Files
kubernetes/prod/wordpress/riscv/wordpress.yaml
2025-11-23 18:58:51 +01:00

154 lines
3.0 KiB
YAML
Executable File

apiVersion: apps/v1
kind: Deployment
metadata:
name: wordpress
namespace: wordpress
labels:
app: wordpress
spec:
replicas: 1
selector:
matchLabels:
app: wordpress
strategy:
rollingUpdate:
maxSurge: 0
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
labels:
app: wordpress
spec:
containers:
- image: riscv64/wordpress:6.7.2-php8.1-fpm-alpine
name: wordpress
imagePullPolicy: Always
env:
- name: WORDPRESS_DB_HOST
value: "mariadb.mariadb"
- name: WORDPRESS_DB_PASSWORD
value: "wordpress"
- name: WORDPRESS_DB_USER
value: "wordpress"
- name: WORDPRESS_DB_NAME
value: "wordpress"
ports:
- containerPort: 9000
name: php-fpm
protocol: TCP
volumeMounts:
- name: nfs-wordpress
mountPath: /var/www/html
subPath: html
- name: nginx
image: riscv64/nginx:1.27.4-alpine
ports:
- containerPort: 80
volumeMounts:
- name: nfs-wordpress
mountPath: /var/www/html
subPath: html
- name: nfs-wordpress
mountPath: /etc/nginx/conf.d/default.conf
subPath: default.conf
volumes:
- name: nfs-wordpress
persistentVolumeClaim:
claimName: wordpress-pvc
---
apiVersion: v1
kind: Service
metadata:
name: wordpress
namespace: wordpress
spec:
selector:
app: wordpress
ports:
- protocol: TCP
port: 80
targetPort: 80
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: wordpress-pv
spec:
storageClassName: ""
capacity:
storage: 2Gi
accessModes:
- ReadWriteMany
persistentVolumeReclaimPolicy: Retain
mountOptions:
- hard
- nfsvers=4.1
nfs:
server: 192.168.2.110
path: /mnt/nfs_share/wordpress/riscv
readOnly: false
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: wordpress-pvc
namespace: wordpress
spec:
storageClassName: ""
volumeName: wordpress-pv
accessModes:
- ReadWriteMany
volumeMode: Filesystem
resources:
requests:
storage: 2Gi
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: wordpress-http
namespace: wordpress
spec:
entryPoints:
- web
routes:
- match: Host(`wordpress-riscv.allarddcs.nl`)
kind: Rule
services:
- name: wordpress
port: 80
middlewares:
- name: redirect-to-https
namespace: wordpress
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: wordpress-tls
namespace: wordpress
spec:
entryPoints:
- websecure
routes:
- match: Host(`wordpress-riscv.allarddcs.nl`)
kind: Rule
services:
- name: wordpress
port: 80
tls:
certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: redirect-to-https
namespace: wordpress
spec:
redirectScheme:
scheme: https
permanent: true