462 lines
10 KiB
YAML
462 lines
10 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: nginx
|
|
namespace: defectdojo
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
io.kompose.service: nginx
|
|
strategy:
|
|
type: Recreate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: nginx
|
|
spec:
|
|
containers:
|
|
- env:
|
|
- name: NGINX_METRICS_ENABLED
|
|
value: "false"
|
|
- name: DD_UWSGI_HOST
|
|
value: "uwsgi.defectdojo"
|
|
- name: HTTP_AUTH_PASSWORD
|
|
value: "Defectdojo01@"
|
|
image: defectdojo/defectdojo-nginx
|
|
imagePullPolicy: IfNotPresent
|
|
name: nginx
|
|
ports:
|
|
- containerPort: 8080
|
|
- containerPort: 8443
|
|
resources: {}
|
|
volumeMounts:
|
|
- mountPath: /usr/share/nginx/html/media
|
|
name: defectdojo-media
|
|
restartPolicy: Always
|
|
volumes:
|
|
- name: defectdojo-media
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-media-pvc
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: nginx
|
|
namespace: defectdojo
|
|
spec:
|
|
ports:
|
|
- name: "8080"
|
|
port: 8080
|
|
targetPort: 8080
|
|
- name: "8443"
|
|
port: 8443
|
|
targetPort: 8443
|
|
selector:
|
|
io.kompose.service: nginx
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: defectdojo-media-pvc
|
|
namespace: defectdojo
|
|
spec:
|
|
storageClassName: ""
|
|
volumeName: defectdojo-media-pv
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
volumeMode: Filesystem
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolume
|
|
metadata:
|
|
name: defectdojo-media-pv
|
|
spec:
|
|
storageClassName: ""
|
|
capacity:
|
|
storage: 2Gi
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
persistentVolumeReclaimPolicy: Retain
|
|
mountOptions:
|
|
- hard
|
|
- nfsvers=4.1
|
|
nfs:
|
|
server: 192.168.2.110
|
|
path: /mnt/nfs_share/defectdojo/media
|
|
readOnly: false
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: uwsgi
|
|
name: uwsgi
|
|
namespace: defectdojo
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
io.kompose.service: uwsgi
|
|
strategy:
|
|
type: Recreate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: uwsgi
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- /wait-for-it.sh
|
|
- postgres16.postgres:5432
|
|
- -t
|
|
- "30"
|
|
- --
|
|
- /entrypoint-uwsgi.sh
|
|
env:
|
|
- name: DD_ALLOWED_HOSTS
|
|
value: '*'
|
|
- name: DD_CELERY_BROKER_URL
|
|
value: redis://redis.defectdojo:6379/0
|
|
- name: DD_CREDENTIAL_AES_256_KEY
|
|
value: '&91a*agLqesc*0DJ+2*bAbsUZfR*4nLw'
|
|
- name: DD_DATABASE_URL
|
|
value: postgresql://defectdojo:defectdojo@postgres16.postgres:5432/defectdojo
|
|
- name: DD_DEBUG
|
|
value: "False"
|
|
- name: DD_DJANGO_METRICS_ENABLED
|
|
value: "False"
|
|
- name: DD_ASYNC_FINDING_IMPORT
|
|
value: "False"
|
|
- name: DD_SECRET_KEY
|
|
value: hhZCp@D28z!n@NED*yB!ROMt+WzsY*iq
|
|
- name: DD_ENABLE_AUDITLOG
|
|
value: "False"
|
|
image: defectdojo/defectdojo-django
|
|
imagePullPolicy: IfNotPresent
|
|
name: uwsgi
|
|
resources: {}
|
|
volumeMounts:
|
|
- mountPath: /app/docker/extra_settings
|
|
name: defectdojo-uwsgi
|
|
- mountPath: /app/media
|
|
name: defectdojo-media
|
|
restartPolicy: Always
|
|
volumes:
|
|
- name: defectdojo-uwsgi
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-uwsgi-pvc
|
|
- name: defectdojo-media
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-media-pvc
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: uwsgi
|
|
namespace: defectdojo
|
|
spec:
|
|
ports:
|
|
- name: "3031"
|
|
port: 3031
|
|
targetPort: 3031
|
|
selector:
|
|
io.kompose.service: uwsgi
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: defectdojo-uwsgi-pvc
|
|
namespace: defectdojo
|
|
spec:
|
|
storageClassName: ""
|
|
volumeName: defectdojo-uwsgi-pv
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
volumeMode: Filesystem
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolume
|
|
metadata:
|
|
name: defectdojo-uwsgi-pv
|
|
spec:
|
|
storageClassName: ""
|
|
capacity:
|
|
storage: 2Gi
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
persistentVolumeReclaimPolicy: Retain
|
|
mountOptions:
|
|
- hard
|
|
- nfsvers=4.1
|
|
nfs:
|
|
server: 192.168.2.110
|
|
path: /mnt/nfs_share/defectdojo/uwsgi
|
|
readOnly: false
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: celeryworker
|
|
name: celeryworker
|
|
namespace: defectdojo
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
io.kompose.service: celeryworker
|
|
strategy:
|
|
type: Recreate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: celeryworker
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- /wait-for-it.sh
|
|
- postgres16.postgres:5432
|
|
- -t
|
|
- "30"
|
|
- --
|
|
- /entrypoint-celery-worker.sh
|
|
env:
|
|
- name: DD_CELERY_BROKER_URL
|
|
value: redis://redis.defectdojo:6379/0
|
|
- name: DD_CREDENTIAL_AES_256_KEY
|
|
value: '&91a*agLqesc*0DJ+2*bAbsUZfR*4nLw'
|
|
