add paperless-ngx

Author: soerenschneider

clusters/dqs.dd.soeren.cloud/paperless-ngx/kustomization.yaml

@@ -0,0 +1,36 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: paperless-ngx
+resources:
+  - ../../../apps/paperless-ngx
+  - namespace.yaml
+  - pv-consumption.yaml
+  - pv-storage.yaml
+components:
+  - ../../../apps/paperless-ngx/components/istio
+  - ../../../apps/paperless-ngx/components/istio-proxy
+  - ../../../apps/paperless-ngx/components/pvc
+  - ../../../apps/paperless-ngx/components/tika
+  - ../../../apps/paperless-ngx/components/database-mariadb
+patches:
+  - target:
+      kind: VirtualService
+      name: paperless-ngx
+    patch: |-
+      - op: replace
+        path: /spec/hosts
+        value:
+          - paperless-ngx.dqs.dd.soeren.cloud
+configMapGenerator:
+  - name: paperless-config
+    behavior: merge
+    literals:
+      - PAPERLESS_URL=https://paperless-ngx.dqs.dd.soeren.cloud
+      - PAPERLESS_CORS_ALLOWED_HOSTS=https://paperless-ngx.dqs.dd.soeren.cloud
+      - PAPERLESS_DBHOST=dbs.pt.soeren.cloud
+  - name: oauth2-proxy  # TODO: https://github.com/kubernetes-sigs/kustomize/issues/4402
+    literals:
+      - OAUTH2_PROXY_OIDC_ISSUER_URL=https://keycloak.svc.dd.soeren.cloud/realms/myrealm
+      - OAUTH2_PROXY_CLIENT_ID=paperless-ngx
+      - OAUTH2_PROXY_EMAIL_DOMAINS=*

clusters/dqs.dd.soeren.cloud/paperless-ngx/namespace.yaml

@@ -0,0 +1,7 @@
+---
+kind: "Namespace"
+apiVersion: "v1"
+metadata:
+  name: "paperless-ngx"
+  labels:
+    name: "paperless-ngx"

clusters/dqs.dd.soeren.cloud/paperless-ngx/pv-consumption.yaml

@@ -0,0 +1,24 @@
+---
+apiVersion: "v1"
+kind: "PersistentVolume"
+metadata:
+  name: "paperless-ngx-consumption"
+spec:
+  capacity:
+    storage: "1Gi"
+  accessModes:
+    - "ReadWriteOnce"
+  storageClassName: "local-storage"
+  local:
+    path: "/mnt/k8s/paperless-ngx/consumption"
+  claimRef:
+    namespace: "paperless-ngx"
+    name: "paperless-ngx-consumption"
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: "kubernetes.io/hostname"
+              operator: "In"
+              values:
+                - "k8s-dqs.dd.soeren.cloud"

clusters/dqs.dd.soeren.cloud/paperless-ngx/pv-storage.yaml

@@ -0,0 +1,24 @@
+---
+apiVersion: "v1"
+kind: "PersistentVolume"
+metadata:
+  name: "paperless-ngx-storage"
+spec:
+  capacity:
+    storage: "15Gi"
+  accessModes:
+    - "ReadWriteOnce"
+  storageClassName: "local-storage"
+  local:
+    path: "/mnt/k8s/paperless-ngx/data"
+  claimRef:
+    namespace: "paperless-ngx"
+    name: "paperless-ngx-storage"
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: "kubernetes.io/hostname"
+              operator: "In"
+              values:
+                - "k8s-dqs.dd.soeren.cloud"