mirror of https://github.com/helm/helm
Signed-off-by: Matt Butcher <matt.butcher@microsoft.com>pull/7852/head
Matt Butcher
6 years ago
parent
a2fc85fc71
commit
b085e3f3f7
@ -1,155 +0,0 @@
|
|||||||
apiVersion: extensions/v1beta1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
replicas: {{ .Values.replicaCount }}
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
spec:
|
|
||||||
{{- if .Values.image.pullSecrets }}
|
|
||||||
imagePullSecrets:
|
|
||||||
{{- range .Values.image.pullSecrets }}
|
|
||||||
- name: {{ . }}
|
|
||||||
{{- end}}
|
|
||||||
{{- end }}
|
|
||||||
containers:
|
|
||||||
- name: {{ template "fullname" . }}
|
|
||||||
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
|
||||||
env:
|
|
||||||
- name: ALLOW_EMPTY_PASSWORD
|
|
||||||
value: {{ .Values.allowEmptyPassword | quote }}
|
|
||||||
- name: MARIADB_HOST
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ template "mariadb.fullname" . }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.host | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: MARIADB_PORT_NUMBER
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: "3306"
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.port | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_NAME
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ .Values.mariadb.db.name | quote }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.database | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_USER
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ .Values.mariadb.db.user | quote }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.user | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
name: {{ template "mariadb.fullname" . }}
|
|
||||||
key: mariadb-password
|
|
||||||
{{- else }}
|
|
||||||
name: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
key: db-password
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_USERNAME
|
|
||||||
value: {{ .Values.wordpressUsername | quote }}
|
|
||||||
- name: WORDPRESS_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
key: wordpress-password
|
|
||||||
- name: WORDPRESS_EMAIL
|
|
||||||
value: {{ .Values.wordpressEmail | quote }}
|
|
||||||
- name: WORDPRESS_FIRST_NAME
|
|
||||||
value: {{ .Values.wordpressFirstName | quote }}
|
|
||||||
- name: WORDPRESS_LAST_NAME
|
|
||||||
value: {{ .Values.wordpressLastName | quote }}
|
|
||||||
- name: WORDPRESS_BLOG_NAME
|
|
||||||
value: {{ .Values.wordpressBlogName | quote }}
|
|
||||||
- name: WORDPRESS_TABLE_PREFIX
|
|
||||||
value: {{ .Values.wordpressTablePrefix | quote }}
|
|
||||||
- name: SMTP_HOST
|
|
||||||
value: {{ .Values.smtpHost | quote }}
|
|
||||||
- name: SMTP_PORT
|
|
||||||
value: {{ .Values.smtpPort | quote }}
|
|
||||||
- name: SMTP_USER
|
|
||||||
value: {{ .Values.smtpUser | quote }}
|
|
||||||
- name: SMTP_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
key: smtp-password
|
|
||||||
- name: SMTP_USERNAME
|
|
||||||
value: {{ .Values.smtpUsername | quote }}
|
|
||||||
- name: SMTP_PROTOCOL
|
|
||||||
value: {{ .Values.smtpProtocol | quote }}
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
containerPort: 80
|
|
||||||
- name: https
|
|
||||||
containerPort: 443
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /wp-login.php
|
|
||||||
{{- if not .Values.healthcheckHttps }}
|
|
||||||
port: http
|
|
||||||
{{- else }}
|
|
||||||
port: https
|
|
||||||
scheme: HTTPS
|
|
||||||
{{- end }}
|
|
||||||
{{ toYaml .Values.livenessProbe | indent 10 }}
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /wp-login.php
|
|
||||||
{{- if not .Values.healthcheckHttps }}
|
|
||||||
port: http
|
|
||||||
{{- else }}
|
|
||||||
port: https
|
|
||||||
scheme: HTTPS
|
|
||||||
{{- end }}
|
|
||||||
{{ toYaml .Values.readinessProbe | indent 10 }}
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /bitnami/apache
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: apache
|
|
||||||
- mountPath: /bitnami/wordpress
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: wordpress
|
|
||||||
- mountPath: /bitnami/php
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: php
|
|
||||||
resources:
|
|
||||||
{{ toYaml .Values.resources | indent 10 }}
|
|
||||||
volumes:
|
|
||||||
- name: wordpress-data
|
|
||||||
{{- if .Values.persistence.enabled }}
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: {{ .Values.persistence.existingClaim | default (include "fullname" .) }}
|
|
||||||
{{- else }}
|
|
||||||
emptyDir: {}
|
|
||||||
{{ end }}
|
|
||||||
{{- if .Values.nodeSelector }}
|
|
||||||
nodeSelector:
|
|
||||||
{{ toYaml .Values.nodeSelector | indent 8 }}
|
|
||||||
{{- end -}}
|
|
||||||
{{- with .Values.affinity }}
|
|
||||||
affinity:
|
|
||||||
{{ toYaml . | indent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
{{- with .Values.tolerations }}
|
|
||||||
tolerations:
|
|
||||||
{{ toYaml . | indent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
@ -1,14 +0,0 @@
|
|||||||
{{- if not .Values.mariadb.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
labels:
|
|
||||||
app: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
db-password: {{ .Values.externalDatabase.password | b64enc | quote }}
|
|
||||||
{{- end }}
|
|
||||||
@ -1,36 +0,0 @@
|
|||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
{{- range .Values.ingress.hosts }}
|
|
||||||
apiVersion: extensions/v1beta1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
name: "{{- printf "%s-%s" .name $.Release.Name | trunc 63 | trimSuffix "-" -}}"
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" $ }}
|
|
||||||
chart: "{{ $.Chart.Name }}-{{ $.Chart.Version }}"
|
|
||||||
release: "{{ $.Release.Name }}"
|
|
||||||
heritage: "{{ $.Release.Service }}"
|
|
||||||
annotations:
|
|
||||||
{{- if .tls }}
|
|
||||||
ingress.kubernetes.io/secure-backends: "true"
|
|
||||||
{{- end }}
|
|
||||||
{{- range $key, $value := .annotations }}
|
|
||||||
{{ $key }}: {{ $value | quote }}
|
|
||||||
{{- end }}
|
|
||||||
spec:
|
|
||||||
rules:
|
|
||||||
- host: {{ .name }}
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- path: {{ default "/" .path }}
|
|
||||||
backend:
|
|
||||||
serviceName: {{ template "fullname" $ }}
|
|
||||||
servicePort: 80
|
|
||||||
{{- if .tls }}
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- {{ .name }}
|
|
||||||
secretName: {{ .tlsSecret }}
|
|
||||||
{{- end }}
|
|
||||||
---
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
@ -1,24 +0,0 @@
|
|||||||
{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
apiVersion: v1
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- {{ .Values.persistence.accessMode | quote }}
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: {{ .Values.persistence.size | quote }}
|
|
||||||
{{- if .Values.persistence.storageClass }}
|
|
||||||
{{- if (eq "-" .Values.persistence.storageClass) }}
|
|
||||||
storageClassName: ""
|
|
||||||
{{- else }}
|
|
||||||
storageClassName: "{{ .Values.persistence.storageClass }}"
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
{{- end -}}
|
|
||||||
@ -1,17 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
{{ if .Values.wordpressPassword }}
|
|
||||||
wordpress-password: {{ default "" .Values.wordpressPassword | b64enc | quote }}
|
|
||||||
{{ else }}
|
|
||||||
wordpress-password: {{ randAlphaNum 10 | b64enc | quote }}
|
|
||||||
{{ end }}
|
|
||||||
smtp-password: {{ default "" .Values.smtpPassword | b64enc | quote }}
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
type: {{ .Values.serviceType }}
|
|
||||||
{{- if (or (eq .Values.serviceType "LoadBalancer") (eq .Values.serviceType "NodePort")) }}
|
|
||||||
externalTrafficPolicy: {{ .Values.serviceExternalTrafficPolicy | quote }}
|
|
||||||
{{- end }}
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
port: 80
|
|
||||||
targetPort: http
|
|
||||||
{{- if (and (eq .Values.serviceType "NodePort") (not (empty .Values.nodePorts.http)))}}
|
|
||||||
nodePort: {{ .Values.nodePorts.http }}
|
|
||||||
{{- end }}
|
|
||||||
- name: https
|
|
||||||
port: 443
|
|
||||||
targetPort: https
|
|
||||||
{{- if (and (eq .Values.serviceType "NodePort") (not (empty .Values.nodePorts.https)))}}
|
|
||||||
nodePort: {{ .Values.nodePorts.https }}
|
|
||||||
{{- end }}
|
|
||||||
selector:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Pod
|
|
||||||
metadata:
|
|
||||||
name: "{{ .Release.Name }}-credentials-test"
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": test-success
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: {{ .Release.Name }}-credentials-test
|
|
||||||
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
|
||||||
env:
|
|
||||||
- name: MARIADB_HOST
|
|
||||||
value: {{ template "mariadb.fullname" . }}
|
|
||||||
- name: MARIADB_PORT
|
|
||||||
value: "3306"
|
|
||||||
- name: WORDPRESS_DATABASE_NAME
|
|
||||||
value: {{ default "" .Values.mariadb.db.name | quote }}
|
|
||||||
- name: WORDPRESS_DATABASE_USER
|
|
||||||
value: {{ default "" .Values.mariadb.db.user | quote }}
|
|
||||||
- name: WORDPRESS_DATABASE_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "mariadb.fullname" . }}
|
|
||||||
key: mariadb-password
|
|
||||||
command: ["sh", "-c", "mysql --host=$MARIADB_HOST --port=$MARIADB_PORT --user=$WORDPRESS_DATABASE_USER --password=$WORDPRESS_DATABASE_PASSWORD"]
|
|
||||||
restartPolicy: Never
|
|
||||||
{{- end }}
|
|
||||||
@ -1,18 +0,0 @@
|
|||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
{{- range .Values.ingress.secrets }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ .name }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" $ }}
|
|
||||||
chart: "{{ $.Chart.Name }}-{{ $.Chart.Version }}"
|
|
||||||
release: "{{ $.Release.Name }}"
|
|
||||||
heritage: "{{ $.Release.Service }}"
|
|
||||||
type: kubernetes.io/tls
|
|
||||||
data:
|
|
||||||
tls.crt: {{ .certificate | b64enc }}
|
|
||||||
tls.key: {{ .key | b64enc }}
|
|
||||||
---
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
Binary file not shown.