- name: DD_DATABASE_URL
|
|
value: postgresql://defectdojo:defectdojo@postgres16.postgres:5432/defectdojo
|
|
- name: DD_SECRET_KEY
|
|
value: hhZCp@D28z!n@NED*yB!ROMt+WzsY*iq
|
|
- name: DD_ENABLE_AUDITLOG
|
|
value: "False"
|
|
image: defectdojo/defectdojo-django
|
|
imagePullPolicy: IfNotPresent
|
|
name: celeryworker
|
|
resources: {}
|
|
volumeMounts:
|
|
- mountPath: /app/docker/extra_settings
|
|
name: defectdojo-celeryworker
|
|
- mountPath: /app/media
|
|
name: defectdojo-media
|
|
restartPolicy: Always
|
|
volumes:
|
|
- name: defectdojo-celeryworker
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-celeryworker-pvc
|
|
- name: defectdojo-media
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-media-pvc
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: defectdojo-celeryworker-pvc
|
|
namespace: defectdojo
|
|
spec:
|
|
storageClassName: ""
|
|
volumeName: defectdojo-celeryworker-pv
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
volumeMode: Filesystem
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolume
|
|
metadata:
|
|
name: defectdojo-celeryworker-pv
|
|
spec:
|
|
storageClassName: ""
|
|
capacity:
|
|
storage: 2Gi
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
persistentVolumeReclaimPolicy: Retain
|
|
mountOptions:
|
|
- hard
|
|
- nfsvers=4.1
|
|
nfs:
|
|
server: 192.168.2.110
|
|
path: /mnt/nfs_share/defectdojo/celeryworker
|
|
readOnly: false
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: celerybeat
|
|
name: celerybeat
|
|
namespace: defectdojo
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
io.kompose.service: celerybeat
|
|
strategy:
|
|
type: Recreate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: celerybeat
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- /wait-for-it.sh
|
|
- postgres16.postgres:5432
|
|
- -t
|
|
- "30"
|
|
- --
|
|
- /entrypoint-celery-beat.sh
|
|
env:
|
|
- name: DD_CELERY_BROKER_URL
|
|
value: redis://redis.defectdojo:6379/0
|
|
- name: DD_CREDENTIAL_AES_256_KEY
|
|
value: '&91a*agLqesc*0DJ+2*bAbsUZfR*4nLw'
|
|
- name: DD_DATABASE_URL
|
|
value: postgresql://defectdojo:defectdojo@postgres16.postgres:5432/defectdojo
|
|
- name: DD_SECRET_KEY
|
|
value: hhZCp@D28z!n@NED*yB!ROMt+WzsY*iq
|
|
- name: DD_ENABLE_AUDITLOG
|
|
value: "False"
|
|
image: defectdojo/defectdojo-django
|
|
imagePullPolicy: IfNotPresent
|
|
name: celerybeat
|
|
resources: {}
|
|
volumeMounts:
|
|
- mountPath: /app/docker/extra_settings
|
|
name: defectdojo-celerybeat
|
|
restartPolicy: Always
|
|
volumes:
|
|
- name: defectdojo-celerybeat
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-celerybeat-pvc
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: defectdojo-celerybeat-pvc
|
|
namespace: defectdojo
|
|
spec:
|
|
storageClassName: ""
|
|
volumeName: defectdojo-celerybeat-pv
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
volumeMode: Filesystem
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolume
|
|
metadata:
|
|
name: defectdojo-celerybeat-pv
|
|
spec:
|
|
storageClassName: ""
|
|
capacity:
|
|
storage: 2Gi
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
persistentVolumeReclaimPolicy: Retain
|
|
mountOptions:
|
|
- hard
|
|
- nfsvers=4.1
|
|
nfs:
|
|
server: 192.168.2.110
|
|
path: /mnt/nfs_share/defectdojo/celerybeat
|
|
readOnly: false
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: redis
|
|
name: redis
|
|
namespace: defectdojo
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
io.kompose.service: redis
|
|
strategy:
|
|
type: Recreate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
io.kompose.service: redis
|
|
spec:
|
|
containers:
|
|
- image: redis:7.2.4-alpine@sha256:a40e29800d387e3cf9431902e1e7a362e4d819233d68ae39380532c3310091ac
|
|
name: redis
|
|
resources: {}
|
|
volumeMounts:
|
|
- mountPath: /data
|
|
name: defectdojo-redis
|
|
restartPolicy: Always
|
|
volumes:
|
|
- name: defectdojo-redis
|
|
persistentVolumeClaim:
|
|
claimName: defectdojo-redis-pvc
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: redis
|
|
namespace: defectdojo
|
|
spec:
|
|
ports:
|
|
- name: "6379"
|
|
port: 6379
|
|
targetPort: 6379
|
|
selector:
|
|
io.kompose.service: redis
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: defectdojo-redis-pvc
|
|
namespace: defectdojo
|
|
spec:
|
|
storageClassName: ""
|
|
volumeName: defectdojo-redis-pv
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
volumeMode: Filesystem
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolume
|
|
metadata:
|
|
name: defectdojo-redis-pv
|
|
spec:
|
|
storageClassName: ""
|
|
capacity:
|
|
storage: 2Gi
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
persistentVolumeReclaimPolicy: Retain
|
|
mountOptions:
|
|
- hard
|
|
- nfsvers=4.1
|
|
nfs:
|
|
server: 192.168.2.110
|
|
path: /mnt/nfs_share/defectdojo/redis
|
|
readOnly: false
|