abcmusic template wip

ansible-5/roles/prod.k3s/defaults/main.yml

@@ -98,3 +98,9 @@ apps:
     enabled: true
     namespace: redis
     state: present
+
+  abcmusic:
+    enabled: false
+    namespace: abcmusic
+    state: present
+    image:

ansible-5/roles/prod.k3s/tasks/deployments/abcmusic.yaml

@@ -0,0 +1,15 @@
+---
+# Abc music application deployment
+
+
+- name: create abcmusic resources
+  kubernetes.core.k8s:
+    kubeconfig: "/etc/rancher/k3s/k3s.yaml"
+    state: "{{apps.abcmusic.state}}"
+    definition: "{{ lookup('template', item) | from_yaml }}"
+  loop:
+    #    - dkregistry/configmap.yaml
+#    - dkregistry/ingress.yaml
+#    - dkregistry/service.yaml
+    - abcmusic/deployment.yaml
+  become: true

ansible-5/roles/prod.k3s/tasks/main.yml

@@ -46,6 +46,9 @@
   include_tasks: deployments/funkwhale.yaml
   when: apps.funkwhale.enabled
 
+- name: deploy abcmusic
+  include_tasks: deployments/abcmusic.yaml
+  when: apps.abcmusic.enabled
 #-----------------------------------------------------
 #- include_tasks: mariadb.yaml
 #

ansible-5/roles/prod.k3s/templates/abcmusic/deployment.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: abcmusic-api-pod
+  namespace: "{{apps.abcmusic.namespace}}"
+  labels:
+    app: registry
+spec:
+  containers:
+    - name: registry
+      image: "{{apps.abcmusic.image}}"
+      volumeMounts:
+        - name: repo-vol
+          mountPath: "/var/lib/registry"
+        #        - name: certs-vol
+        #          mountPath: "/certs"
+        #          readOnly: true
+        - name: auth-vol
+          mountPath: "/auth"
+          readOnly: true
+      env:
+        - name: REGISTRY_AUTH
+          value: "htpasswd"
+        - name: REGISTRY_AUTH_HTPASSWD_REALM
+          value: "Registry Realm"
+        - name: REGISTRY_AUTH_HTPASSWD_PATH
+          value: "/auth/htpasswd"
+  #        - name: REGISTRY_HTTP_TLS_CERTIFICATE
+  #          value: "/certs/tls.crt"
+  #        - name: REGISTRY_HTTP_TLS_KEY
+  #          value: "/certs/tls.key"
+#  volumes:
+#    - name: repo-vol
+#      persistentVolumeClaim:
+#        claimName: data-dkregistry-0
+#    #    - name: certs-vol
+#    #      secret:
+#    #        secretName: default/xai-corp-production-tls
+#    - name: auth-vol
+#      persistentVolumeClaim:
+#        claimName: data-dkregistry-auth-0