@ -1,232 +1,3 @@
|
|||||||
# WordPress
|
# WordPress
|
||||||
|
|
||||||
[WordPress](https://wordpress.org/) is one of the most versatile open source content management systems on the market. A publishing platform for building blogs and websites.
|
This is a testing fork of the Wordpress chart. It is not operational.
|
||||||
|
|
||||||
## TL;DR;
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
## Introduction
|
|
||||||
|
|
||||||
This chart bootstraps a [WordPress](https://github.com/bitnami/bitnami-docker-wordpress) deployment on a [Kubernetes](http://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
|
|
||||||
|
|
||||||
It also packages the [Bitnami MariaDB chart](https://github.com/kubernetes/charts/tree/master/stable/mariadb) which is required for bootstrapping a MariaDB deployment for the database requirements of the WordPress application.
|
|
||||||
|
|
||||||
## Prerequisites
|
|
||||||
|
|
||||||
- Kubernetes 1.4+ with Beta APIs enabled
|
|
||||||
- PV provisioner support in the underlying infrastructure
|
|
||||||
|
|
||||||
## Installing the Chart
|
|
||||||
|
|
||||||
To install the chart with the release name `my-release`:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
The command deploys WordPress on the Kubernetes cluster in the default configuration. The [configuration](#configuration) section lists the parameters that can be configured during installation.
|
|
||||||
|
|
||||||
> **Tip**: List all releases using `helm list`
|
|
||||||
|
|
||||||
## Uninstalling the Chart
|
|
||||||
|
|
||||||
To uninstall/delete the `my-release` deployment:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm delete my-release
|
|
||||||
```
|
|
||||||
|
|
||||||
The command removes all the Kubernetes components associated with the chart and deletes the release.
|
|
||||||
|
|
||||||
## Configuration
|
|
||||||
|
|
||||||
The following table lists the configurable parameters of the WordPress chart and their default values.
|
|
||||||
|
|
||||||
| Parameter | Description | Default |
|
|
||||||
|----------------------------------|--------------------------------------------|---------------------------------------------------------|
|
|
||||||
| `image.registry` | WordPress image registry | `docker.io` |
|
|
||||||
| `image.repository` | WordPress image name | `bitnami/wordpress` |
|
|
||||||
| `image.tag` | WordPress image tag | `{VERSION}` |
|
|
||||||
| `image.pullPolicy` | Image pull policy | `Always` if `imageTag` is `latest`, else `IfNotPresent` |
|
|
||||||
| `image.pullSecrets` | Specify image pull secrets | `nil` |
|
|
||||||
| `wordpressUsername` | User of the application | `user` |
|
|
||||||
| `wordpressPassword` | Application password | _random 10 character long alphanumeric string_ |
|
|
||||||
| `wordpressEmail` | Admin email | `user@example.com` |
|
|
||||||
| `wordpressFirstName` | First name | `FirstName` |
|
|
||||||
| `wordpressLastName` | Last name | `LastName` |
|
|
||||||
| `wordpressBlogName` | Blog name | `User's Blog!` |
|
|
||||||
| `wordpressTablePrefix` | Table prefix | `wp_` |
|
|
||||||
| `allowEmptyPassword` | Allow DB blank passwords | `yes` |
|
|
||||||
| `smtpHost` | SMTP host | `nil` |
|
|
||||||
| `smtpPort` | SMTP port | `nil` |
|
|
||||||
| `smtpUser` | SMTP user | `nil` |
|
|
||||||
| `smtpPassword` | SMTP password | `nil` |
|
|
||||||
| `smtpUsername` | User name for SMTP emails | `nil` |
|
|
||||||
| `smtpProtocol` | SMTP protocol [`tls`, `ssl`] | `nil` |
|
|
||||||
| `replicaCount` | Number of WordPress Pods to run | `1` |
|
|
||||||
| `mariadb.enabled` | Deploy MariaDB container(s) | `true` |
|
|
||||||
| `mariadb.rootUser.password` | MariaDB admin password | `nil` |
|
|
||||||
| `mariadb.db.name` | Database name to create | `bitnami_wordpress` |
|
|
||||||
| `mariadb.db.user` | Database user to create | `bn_wordpress` |
|
|
||||||
| `mariadb.db.password` | Password for the database | _random 10 character long alphanumeric string_ |
|
|
||||||
| `externalDatabase.host` | Host of the external database | `localhost` |
|
|
||||||
| `externalDatabase.user` | Existing username in the external db | `bn_wordpress` |
|
|
||||||
| `externalDatabase.password` | Password for the above username | `nil` |
|
|
||||||
| `externalDatabase.database` | Name of the existing database | `bitnami_wordpress` |
|
|
||||||
| `externalDatabase.port` | Database port number | `3306` |
|
|
||||||
| `serviceType` | Kubernetes Service type | `LoadBalancer` |
|
|
||||||
| `serviceExternalTrafficPolicy` | Enable client source IP preservation | `Cluster` |
|
|
||||||
| `nodePorts.http` | Kubernetes http node port | `""` |
|
|
||||||
| `nodePorts.https` | Kubernetes https node port | `""` |
|
|
||||||
| `healthcheckHttps` | Use https for liveliness and readiness | `false` |
|
|
||||||
| `ingress.enabled` | Enable ingress controller resource | `false` |
|
|
||||||
| `ingress.hosts[0].name` | Hostname to your WordPress installation | `wordpress.local` |
|
|
||||||
| `ingress.hosts[0].path` | Path within the url structure | `/` |
|
|
||||||
| `ingress.hosts[0].tls` | Utilize TLS backend in ingress | `false` |
|
|
||||||
| `ingress.hosts[0].tlsSecret` | TLS Secret (certificates) | `wordpress.local-tls-secret` |
|
|
||||||
| `ingress.hosts[0].annotations` | Annotations for this host's ingress record | `[]` |
|
|
||||||
| `ingress.secrets[0].name` | TLS Secret Name | `nil` |
|
|
||||||
| `ingress.secrets[0].certificate` | TLS Secret Certificate | `nil` |
|
|
||||||
| `ingress.secrets[0].key` | TLS Secret Key | `nil` |
|
|
||||||
| `persistence.enabled` | Enable persistence using PVC | `true` |
|
|
||||||
| `persistence.existingClaim` | Enable persistence using an existing PVC | `nil` |
|
|
||||||
| `persistence.storageClass` | PVC Storage Class | `nil` (uses alpha storage class annotation) |
|
|
||||||
| `persistence.accessMode` | PVC Access Mode | `ReadWriteOnce` |
|
|
||||||
| `persistence.size` | PVC Storage Request | `10Gi` |
|
|
||||||
| `nodeSelector` | Node labels for pod assignment | `{}` |
|
|
||||||
| `tolerations` | List of node taints to tolerate | `[]` |
|
|
||||||
| `affinity` | Map of node/pod affinities | `{}` |
|
|
||||||
|
|
||||||
The above parameters map to the env variables defined in [bitnami/wordpress](http://github.com/bitnami/bitnami-docker-wordpress). For more information please refer to the [bitnami/wordpress](http://github.com/bitnami/bitnami-docker-wordpress) image documentation.
