Initial commit

manifests/apps/vaultwarden/configmap.yaml

@@ -0,0 +1,10 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  labels:
+    instance: vaultwarden
+  name: vaultwarden-env
+data:
+  SIGNUPS_ALLOWED: "false"
+  DOMAIN: https://warden.openvibes.ru
+  ROCKET_ADDRESS: '::'

manifests/apps/vaultwarden/deploy.yaml

@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name:  vaultwarden
+  labels:
+    app:  vaultwarden
+    instance:  vaultwarden
+spec:
+  selector:
+    matchLabels:
+      app: vaultwarden
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app:  vaultwarden
+    spec:
+      containers:
+      - name:  vaultwarden
+        image:  docker.io/vaultwarden/server:1.33.2-alpine
+        resources:
+          requests:
+            cpu: 300m
+            memory: 500Mi
+          limits:
+            cpu: "1"
+            memory: 1Gi
+        envFrom:
+          - configMapRef:
+              name: vaultwarden-env
+          - secretRef:
+              name: vaultwarden-secrets
+        ports:
+        - containerPort:  80
+          name:  vaultwarden
+        volumeMounts:
+        - name: storage
+          mountPath: /data
+      volumes:
+        - name: storage
+          persistentVolumeClaim:
+            claimName: vaultwarden-pvc
+      restartPolicy: Always

manifests/apps/vaultwarden/pvc.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    instance: vaultwarden
+  name: vaultwarden-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

manifests/apps/vaultwarden/service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vaultwarden-service-headless
+  labels:
+    instance: vaultwarden
+spec:
+  selector:
+    app: vaultwarden
+  type: ClusterIP
+  ports:
+  - name: http
+    protocol: TCP
+    port: 80
+    targetPort: 80