add bookstack

Author: soerenschneider

clusters/svc.ez.soeren.cloud/bookstack/external-secret-bookstack.yaml

@@ -0,0 +1,34 @@
+---
+apiVersion: "external-secrets.io/v1beta1"
+kind: "ExternalSecret"
+metadata:
+  name: "bookstack"
+spec:
+  refreshInterval: "1h"
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "bookstack"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "APP_KEY"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/bookstack"
+        property: "APP_KEY"
+    - secretKey: "DB_PASSWORD"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/bookstack"
+        property: "DB_PASSWORD"
+    - secretKey: "DB_USERNAME"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/bookstack"
+        property: "DB_USERNAME"
+    - secretKey: "OIDC_CLIENT_ID"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/bookstack"
+        property: "OIDC_CLIENT_ID"
+    - secretKey: "OIDC_CLIENT_SECRET"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/bookstack"
+        property: "OIDC_CLIENT_SECRET"

clusters/svc.ez.soeren.cloud/bookstack/kustomization.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: bookstack
+resources:
+  - ../../../apps/bookstack
+  - namespace.yaml
+  - external-secret-bookstack.yaml
+components:
+  - ../../../apps/bookstack/components/istio
+  - ../../../apps/bookstack/components/oidc
+patches:
+  - target:
+      kind: VirtualService
+      name: bookstack
+    patch: |
+      - op: replace
+        path: /spec/hosts
+        value:
+          - bookstack.svc.ez.soeren.cloud
+configMapGenerator:
+  - name: bookstack-config
+    behavior: merge
+    literals:
+      - APP_URL=https://bookstack.svc.ez.soeren.cloud
+      - DB_HOST=dbs.ez.soeren.cloud:3306
+      - OIDC_ISSUER=https://keycloak.svc.ez.soeren.cloud/realms/myrealm

clusters/svc.ez.soeren.cloud/bookstack/namespace.yaml

@@ -0,0 +1,7 @@
+---
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: bookstack
+  labels:
+    name: bookstack