|
|
||||||
|
|
||||||
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release \
|
|
||||||
--set wordpressUsername=admin,wordpressPassword=password,mariadb.mariadbRootPassword=secretpassword \
|
|
||||||
stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
The above command sets the WordPress administrator account username and password to `admin` and `password` respectively. Additionally, it sets the MariaDB `root` user password to `secretpassword`.
|
|
||||||
|
|
||||||
Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release -f values.yaml stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
> **Tip**: You can use the default [values.yaml](values.yaml)
|
|
||||||
|
|
||||||
## Production and horizontal scaling
|
|
||||||
|
|
||||||
The following repo contains the recommended production settings for wordpress capture in an alternative [values file](values-production.yaml). Please read carefully the comments in the values-production.yaml file to set up your environment appropriately.
|
|
||||||
|
|
||||||
To horizontally scale this chart, first download the [values-production.yaml](values-production.yaml) file to your local folder, then:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release -f ./values-production.yaml stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
Note that [values-production.yaml](values-production.yaml) includes a replicaCount of 3, so there will be 3 WordPress pods. As a result, to use the /admin portal and to ensure you can scale wordpress you need to provide a ReadWriteMany PVC, if you don't have a provisioner for this type of storage, we recommend that you install the nfs provisioner and map it to a RWO volume.
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install stable/nfs-server-provisioner --set persistence.enabled=true,persistence.size=10Gi
|
|
||||||
$ helm install --name my-release -f values-production.yaml --set persistence.storageClass=nfs stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
## Persistence
|
|
||||||
|
|
||||||
The [Bitnami WordPress](https://github.com/bitnami/bitnami-docker-wordpress) image stores the WordPress data and configurations at the `/bitnami` path of the container.
|
|
||||||
|
|
||||||
Persistent Volume Claims are used to keep the data across deployments. This is known to work in GCE, AWS, and minikube.
|
|
||||||
See the [Configuration](#configuration) section to configure the PVC or to disable persistence.
|
|
||||||
|
|
||||||
## Using an external database
|
|
||||||
|
|
||||||
Sometimes you may want to have Wordpress connect to an external database rather than installing one inside your cluster, e.g. to use a managed database service, or use run a single database server for all your applications. To do this, the chart allows you to specify credentials for an external database under the [`externalDatabase` parameter](#configuration). You should also disable the MariaDB installation with the `mariadb.enabled` option. For example:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install stable/wordpress \
|
|
||||||
--set mariadb.enabled=false,externalDatabase.host=myexternalhost,externalDatabase.user=myuser,externalDatabase.password=mypassword,externalDatabase.database=mydatabase,externalDatabase.port=3306
|
|
||||||
```
|
|
||||||
|
|
||||||
Note also if you disable MariaDB per above you MUST supply values for the `externalDatabase` connection.
|
|
||||||
|
|
||||||
## Ingress
|
|
||||||
|
|
||||||
This chart provides support for ingress resources. If you have an
|
|
||||||
ingress controller installed on your cluster, such as [nginx-ingress](https://kubeapps.com/charts/stable/nginx-ingress)
|
|
||||||
or [traefik](https://kubeapps.com/charts/stable/traefik) you can utilize
|
|
||||||
the ingress controller to serve your WordPress application.
|
|
||||||
|
|
||||||
To enable ingress integration, please set `ingress.enabled` to `true`
|
|
||||||
|
|
||||||
### Hosts
|
|
||||||
|
|
||||||
Most likely you will only want to have one hostname that maps to this
|
|
||||||
WordPress installation, however, it is possible to have more than one
|
|
||||||
host. To facilitate this, the `ingress.hosts` object is an array.
|
|
||||||
|
|
||||||
For each item, please indicate a `name`, `tls`, `tlsSecret`, and any
|
|
||||||
`annotations` that you may want the ingress controller to know about.
|
|
||||||
|
|
||||||
Indicating TLS will cause WordPress to generate HTTPS URLs, and
|
|
||||||
WordPress will be connected to at port 443. The actual secret that
|
|
||||||
`tlsSecret` references do not have to be generated by this chart.
|
|
||||||
However, please note that if TLS is enabled, the ingress record will not
|
|
||||||
work until this secret exists.
|
|
||||||
|
|
||||||
For annotations, please see [this document](https://github.com/kubernetes/ingress-nginx/blob/master/docs/annotations.md).
|
|
||||||
Not all annotations are supported by all ingress controllers, but this
|
|
||||||
document does a good job of indicating which annotation is supported by
|
|
||||||
many popular ingress controllers.
|
|
||||||
|
|
||||||
### TLS Secrets
|
|
||||||
|
|
||||||
This chart will facilitate the creation of TLS secrets for use with the
|
|
||||||
ingress controller, however, this is not required. There are three
|
|
||||||
common use cases:
|
|
||||||
|
|
||||||
* helm generates/manages certificate secrets
|
|
||||||
* user generates/manages certificates separately
|
|
||||||
* an additional tool (like [kube-lego](https://kubeapps.com/charts/stable/kube-lego))
|
|
||||||
manages the secrets for the application
|
|
||||||
|
|
||||||
In the first two cases, one will need a certificate and a key. We would
|
|
||||||
expect them to look like this:
|
|
||||||
|
|
||||||
* certificate files should look like (and there can be more than one
|
|
||||||
certificate if there is a certificate chain)
|
|
||||||
|
|
||||||
```
|
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIID6TCCAtGgAwIBAgIJAIaCwivkeB5EMA0GCSqGSIb3DQEBCwUAMFYxCzAJBgNV
|
|
||||||
...
|
|
||||||
jScrvkiBO65F46KioCL9h5tDvomdU1aqpI/CBzhvZn1c0ZTf87tGQR8NK7v7
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
```
|
|
||||||
* keys should look like:
|
|
||||||
```
|
|
||||||
-----BEGIN RSA PRIVATE KEY-----
|
|
||||||
MIIEogIBAAKCAQEAvLYcyu8f3skuRyUgeeNpeDvYBCDcgq+LsWap6zbX5f8oLqp4
|
|
||||||
...
|
|
||||||
wrj2wDbCDCFmfqnSJ+dKI3vFLlEz44sAV8jX/kd4Y6ZTQhlLbYc=
|
|
||||||
-----END RSA PRIVATE KEY-----
|
|
||||||
````
|
|
||||||
|
|
||||||
If you are going to use Helm to manage the certificates, please copy
|
|
||||||
these values into the `certificate` and `key` values for a given
|
|
||||||
`ingress.secrets` entry.
|
|
||||||
|
|
||||||
If you are going are going to manage TLS secrets outside of Helm, please
|
|
||||||
know that you can create a TLS secret by doing the following:
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl create secret tls wordpress.local-tls --key /path/to/key.key --cert /path/to/cert.crt
|
|
||||||
```
|
|
||||||
|
|
||||||
Please see [this example](https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx/examples/tls)
|
|
||||||
for more information.
