feat: configure prd k8s w/ minio

.gitsecret/paths/mapping.cfg

@@ -4,4 +4,5 @@ Makefile.env:89a8042a354f14d5a7ba195dfb83a825d16beb30a4c4deea4260c25dcb410e7f
 kubeconfig.yml:79f6527d77de60938ac0532b7a7570886c4f7a7494298ae3014e2852e3c567ec
 backend/k8s/overlays/prd/dashboard.secrets.env:e6a6e1c9f4176b20768133b08afdda90cb9ce6c06a630a2c83c74b769c6f7a47
 backend/k8s/overlays/stg/dashboard.secrets.env:843914b560755e5c838ff8c8ce04be22bcd48aa27c80ae235f8d5bdcd04dcd2a
-backend/k8s/overlays/stg/storage.secrets.env:a25a7266ec3dd25440fa0ab9a42ded4927c1c55f06a564cb1215c1cdb410537a
+backend/k8s/overlays/stg/storage.secrets.env:5c5c05dd0e759310fe8b463b22b40563b06d992a9a0c9e83b18ca8f97030042a
+backend/k8s/overlays/prd/storage.secrets.env:156256b898621bf1e532d1276ab248b5bf0954b7172cf661097247a895527622

backend/k8s/overlays/prd/kustomization.yaml

@@ -3,6 +3,7 @@ kind: Kustomization
 resources:
   - ../../base
   - webserver.ingress.yaml
+  - storage.ingress.yaml
 namespace: kommul
 commonLabels:
   eurac.edu/environment: prd
@@ -11,6 +12,7 @@ commonLabels:
 patchesStrategicMerge:
   - database.deployment.yaml
   - webserver.deployment.yaml
+  - storage.deployment.yaml
 images:
   - name: oetzit-webserver-image
     newName: gitlab.inf.unibz.it:4567/commul/oetzit/backend
@@ -24,3 +26,7 @@ secretGenerator:
       - dashboard.secrets.env
     name: oetzit-dashboard-credentials
     type: Opaque
+  - envs:
+      - storage.secrets.env
+    name: oetzit-storage-credentials
+    type: Opaque

backend/k8s/overlays/prd/storage.deployment.yaml

+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: oetzit-storage-deployment
+spec:
+  template:
+    spec:
+      containers:
+        - name: minio
+          env:
+            - name: MINIO_ROOT_USER
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: MINIO_ROOT_USER
+            - name: MINIO_ROOT_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: MINIO_ROOT_PASSWORD
+            - name: MINIO_BROWSER_REDIRECT_URL
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: MINIO_BROWSER_REDIRECT_URL

backend/k8s/overlays/prd/storage.ingress.yaml

+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: oetzit-storage-ingress
+  annotations:
+    ingress.kubernetes.io/rewrite-target: /
+spec:
+  rules:
+    - host: kommul.eurac.edu
+      http:
+        paths:
+          - path: /oetzit-storage-api/
+            backend:
+              serviceName: oetzit-storage-service
+              servicePort: 9000
+          - path: /oetzit-storage-console/
+            backend:
+              serviceName: oetzit-storage-service
+              servicePort: 9001

backend/k8s/overlays/prd/storage.secrets.env.secret

+
|A+u
H\nt7V#6֥6OCkM<H {?s(n74z3nMLONَ<jx]k0!u=peo0eϐ1tF9mٹ)n
+?ei'8sQ2	8\v+JFi:V>2PW<ۿ_fss~ql`d؀?u?/hFkYX )LN^60Tc;'Ff>vT<~gH9GZ2j:TÑ͒hB JuYk;,
؋KG1it!*?/X=#QyX@N='b
+w^QQ
7 $Uql^a^\C_UNesaiB?O}9ɮ_ڋ<-۞5cbab]tV0I:PZ.FQ`|
+*|IV$ڒ|=#o/Uڐyh{9璦Vu2pOjR
+I	W,wRRrMb],C
h19@xy?"n+i!HAqN
\ No newline at end of file

backend/k8s/overlays/prd/webserver.deployment.yaml

@@ -24,6 +24,31 @@ spec:
                 secretKeyRef:
                   name: oetzit-dashboard-credentials
                   key: password
+            - name: STORAGE_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: STORAGE_ACCESS_KEY
+            - name: STORAGE_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: STORAGE_SECRET_KEY
+            - name: STORAGE_ENDPOINT
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: STORAGE_ENDPOINT
+            - name: STORAGE_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: STORAGE_PORT
+            - name: STORAGE_BUCKET
+              valueFrom:
+                secretKeyRef:
+                  name: oetzit-storage-credentials
+                  key: STORAGE_BUCKET
       initContainers: # TODO: use job?
         - name: oetzit-migrator
           imagePullPolicy: Always

backend/k8s/overlays/prd/webserver.ingress.yaml

@@ -9,7 +9,7 @@ spec:
     - host: kommul.eurac.edu
       http:
         paths:
-          - path: /oetzit
+          - path: /oetzit/
             backend:
               serviceName: oetzit-webserver-service
               servicePort: 80