Adds jitsi app.

jitsi/versions/stable/deployment-jvb.yaml

@@ -0,0 +1,72 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jitsi-jvb
+  namespace: {{ .namespace }}
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      component: jvb
+  template:
+    metadata:
+      labels:
+        component: jvb
+    spec:
+      securityContext:
+        runAsNonRoot: false
+        runAsUser: 0
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: jitsi-jvb
+          image: jitsi/jvb:jvb-2.3-296-g318c08ddc-1
+          ports:
+            - name: rtp-udp
+              containerPort: 10000
+              protocol: UDP
+            - name: colibri-ws
+              containerPort: 9090
+              protocol: TCP
+          env:
+            - name: XMPP_DOMAIN
+              value: "{{ .xmppDomain }}"
+            - name: XMPP_AUTH_DOMAIN
+              value: "{{ .xmppAuthDomain }}"
+            - name: XMPP_INTERNAL_MUC_DOMAIN
+              value: "{{ .xmppInternalMucDomain }}"
+            - name: XMPP_SERVER
+              value: prosody
+            - name: XMPP_PORT
+              value: "5222"
+            - name: JVB_AUTH_USER
+              value: jvb
+            - name: JVB_AUTH_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: jitsi-secrets
+                  key: jvbAuthPassword
+            - name: JVB_BREWERY_MUC
+              value: jvbbrewery
+            - name: JVB_STUN_SERVERS
+              value: "{{ .jvbStunServers }}"
+            - name: JVB_DISABLE_STUN
+              value: "false"
+            - name: JVB_TCP_HARVESTER_DISABLED
+              value: "false"
+            - name: ENABLE_COLIBRI_WEBSOCKET
+              value: "1"
+            - name: PUBLIC_URL
+              value: "https://{{ .domain }}"
+          resources:
+            limits:
+              cpu: "1"
+              memory: 1Gi
+            requests:
+              cpu: 50m
+              memory: 256Mi
+          securityContext:
+            readOnlyRootFilesystem: false
+      restartPolicy: Always