|
|
||||||
|
|||||||
@ -1,38 +1 @@
|
|||||||
1. Get the WordPress URL:
|
Placeholder
|
||||||
|
|
||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
|
|
||||||
You should be able to access your new WordPress installation through
|
|
||||||
|
|
||||||
{{- range .Values.ingress.hosts }}
|
|
||||||
{{ if .tls }}https{{ else }}http{{ end }}://{{ .name }}/admin
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
{{- else if contains "LoadBalancer" .Values.serviceType }}
|
|
||||||
|
|
||||||
NOTE: It may take a few minutes for the LoadBalancer IP to be available.
|
|
||||||
Watch the status with: 'kubectl get svc --namespace {{ .Release.Namespace }} -w {{ template "fullname" . }}'
|
|
||||||
|
|
||||||
export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
|
|
||||||
echo "WordPress URL: http://$SERVICE_IP/"
|
|
||||||
echo "WordPress Admin URL: http://$SERVICE_IP/admin"
|
|
||||||
|
|
||||||
{{- else if contains "ClusterIP" .Values.serviceType }}
|
|
||||||
|
|
||||||
echo "WordPress URL: http://127.0.0.1:8080/"
|
|
||||||
echo "WordPress Admin URL: http://127.0.0.1:8080/admin"
|
|
||||||
kubectl port-forward --namespace {{ .Release.Namespace }} svc/{{ template "fullname" . }} 8080:80
|
|
||||||
|
|
||||||
{{- else if contains "NodePort" .Values.serviceType }}
|
|
||||||
|
|
||||||
export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "fullname" . }})
|
|
||||||
export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
|
||||||
echo "WordPress URL: http://$NODE_IP:$NODE_PORT/"
|
|
||||||
echo "WordPress Admin URL: http://$NODE_IP:$NODE_PORT/admin"
|
|
||||||
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
2. Login with the following credentials to see your blog
|
|
||||||
|
|
||||||
echo Username: {{ .Values.wordpressUsername }}
|
|
||||||
echo Password: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.wordpress-password}" | base64 --decode)
|
|
||||||
|
|||||||
@ -1,24 +0,0 @@
|
|||||||
{{/* vim: set filetype=mustache: */}}
|
|
||||||
{{/*
|
|
||||||
Expand the name of the chart.
|
|
||||||
*/}}
|
|
||||||
{{- define "name" -}}
|
|
||||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create a default fully qualified app name.
|
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
|
||||||
*/}}
|
|
||||||
{{- define "fullname" -}}
|
|
||||||
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
|
||||||
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create a default fully qualified app name.
|
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
|
||||||
*/}}
|
|
||||||
{{- define "mariadb.fullname" -}}
|
|
||||||
{{- printf "%s-%s" .Release.Name "mariadb" | trunc 63 | trimSuffix "-" -}}
|
|
||||||
{{- end -}}
|
|
||||||
@ -1,155 +0,0 @@
|
|||||||
apiVersion: extensions/v1beta1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
replicas: {{ .Values.replicaCount }}
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
spec:
|
|
||||||
{{- if .Values.image.pullSecrets }}
|
|
||||||
imagePullSecrets:
|
|
||||||
{{- range .Values.image.pullSecrets }}
|
|
||||||
- name: {{ . }}
|
|
||||||
{{- end}}
|
|
||||||
{{- end }}
|
|
||||||
containers:
|
|
||||||
- name: {{ template "fullname" . }}
|
|
||||||
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
|
||||||
env:
|
|
||||||
- name: ALLOW_EMPTY_PASSWORD
|
|
||||||
value: {{ .Values.allowEmptyPassword | quote }}
|
|
||||||
- name: MARIADB_HOST
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ template "mariadb.fullname" . }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.host | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: MARIADB_PORT_NUMBER
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: "3306"
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.port | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_NAME
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ .Values.mariadb.db.name | quote }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.database | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_USER
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ .Values.mariadb.db.user | quote }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.user | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
name: {{ template "mariadb.fullname" . }}
|
|
||||||
key: mariadb-password
|
|
||||||
{{- else }}
|
|
||||||
name: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
key: db-password
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_USERNAME
|
|
||||||
value: {{ .Values.wordpressUsername | quote }}
|
|
||||||
- name: WORDPRESS_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
key: wordpress-password
|
|
||||||
- name: WORDPRESS_EMAIL
|
|
||||||
value: {{ .Values.wordpressEmail | quote }}
|
|
||||||
- name: WORDPRESS_FIRST_NAME
|
|
||||||
value: {{ .Values.wordpressFirstName | quote }}
|
|
||||||
- name: WORDPRESS_LAST_NAME
|
|
||||||
value: {{ .Values.wordpressLastName | quote }}
|
|
||||||
- name: WORDPRESS_BLOG_NAME
|
|
||||||
value: {{ .Values.wordpressBlogName | quote }}
|
|
||||||
- name: WORDPRESS_TABLE_PREFIX
|
|
||||||
value: {{ .Values.wordpressTablePrefix | quote }}
|
|
||||||
- name: SMTP_HOST
|
|
||||||
value: {{ .Values.smtpHost | quote }}
|
|
||||||
- name: SMTP_PORT
|
|
||||||
value: {{ .Values.smtpPort | quote }}
|
|
||||||
- name: SMTP_USER
|
|
||||||
value: {{ .Values.smtpUser | quote }}
|
|
||||||
- name: SMTP_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
key: smtp-password
|
|
||||||
- name: SMTP_USERNAME
|
|
||||||
value: {{ .Values.smtpUsername | quote }}
|
|
||||||
- name: SMTP_PROTOCOL
|
|
||||||
value: {{ .Values.smtpProtocol | quote }}
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
containerPort: 80
|
|
||||||
- name: https
|
|
||||||
containerPort: 443
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /wp-login.php
|
|
||||||
{{- if not .Values.healthcheckHttps }}
|
|
||||||
port: http
|
|
||||||
{{- else }}
|
|
||||||
port: https
|
|
||||||
scheme: HTTPS
|
|
||||||
{{- end }}
|
|
||||||
{{ toYaml .Values.livenessProbe | indent 10 }}
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /wp-login.php
|
|
||||||
{{- if not .Values.healthcheckHttps }}
|
|
||||||
port: http
|
|
||||||
{{- else }}
|
|
||||||
port: https
|
|
||||||
scheme: HTTPS
|
|
||||||
{{- end }}
|
|
||||||
{{ toYaml .Values.readinessProbe | indent 10 }}
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /bitnami/apache
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: apache
|
|
||||||
- mountPath: /bitnami/wordpress
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: wordpress
|
|
||||||
- mountPath: /bitnami/php
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: php
|
|
||||||
resources:
|
|
||||||
{{ toYaml .Values.resources | indent 10 }}
|
|
||||||
volumes:
|
|
||||||
- name: wordpress-data
|
|
||||||
{{- if .Values.persistence.enabled }}
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: {{ .Values.persistence.existingClaim | default (include "fullname" .) }}
|
|
||||||
{{- else }}
|
|
||||||
emptyDir: {}
|
|
||||||
{{ end }}
|
|
||||||
{{- if .Values.nodeSelector }}
|
|
||||||
nodeSelector:
|
|
||||||
{{ toYaml .Values.nodeSelector | indent 8 }}
|
|
||||||
{{- end -}}
|
|
||||||
{{- with .Values.affinity }}
|
|
||||||
affinity:
