: internal-muc.meet.jitsi
+
+  - name: JICOFO_AUTH_USER
+    value: focus
+  - name: JICOFO_AUTH_PASSWORD
+    value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"
+
+  - name: JVB_AUTH_USER
+    value: jvb
+  - name: JVB_AUTH_PASSWORD
+    value: "{{ jitsi_meet_secrets.jvb_auth_password }}"
+  - name: JVB_BREWERY_MUC
+    value: jvbbrewery
+  - name: JVB_PORT
+    value: "{{ jitsi_meet_jvb_port }}"
+  - name: JVB_TCP_HARVESTER_DISABLED
+    value: "true"
+  - name: DOCKER_HOST_ADDRESS
+    value: "{{ external_ip | default(ansible_default_ipv4.address) }}"
+
+  - name: TZ
+    value: {{ jitsi_meet_timezone }}
+
+volumes:
+- name: scripts
+  hostPath:
+    path: "{{ jitsi_meet_base_path }}/{{ jitsi_meet_inst_name }}/scripts"
+- name: config
+  emptyDir:
+    medium: Memory