Add nodebb

Author: Brutus5000

apps/nodebb/templates/config.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nodebb
+  namespace: faf-apps
+  labels:
+    app: nodebb
+data:
+  MONGODB_USER: "nodebb"
+  MONGODB_DATABASE: "nodebb"

apps/nodebb/templates/deployment.yaml

@@ -0,0 +1,65 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: nodebb
+  name: nodebb
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: nodebb
+  template:
+    metadata:
+      labels:
+        app: nodebb
+    spec:
+      initContainers:
+        - name: permission-init
+          image: alpine:3.16.0
+          command:
+            - sh
+            - -c
+            - chown -R 1000:1000 /data/* && chmod 775 /data/* && ls -lah /data
+          volumeMounts:
+            - mountPath: /data/node_modules
+              name: nodebb
+              subPath: node_modules
+            - mountPath: /data/build
+              name: nodebb
+              subPath: build
+            - mountPath: /data/uploads
+              name: nodebb
+              subPath: uploads
+      containers:
+        - image: nodebb/docker:1.18.5
+{{/*          command:*/}}
+{{/*            - /bin/sh*/}}
+{{/*            - "-c"*/}}
+{{/*            - sleep 3600*/}}
+          imagePullPolicy: Always
+          name: nodebb
+          volumeMounts:
+            - mountPath: /usr/src/app/config.json
+              name: config
+              subPath: config.json
+            - mountPath: /usr/src/app/node_modules
+              name: nodebb
+              subPath: node_modules
+            - mountPath: /usr/src/app/build
+              name: nodebb
+              subPath: build
+            - mountPath: /usr/src/app/public/uploads
+              name: nodebb
+              subPath: uploads
+      restartPolicy: Always
+      volumes:
+        - name: config
+          secret:
+            secretName: nodebb
+        - name: nodebb
+          persistentVolumeClaim:
+            claimName: nodebb-pvc
+      securityContext:
+        fsGroup: 1000

apps/nodebb/templates/ingress.yaml

@@ -0,0 +1,13 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nodebb
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`forum.{{.Values.baseDomain}}`)
+      kind: Rule
+      services:
+        - name: nodebb
+          port: 4567

apps/nodebb/templates/secret.yaml

@@ -0,0 +1,19 @@
+apiVersion: secrets.infisical.com/v1alpha1
+kind: InfisicalSecret
+metadata:
+  name: nodebb
+  namespace: faf-apps
+spec:
+  authentication:
+    universalAuth:
+      credentialsRef:
+        secretName: infisical-machine-identity
+        secretNamespace: faf-ops
+      secretsScope:
+        projectSlug: {{.Values.infisical.projectSlug}}
+        envSlug: {{.Values.infisical.envSlug}}
+        secretsPath: "/nodebb"
+  managedSecretReference:
+    secretName: nodebb
+    secretNamespace: faf-apps
+    creationPolicy: "Owner"

apps/nodebb/templates/service.yaml

@@ -1,10 +1,12 @@
-# This is a temporary workaround to point to the nodebb instance running in faf-stack for the API to reach it
-# (it is exposed to the host though)
-# TODO: Replace as soon as nodebb runs in cluster
 apiVersion: v1
 kind: Service
 metadata:
   name: nodebb
+  labels:
+    app: nodebb
 spec:
-  type: ExternalName
-  externalName: {{.Values.hostName}}
+  selector:
+    app: nodebb
+  ports:
+    - port: 4567
+      targetPort: 4567

cluster/storage/values.yaml

@@ -48,6 +48,11 @@ managedStorages:
       size: 20Gi
     pvc:
       namespace: faf-infra
+  - pv:
+      name: nodebb
+      size: 15Gi
+    pvc:
+      namespace: faf-apps
   - pv:
       name: wordpress
       size: 10Gi
@@ -82,6 +87,3 @@ managedStorages:
 #    namespace: faf-apps
 #    size: 20Gi
 #    size: 10Gi
-#  - name: nodebb
-#    namespace: faf-apps
-#    size: 10Gi

scripts/init-mongodb.sh

@@ -51,6 +51,6 @@ MONGODB_SCRIPT
     fi
 }
 
-create_user_and_db faf-apps wikijs DB_USER DB_PASS DB_NAME
+create_user_and_db faf-apps nodebb MONGODB_USER MONGO_NODEBB_PASSWORD MONGODB_DATABASE
 
 echo "All users and databases have been processed."

scripts/k8s-helpers.sh

@@ -44,7 +44,7 @@ check_resource_exists_or_fail() {
   EXISTS=$(kubectl -n $NAMESPACE get "$RESOURCE_TYPE" "$RESOURCE_NAME" >/dev/null 2>/dev/null && echo true || echo false)
   if test "$EXISTS" = "false"
   then
-    echo "$RESOURCE_TYPE $RESOURCE_NAME missing. Aborting."
+    echo "Namespace $NAMESPACE: $RESOURCE_TYPE $RESOURCE_NAME missing. Aborting."
     exit 1
   fi
 }