|
|
||||||
{{ toYaml . | indent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
{{- with .Values.tolerations }}
|
|
||||||
tolerations:
|
|
||||||
{{ toYaml . | indent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
@ -1,14 +0,0 @@
|
|||||||
{{- if not .Values.mariadb.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
labels:
|
|
||||||
app: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
db-password: {{ .Values.externalDatabase.password | b64enc | quote }}
|
|
||||||
{{- end }}
|
|
||||||
@ -1,36 +0,0 @@
|
|||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
{{- range .Values.ingress.hosts }}
|
|
||||||
apiVersion: extensions/v1beta1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
name: "{{- printf "%s-%s" .name $.Release.Name | trunc 63 | trimSuffix "-" -}}"
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" $ }}
|
|
||||||
chart: "{{ $.Chart.Name }}-{{ $.Chart.Version }}"
|
|
||||||
release: "{{ $.Release.Name }}"
|
|
||||||
heritage: "{{ $.Release.Service }}"
|
|
||||||
annotations:
|
|
||||||
{{- if .tls }}
|
|
||||||
ingress.kubernetes.io/secure-backends: "true"
|
|
||||||
{{- end }}
|
|
||||||
{{- range $key, $value := .annotations }}
|
|
||||||
{{ $key }}: {{ $value | quote }}
|
|
||||||
{{- end }}
|
|
||||||
spec:
|
|
||||||
rules:
|
|
||||||
- host: {{ .name }}
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- path: {{ default "/" .path }}
|
|
||||||
backend:
|
|
||||||
serviceName: {{ template "fullname" $ }}
|
|
||||||
servicePort: 80
|
|
||||||
{{- if .tls }}
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- {{ .name }}
|
|
||||||
secretName: {{ .tlsSecret }}
|
|
||||||
{{- end }}
|
|
||||||
---
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
@ -1,24 +0,0 @@
|
|||||||
{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
apiVersion: v1
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- {{ .Values.persistence.accessMode | quote }}
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: {{ .Values.persistence.size | quote }}
|
|
||||||
{{- if .Values.persistence.storageClass }}
|
|
||||||
{{- if (eq "-" .Values.persistence.storageClass) }}
|
|
||||||
storageClassName: ""
|
|
||||||
{{- else }}
|
|
||||||
storageClassName: "{{ .Values.persistence.storageClass }}"
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
{{- end -}}
|
|
||||||
@ -1,17 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
{{ if .Values.wordpressPassword }}
|
|
||||||
wordpress-password: {{ default "" .Values.wordpressPassword | b64enc | quote }}
|
|
||||||
{{ else }}
|
|
||||||
wordpress-password: {{ randAlphaNum 10 | b64enc | quote }}
|
|
||||||
{{ end }}
|
|
||||||
smtp-password: {{ default "" .Values.smtpPassword | b64enc | quote }}
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
type: {{ .Values.serviceType }}
|
|
||||||
{{- if (or (eq .Values.serviceType "LoadBalancer") (eq .Values.serviceType "NodePort")) }}
|
|
||||||
externalTrafficPolicy: {{ .Values.serviceExternalTrafficPolicy | quote }}
|
|
||||||
{{- end }}
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
port: 80
|
|
||||||
targetPort: http
|
|
||||||
{{- if (and (eq .Values.serviceType "NodePort") (not (empty .Values.nodePorts.http)))}}
|
|
||||||
nodePort: {{ .Values.nodePorts.http }}
|
|
||||||
{{- end }}
|
|
||||||
- name: https
|
|
||||||
port: 443
|
|
||||||
targetPort: https
|
|
||||||
{{- if (and (eq .Values.serviceType "NodePort") (not (empty .Values.nodePorts.https)))}}
|
|
||||||
nodePort: {{ .Values.nodePorts.https }}
|
|
||||||
{{- end }}
|
|
||||||
selector:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Pod
|
|
||||||
metadata:
|
|
||||||
name: "{{ .Release.Name }}-credentials-test"
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": test-success
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: {{ .Release.Name }}-credentials-test
|
|
||||||
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
|
||||||
env:
|
|
||||||
- name: MARIADB_HOST
|
|
||||||
value: {{ template "mariadb.fullname" . }}
|
|
||||||
- name: MARIADB_PORT
|
|
||||||
value: "3306"
|
|
||||||
- name: WORDPRESS_DATABASE_NAME
|
|
||||||
value: {{ default "" .Values.mariadb.db.name | quote }}
|
|
||||||
- name: WORDPRESS_DATABASE_USER
|
|
||||||
value: {{ default "" .Values.mariadb.db.user | quote }}
|
|
||||||
- name: WORDPRESS_DATABASE_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "mariadb.fullname" . }}
|
|
||||||
key: mariadb-password
|
|
||||||
command: ["sh", "-c", "mysql --host=$MARIADB_HOST --port=$MARIADB_PORT --user=$WORDPRESS_DATABASE_USER --password=$WORDPRESS_DATABASE_PASSWORD"]
|
|
||||||
restartPolicy: Never
|
|
||||||
{{- end }}
|
|
||||||
@ -1,18 +0,0 @@
|
|||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
{{- range .Values.ingress.secrets }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ .name }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" $ }}
|
|
||||||
chart: "{{ $.Chart.Name }}-{{ $.Chart.Version }}"
|
|
||||||
release: "{{ $.Release.Name }}"
|
|
||||||
heritage: "{{ $.Release.Service }}"
|
|
||||||
type: kubernetes.io/tls
|
|
||||||
data:
|
|
||||||
tls.crt: {{ .certificate | b64enc }}
|
|
||||||
tls.key: {{ .key | b64enc }}
|
|
||||||
---
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
Binary file not shown.
@ -1,232 +1,3 @@
|
|||||||
# WordPress
|
# WordPress
|
||||||
|
|
||||||
[WordPress](https://wordpress.org/) is one of the most versatile open source content management systems on the market. A publishing platform for building blogs and websites.
|
This is a testing mock, and is not operational.
|
||||||
|
|
||||||
## TL;DR;
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
## Introduction
|
|
||||||
|
|
||||||
This chart bootstraps a [WordPress](https://github.com/bitnami/bitnami-docker-wordpress) deployment on a [Kubernetes](http://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
|
|
||||||
|
|
||||||
It also packages the [Bitnami MariaDB chart](https://github.com/kubernetes/charts/tree/master/stable/mariadb) which is required for bootstrapping a MariaDB deployment for the database requirements of the WordPress application.
|
|
||||||
|
|
||||||
## Prerequisites
|
|
||||||
|
|
||||||
- Kubernetes 1.4+ with Beta APIs enabled
|
|
||||||
- PV provisioner support in the underlying infrastructure
|
|
||||||
|
|
||||||
## Installing the Chart
|
|
||||||
|
|
||||||
To install the chart with the release name `my-release`:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
The command deploys WordPress on the Kubernetes cluster in the default configuration. The [configuration](#configuration) section lists the parameters that can be configured during installation.
|
|
||||||
|
|
||||||
> **Tip**: List all releases using `helm list`
|
|
||||||
|
|
||||||
## Uninstalling the Chart
|
|
||||||
|
|
||||||
To uninstall/delete the `my-release` deployment:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm delete my-release
|
|
||||||
```
|
|
||||||
|
|
||||||
The command removes all the Kubernetes components associated with the chart and deletes the release.
|
|
||||||
|
|
||||||
## Configuration
|
|
||||||
|
|
||||||
The following table lists the configurable parameters of the WordPress chart and their default values.
|
|
||||||
|
|
||||||
| Parameter | Description | Default |
|
|
||||||
|----------------------------------|--------------------------------------------|---------------------------------------------------------|
|
|
||||||
| `image.registry` | WordPress image registry | `docker.io` |
|
|
||||||
| `image.repository` | WordPress image name | `bitnami/wordpress` |
|
|
||||||
| `image.tag` | WordPress image tag | `{VERSION}` |
|
|
||||||
| `image.pullPolicy` | Image pull policy | `Always` if `imageTag` is `latest`, else `IfNotPresent` |
|
|
||||||
| `image.pullSecrets` | Specify image pull secrets | `nil` |
|
|
||||||
| `wordpressUsername` | User of the application | `user` |
|
|
||||||
| `wordpressPassword` | Application password | _random 10 character long alphanumeric string_ |
|
|
||||||
| `wordpressEmail` | Admin email | `user@example.com` |
|
|
||||||
| `wordpressFirstName` | First name | `FirstName` |
|
|
||||||
| `wordpressLastName` | Last name | `LastName` |
|
|
||||||
| `wordpressBlogName` | Blog name | `User's Blog!` |
|
|
||||||
| `wordpressTablePrefix` | Table prefix | `wp_` |
|
|
||||||
| `allowEmptyPassword` | Allow DB blank passwords | `yes` |
|
|
||||||
| `smtpHost` | SMTP host | `nil` |
|
|
||||||
| `smtpPort` | SMTP port | `nil` |
|
|
||||||
| `smtpUser` | SMTP user | `nil` |
|
|
||||||
| `smtpPassword` | SMTP password | `nil` |
|
|
||||||
| `smtpUsername` | User name for SMTP emails | `nil` |
|
|
||||||
| `smtpProtocol` | SMTP protocol [`tls`, `ssl`] | `nil` |
|
|
||||||
| `replicaCount` | Number of WordPress Pods to run | `1` |
|
|
||||||
| `mariadb.enabled` | Deploy MariaDB container(s) | `true` |
|
|
||||||
| `mariadb.rootUser.password` | MariaDB admin password | `nil` |
|
|
||||||
| `mariadb.db.name` | Database name to create | `bitnami_wordpress` |
|
|
||||||
| `mariadb.db.user` | Database user to create | `bn_wordpress` |
|
|
||||||
| `mariadb.db.password` | Password for the database | _random 10 character long alphanumeric string_ |
|
|
||||||
| `externalDatabase.host` | Host of the external database | `localhost` |
|
|
||||||
| `externalDatabase.user` | Existing username in the external db | `bn_wordpress` |
|
|
||||||
| `externalDatabase.password` | Password for the above username | `nil` |
|
|
||||||
| `externalDatabase.database` | Name of the existing database | `bitnami_wordpress` |
|
|
||||||
| `externalDatabase.port` | Database port number | `3306` |
|
|
||||||
| `serviceType` | Kubernetes Service type | `LoadBalancer` |
|
|
||||||
| `serviceExternalTrafficPolicy` | Enable client source IP preservation | `Cluster` |
|
|
||||||
| `nodePorts.http` | Kubernetes http node port | `""` |
|
|
||||||
| `nodePorts.https` | Kubernetes https node port | `""` |
|
|
||||||
| `healthcheckHttps` | Use https for liveliness and readiness | `false` |
|
|
||||||
| `ingress.enabled` | Enable ingress controller resource | `false` |
|
|
||||||
| `ingress.hosts[0].name` | Hostname to your WordPress installation | `wordpress.local` |
|
|
||||||
| `ingress.hosts[0].path` | Path within the url structure | `/` |
|
|
||||||
| `ingress.hosts[0].tls` | Utilize TLS backend in ingress | `false` |
|
|
||||||
| `ingress.hosts[0].tlsSecret` | TLS Secret (certificates) | `wordpress.local-tls-secret` |
|
|
||||||
| `ingress.hosts[0].annotations` | Annotations for this host's ingress record | `[]` |
|
|
||||||
| `ingress.secrets[0].name` | TLS Secret Name | `nil` |
|
|
||||||
| `ingress.secrets[0].certificate` | TLS Secret Certificate | `nil` |
|
|
||||||
| `ingress.secrets[0].key` | TLS Secret Key | `nil` |
|
|
||||||
| `persistence.enabled` | Enable persistence using PVC | `true` |
|
|
||||||
| `persistence.existingClaim` | Enable persistence using an existing PVC | `nil` |
|
|
||||||
| `persistence.storageClass` | PVC Storage Class | `nil` (uses alpha storage class annotation) |
|
|
||||||
| `persistence.accessMode` | PVC Access Mode | `ReadWriteOnce` |
|
|
||||||
| `persistence.size` | PVC Storage Request | `10Gi` |
|
|
||||||
| `nodeSelector` | Node labels for pod assignment | `{}` |
|
|
||||||
| `tolerations` | List of node taints to tolerate | `[]` |
|
|
||||||
| `affinity` | Map of node/pod affinities | `{}` |
|
|
||||||
|
|
||||||
The above parameters map to the env variables defined in [bitnami/wordpress](http://github.com/bitnami/bitnami-docker-wordpress). For more information please refer to the [bitnami/wordpress](http://github.com/bitnami/bitnami-docker-wordpress) image documentation.
|
|
||||||
|
|
||||||
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release \
|
|
||||||
--set wordpressUsername=admin,wordpressPassword=password,mariadb.mariadbRootPassword=secretpassword \
|
|
||||||
stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
The above command sets the WordPress administrator account username and password to `admin` and `password` respectively. Additionally, it sets the MariaDB `root` user password to `secretpassword`.
|
|
||||||
|
|
||||||
Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release -f values.yaml stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
> **Tip**: You can use the default [values.yaml](values.yaml)
|
|
||||||
|
|
||||||
## Production and horizontal scaling
|
|
||||||
|
|
||||||
The following repo contains the recommended production settings for wordpress capture in an alternative [values file](values-production.yaml). Please read carefully the comments in the values-production.yaml file to set up your environment appropriately.
|
|
||||||
|
|
||||||
To horizontally scale this chart, first download the [values-production.yaml](values-production.yaml) file to your local folder, then:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install --name my-release -f ./values-production.yaml stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
Note that [values-production.yaml](values-production.yaml) includes a replicaCount of 3, so there will be 3 WordPress pods. As a result, to use the /admin portal and to ensure you can scale wordpress you need to provide a ReadWriteMany PVC, if you don't have a provisioner for this type of storage, we recommend that you install the nfs provisioner and map it to a RWO volume.
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install stable/nfs-server-provisioner --set persistence.enabled=true,persistence.size=10Gi
|
|
||||||
$ helm install --name my-release -f values-production.yaml --set persistence.storageClass=nfs stable/wordpress
|
|
||||||
```
|
|
||||||
|
|
||||||
## Persistence
|
|
||||||
|
|
||||||
The [Bitnami WordPress](https://github.com/bitnami/bitnami-docker-wordpress) image stores the WordPress data and configurations at the `/bitnami` path of the container.
|
|
||||||
|
|
||||||
Persistent Volume Claims are used to keep the data across deployments. This is known to work in GCE, AWS, and minikube.
|
|
||||||
See the [Configuration](#configuration) section to configure the PVC or to disable persistence.
|
|
||||||
|
|
||||||
## Using an external database
|
|
||||||
|
|
||||||
Sometimes you may want to have Wordpress connect to an external database rather than installing one inside your cluster, e.g. to use a managed database service, or use run a single database server for all your applications. To do this, the chart allows you to specify credentials for an external database under the [`externalDatabase` parameter](#configuration). You should also disable the MariaDB installation with the `mariadb.enabled` option. For example:
|
|
||||||
|
|
||||||
```console
|
|
||||||
$ helm install stable/wordpress \
|
|
||||||
--set mariadb.enabled=false,externalDatabase.host=myexternalhost,externalDatabase.user=myuser,externalDatabase.password=mypassword,externalDatabase.database=mydatabase,externalDatabase.port=3306
|
|
||||||
```
|
|
||||||
|
|
||||||
Note also if you disable MariaDB per above you MUST supply values for the `externalDatabase` connection.
|
|
||||||
|
|
||||||
## Ingress
|
|
||||||
|
|
||||||
This chart provides support for ingress resources. If you have an
|
|
||||||
ingress controller installed on your cluster, such as [nginx-ingress](https://kubeapps.com/charts/stable/nginx-ingress)
|
|
||||||
or [traefik](https://kubeapps.com/charts/stable/traefik) you can utilize
|
|
||||||
the ingress controller to serve your WordPress application.
|
|
||||||
|
|
||||||
To enable ingress integration, please set `ingress.enabled` to `true`
|
|
||||||
|
|
||||||
### Hosts
|
|
||||||
|
|
||||||
Most likely you will only want to have one hostname that maps to this
|
|
||||||
WordPress installation, however, it is possible to have more than one
|
|
||||||
host. To facilitate this, the `ingress.hosts` object is an array.
|
|
||||||
|
|
||||||
For each item, please indicate a `name`, `tls`, `tlsSecret`, and any
|
|
||||||
`annotations` that you may want the ingress controller to know about.
|
|
||||||
|
|
||||||
Indicating TLS will cause WordPress to generate HTTPS URLs, and
|
|
||||||
WordPress will be connected to at port 443. The actual secret that
|
|
||||||
`tlsSecret` references do not have to be generated by this chart.
|
|
||||||
However, please note that if TLS is enabled, the ingress record will not
|
|
||||||
work until this secret exists.
|
|
||||||
|
|
||||||
For annotations, please see [this document](https://github.com/kubernetes/ingress-nginx/blob/master/docs/annotations.md).
|
|
||||||
Not all annotations are supported by all ingress controllers, but this
|
|
||||||
document does a good job of indicating which annotation is supported by
|
|
||||||
many popular ingress controllers.
|
|
||||||
|
|
||||||
### TLS Secrets
|
|
||||||
|
|
||||||
This chart will facilitate the creation of TLS secrets for use with the
|
|
||||||
ingress controller, however, this is not required. There are three
|
|
||||||
common use cases:
|
|
||||||
|
|
||||||
* helm generates/manages certificate secrets
|
|
||||||
* user generates/manages certificates separately
|
|
||||||
* an additional tool (like [kube-lego](https://kubeapps.com/charts/stable/kube-lego))
|
|
||||||
manages the secrets for the application
|
|
||||||
|
|
||||||
In the first two cases, one will need a certificate and a key. We would
|
|
||||||
expect them to look like this:
|
|
||||||
|
|
||||||
* certificate files should look like (and there can be more than one
|
|
||||||
certificate if there is a certificate chain)
|
|
||||||
|
|
||||||
```
|
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIID6TCCAtGgAwIBAgIJAIaCwivkeB5EMA0GCSqGSIb3DQEBCwUAMFYxCzAJBgNV
|
|
||||||
...
|
|
||||||
jScrvkiBO65F46KioCL9h5tDvomdU1aqpI/CBzhvZn1c0ZTf87tGQR8NK7v7
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
```
|
|
||||||
* keys should look like:
|
|
||||||
```
|
|
||||||
-----BEGIN RSA PRIVATE KEY-----
|
|
||||||
MIIEogIBAAKCAQEAvLYcyu8f3skuRyUgeeNpeDvYBCDcgq+LsWap6zbX5f8oLqp4
|
|
||||||
...
|
|
||||||
wrj2wDbCDCFmfqnSJ+dKI3vFLlEz44sAV8jX/kd4Y6ZTQhlLbYc=
|
|
||||||
-----END RSA PRIVATE KEY-----
|
|
||||||
````
|
|
||||||
|
|
||||||
If you are going to use Helm to manage the certificates, please copy
|
|
||||||
these values into the `certificate` and `key` values for a given
|
|
||||||
`ingress.secrets` entry.
|
|
||||||
|
|
||||||
If you are going are going to manage TLS secrets outside of Helm, please
|
|
||||||
know that you can create a TLS secret by doing the following:
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl create secret tls wordpress.local-tls --key /path/to/key.key --cert /path/to/cert.crt
|
|
||||||
```
|
|
||||||
|
|
||||||
Please see [this example](https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx/examples/tls)
|
|
||||||
for more information.
|
|
||||||
|
|||||||
@ -1,38 +1 @@
|
|||||||
1. Get the WordPress URL:
|
Placeholder.
|
||||||
|
|
||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
|
|
||||||
You should be able to access your new WordPress installation through
|
|
||||||
|
|
||||||
{{- range .Values.ingress.hosts }}
|
|
||||||
{{ if .tls }}https{{ else }}http{{ end }}://{{ .name }}/admin
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
{{- else if contains "LoadBalancer" .Values.serviceType }}
|
|
||||||
|
|
||||||
NOTE: It may take a few minutes for the LoadBalancer IP to be available.
|
|
||||||
Watch the status with: 'kubectl get svc --namespace {{ .Release.Namespace }} -w {{ template "fullname" . }}'
|
|
||||||
|
|
||||||
export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
|
|
||||||
echo "WordPress URL: http://$SERVICE_IP/"
|
|
||||||
echo "WordPress Admin URL: http://$SERVICE_IP/admin"
|
|
||||||
|
|
||||||
{{- else if contains "ClusterIP" .Values.serviceType }}
|
|
||||||
|
|
||||||
echo "WordPress URL: http://127.0.0.1:8080/"
|
|
||||||
echo "WordPress Admin URL: http://127.0.0.1:8080/admin"
|
|
||||||
kubectl port-forward --namespace {{ .Release.Namespace }} svc/{{ template "fullname" . }} 8080:80
|
|
||||||
|
|
||||||
{{- else if contains "NodePort" .Values.serviceType }}
|
|
||||||
|
|
||||||
export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "fullname" . }})
|
|
||||||
export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
|
||||||
echo "WordPress URL: http://$NODE_IP:$NODE_PORT/"
|
|
||||||
echo "WordPress Admin URL: http://$NODE_IP:$NODE_PORT/admin"
|
|
||||||
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
2. Login with the following credentials to see your blog
|
|
||||||
|
|
||||||
echo Username: {{ .Values.wordpressUsername }}
|
|
||||||
echo Password: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.wordpress-password}" | base64 --decode)
|
|
||||||
|
|||||||
@ -1,24 +0,0 @@
|
|||||||
{{/* vim: set filetype=mustache: */}}
|
|
||||||
{{/*
|
|
||||||
Expand the name of the chart.
|
|
||||||
*/}}
|
|
||||||
{{- define "name" -}}
|
|
||||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create a default fully qualified app name.
|
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
|
||||||
*/}}
|
|
||||||
{{- define "fullname" -}}
|
|
||||||
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
|
||||||
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create a default fully qualified app name.
|
|
||||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
|
||||||
*/}}
|
|
||||||
{{- define "mariadb.fullname" -}}
|
|
||||||
{{- printf "%s-%s" .Release.Name "mariadb" | trunc 63 | trimSuffix "-" -}}
|
|
||||||
{{- end -}}
|
|
||||||
@ -1,155 +0,0 @@
|
|||||||
apiVersion: extensions/v1beta1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
replicas: {{ .Values.replicaCount }}
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
spec:
|
|
||||||
{{- if .Values.image.pullSecrets }}
|
|
||||||
imagePullSecrets:
|
|
||||||
{{- range .Values.image.pullSecrets }}
|
|
||||||
- name: {{ . }}
|
|
||||||
{{- end}}
|
|
||||||
{{- end }}
|
|
||||||
containers:
|
|
||||||
- name: {{ template "fullname" . }}
|
|
||||||
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
|
||||||
env:
|
|
||||||
- name: ALLOW_EMPTY_PASSWORD
|
|
||||||
value: {{ .Values.allowEmptyPassword | quote }}
|
|
||||||
- name: MARIADB_HOST
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ template "mariadb.fullname" . }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.host | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: MARIADB_PORT_NUMBER
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: "3306"
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.port | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_NAME
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ .Values.mariadb.db.name | quote }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.database | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_USER
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
value: {{ .Values.mariadb.db.user | quote }}
|
|
||||||
{{- else }}
|
|
||||||
value: {{ .Values.externalDatabase.user | quote }}
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_DATABASE_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
name: {{ template "mariadb.fullname" . }}
|
|
||||||
key: mariadb-password
|
|
||||||
{{- else }}
|
|
||||||
name: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
key: db-password
|
|
||||||
{{- end }}
|
|
||||||
- name: WORDPRESS_USERNAME
|
|
||||||
value: {{ .Values.wordpressUsername | quote }}
|
|
||||||
- name: WORDPRESS_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
key: wordpress-password
|
|
||||||
- name: WORDPRESS_EMAIL
|
|
||||||
value: {{ .Values.wordpressEmail | quote }}
|
|
||||||
- name: WORDPRESS_FIRST_NAME
|
|
||||||
value: {{ .Values.wordpressFirstName | quote }}
|
|
||||||
- name: WORDPRESS_LAST_NAME
|
|
||||||
value: {{ .Values.wordpressLastName | quote }}
|
|
||||||
- name: WORDPRESS_BLOG_NAME
|
|
||||||
value: {{ .Values.wordpressBlogName | quote }}
|
|
||||||
- name: WORDPRESS_TABLE_PREFIX
|
|
||||||
value: {{ .Values.wordpressTablePrefix | quote }}
|
|
||||||
- name: SMTP_HOST
|
|
||||||
value: {{ .Values.smtpHost | quote }}
|
|
||||||
- name: SMTP_PORT
|
|
||||||
value: {{ .Values.smtpPort | quote }}
|
|
||||||
- name: SMTP_USER
|
|
||||||
value: {{ .Values.smtpUser | quote }}
|
|
||||||
- name: SMTP_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
key: smtp-password
|
|
||||||
- name: SMTP_USERNAME
|
|
||||||
value: {{ .Values.smtpUsername | quote }}
|
|
||||||
- name: SMTP_PROTOCOL
|
|
||||||
value: {{ .Values.smtpProtocol | quote }}
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
containerPort: 80
|
|
||||||
- name: https
|
|
||||||
containerPort: 443
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /wp-login.php
|
|
||||||
{{- if not .Values.healthcheckHttps }}
|
|
||||||
port: http
|
|
||||||
{{- else }}
|
|
||||||
port: https
|
|
||||||
scheme: HTTPS
|
|
||||||
{{- end }}
|
|
||||||
{{ toYaml .Values.livenessProbe | indent 10 }}
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /wp-login.php
|
|
||||||
{{- if not .Values.healthcheckHttps }}
|
|
||||||
port: http
|
|
||||||
{{- else }}
|
|
||||||
port: https
|
|
||||||
scheme: HTTPS
|
|
||||||
{{- end }}
|
|
||||||
{{ toYaml .Values.readinessProbe | indent 10 }}
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /bitnami/apache
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: apache
|
|
||||||
- mountPath: /bitnami/wordpress
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: wordpress
|
|
||||||
- mountPath: /bitnami/php
|
|
||||||
name: wordpress-data
|
|
||||||
subPath: php
|
|
||||||
resources:
|
|
||||||
{{ toYaml .Values.resources | indent 10 }}
|
|
||||||
volumes:
|
|
||||||
- name: wordpress-data
|
|
||||||
{{- if .Values.persistence.enabled }}
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: {{ .Values.persistence.existingClaim | default (include "fullname" .) }}
|
|
||||||
{{- else }}
|
|
||||||
emptyDir: {}
|
|
||||||
{{ end }}
|
|
||||||
{{- if .Values.nodeSelector }}
|
|
||||||
nodeSelector:
|
|
||||||
{{ toYaml .Values.nodeSelector | indent 8 }}
|
|
||||||
{{- end -}}
|
|
||||||
{{- with .Values.affinity }}
|
|
||||||
affinity:
|
|
||||||
{{ toYaml . | indent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
{{- with .Values.tolerations }}
|
|
||||||
tolerations:
|
|
||||||
{{ toYaml . | indent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
|
|
||||||
@ -1,14 +0,0 @@
|
|||||||
{{- if not .Values.mariadb.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
labels:
|
|
||||||
app: {{ printf "%s-%s" .Release.Name "externaldb" }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
db-password: {{ .Values.externalDatabase.password | b64enc | quote }}
|
|
||||||
{{- end }}
|
|
||||||
@ -1,36 +0,0 @@
|
|||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
{{- range .Values.ingress.hosts }}
|
|
||||||
apiVersion: extensions/v1beta1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
name: "{{- printf "%s-%s" .name $.Release.Name | trunc 63 | trimSuffix "-" -}}"
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" $ }}
|
|
||||||
chart: "{{ $.Chart.Name }}-{{ $.Chart.Version }}"
|
|
||||||
release: "{{ $.Release.Name }}"
|
|
||||||
heritage: "{{ $.Release.Service }}"
|
|
||||||
annotations:
|
|
||||||
{{- if .tls }}
|
|
||||||
ingress.kubernetes.io/secure-backends: "true"
|
|
||||||
{{- end }}
|
|
||||||
{{- range $key, $value := .annotations }}
|
|
||||||
{{ $key }}: {{ $value | quote }}
|
|
||||||
{{- end }}
|
|
||||||
spec:
|
|
||||||
rules:
|
|
||||||
- host: {{ .name }}
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- path: {{ default "/" .path }}
|
|
||||||
backend:
|
|
||||||
serviceName: {{ template "fullname" $ }}
|
|
||||||
servicePort: 80
|
|
||||||
{{- if .tls }}
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- {{ .name }}
|
|
||||||
secretName: {{ .tlsSecret }}
|
|
||||||
{{- end }}
|
|
||||||
---
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
@ -1,24 +0,0 @@
|
|||||||
{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
apiVersion: v1
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- {{ .Values.persistence.accessMode | quote }}
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: {{ .Values.persistence.size | quote }}
|
|
||||||
{{- if .Values.persistence.storageClass }}
|
|
||||||
{{- if (eq "-" .Values.persistence.storageClass) }}
|
|
||||||
storageClassName: ""
|
|
||||||
{{- else }}
|
|
||||||
storageClassName: "{{ .Values.persistence.storageClass }}"
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
{{- end -}}
|
|
||||||
@ -1,17 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
{{ if .Values.wordpressPassword }}
|
|
||||||
wordpress-password: {{ default "" .Values.wordpressPassword | b64enc | quote }}
|
|
||||||
{{ else }}
|
|
||||||
wordpress-password: {{ randAlphaNum 10 | b64enc | quote }}
|
|
||||||
{{ end }}
|
|
||||||
smtp-password: {{ default "" .Values.smtpPassword | b64enc | quote }}
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: {{ template "fullname" . }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
|
||||||
release: "{{ .Release.Name }}"
|
|
||||||
heritage: "{{ .Release.Service }}"
|
|
||||||
spec:
|
|
||||||
type: {{ .Values.serviceType }}
|
|
||||||
{{- if (or (eq .Values.serviceType "LoadBalancer") (eq .Values.serviceType "NodePort")) }}
|
|
||||||
externalTrafficPolicy: {{ .Values.serviceExternalTrafficPolicy | quote }}
|
|
||||||
{{- end }}
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
port: 80
|
|
||||||
targetPort: http
|
|
||||||
{{- if (and (eq .Values.serviceType "NodePort") (not (empty .Values.nodePorts.http)))}}
|
|
||||||
nodePort: {{ .Values.nodePorts.http }}
|
|
||||||
{{- end }}
|
|
||||||
- name: https
|
|
||||||
port: 443
|
|
||||||
targetPort: https
|
|
||||||
{{- if (and (eq .Values.serviceType "NodePort") (not (empty .Values.nodePorts.https)))}}
|
|
||||||
nodePort: {{ .Values.nodePorts.https }}
|
|
||||||
{{- end }}
|
|
||||||
selector:
|
|
||||||
app: {{ template "fullname" . }}
|
|
||||||
@ -1,29 +0,0 @@
|
|||||||
{{- if .Values.mariadb.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Pod
|
|
||||||
metadata:
|
|
||||||
name: "{{ .Release.Name }}-credentials-test"
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": test-success
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: {{ .Release.Name }}-credentials-test
|
|
||||||
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
|
||||||
env:
|
|
||||||
- name: MARIADB_HOST
|
|
||||||
value: {{ template "mariadb.fullname" . }}
|
|
||||||
- name: MARIADB_PORT
|
|
||||||
value: "3306"
|
|
||||||
- name: WORDPRESS_DATABASE_NAME
|
|
||||||
value: {{ default "" .Values.mariadb.db.name | quote }}
|
|
||||||
- name: WORDPRESS_DATABASE_USER
|
|
||||||
value: {{ default "" .Values.mariadb.db.user | quote }}
|
|
||||||
- name: WORDPRESS_DATABASE_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: {{ template "mariadb.fullname" . }}
|
|
||||||
key: mariadb-password
|
|
||||||
command: ["sh", "-c", "mysql --host=$MARIADB_HOST --port=$MARIADB_PORT --user=$WORDPRESS_DATABASE_USER --password=$WORDPRESS_DATABASE_PASSWORD"]
|
|
||||||
restartPolicy: Never
|
|
||||||
{{- end }}
|
|
||||||
@ -1,18 +0,0 @@
|
|||||||
{{- if .Values.ingress.enabled }}
|
|
||||||
{{- range .Values.ingress.secrets }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: {{ .name }}
|
|
||||||
labels:
|
|
||||||
app: {{ template "fullname" $ }}
|
|
||||||
chart: "{{ $.Chart.Name }}-{{ $.Chart.Version }}"
|
|
||||||
release: "{{ $.Release.Name }}"
|
|
||||||
heritage: "{{ $.Release.Service }}"
|
|
||||||
type: kubernetes.io/tls
|
|
||||||
data:
|
|
||||||
tls.crt: {{ .certificate | b64enc }}
|
|
||||||
tls.key: {{ .key | b64enc }}
|
|
||||||
---
|
|
||||||
{{- end }}
|
|
||||||
{{- end }}
|
|
||||||
Loading…
Reference in new issue