Paul Payne
4d983819c9
feat(synapse): update ingress to use traefik ingress class and bump version feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration fix(taiga): update liveness and readiness probes to use tcpSocket for health checks fix(taiga): change PVC access mode to ReadWriteMany for media and static storage feat(traefik): add icon and ignore rules for traefik service docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments feat(ushahidi): implement dedicated Redis deployment for Ushahidi fix(vllm): update deployment strategy and readiness/liveness probes for improved stability fix(writefreely): pin writefreely image version to v0.15.1 for consistency docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior
123 lines
3.4 KiB
YAML
123 lines
3.4 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: supabase-storage
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
component: storage
|
|
template:
|
|
metadata:
|
|
labels:
|
|
component: storage
|
|
spec:
|
|
containers:
|
|
- name: storage
|
|
image: supabase/storage-api:v1.60.4
|
|
ports:
|
|
- containerPort: 5000
|
|
env:
|
|
- name: ANON_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: supabase-secrets
|
|
key: anonKey
|
|
- name: SERVICE_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: supabase-secrets
|
|
key: serviceRoleKey
|
|
- name: POSTGREST_URL
|
|
value: "http://rest:3000"
|
|
- name: AUTH_JWT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: supabase-secrets
|
|
key: jwtSecret
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: supabase-secrets
|
|
key: dbUrlStorage
|
|
- name: STORAGE_PUBLIC_URL
|
|
value: "https://{{ .domain }}"
|
|
- name: REQUEST_ALLOW_X_FORWARDED_PATH
|
|
value: "true"
|
|
- name: FILE_SIZE_LIMIT
|
|
value: "52428800"
|
|
- name: STORAGE_BACKEND
|
|
value: file
|
|
- name: GLOBAL_S3_BUCKET
|
|
value: stub
|
|
- name: REGION
|
|
value: stub
|
|
- name: FILE_STORAGE_BACKEND_PATH
|
|
value: /var/lib/storage
|
|
- name: TENANT_ID
|
|
value: stub
|
|
- name: ENABLE_IMAGE_TRANSFORMATION
|
|
value: "true"
|
|
- name: IMGPROXY_URL
|
|
value: "http://localhost:5001"
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /status
|
|
port: 5000
|
|
initialDelaySeconds: 20
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /status
|
|
port: 5000
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
volumeMounts:
|
|
- name: supabase-storage
|
|
mountPath: /var/lib/storage
|
|
resources:
|
|
requests:
|
|
memory: 256Mi
|
|
cpu: 100m
|
|
|
|
- name: imgproxy
|
|
image: darthsim/imgproxy:v3.30.1
|
|
ports:
|
|
- containerPort: 5001
|
|
env:
|
|
- name: IMGPROXY_BIND
|
|
value: ":5001"
|
|
- name: IMGPROXY_LOCAL_FILESYSTEM_ROOT
|
|
value: /
|
|
- name: IMGPROXY_USE_ETAG
|
|
value: "true"
|
|
- name: IMGPROXY_AUTO_WEBP
|
|
value: "true"
|
|
- name: IMGPROXY_MAX_SRC_RESOLUTION
|
|
value: "16.8"
|
|
volumeMounts:
|
|
- name: supabase-storage
|
|
mountPath: /var/lib/storage
|
|
livenessProbe:
|
|
exec:
|
|
command: ["imgproxy", "health"]
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
cpu: 50m
|
|
|
|
volumes:
|
|
- name: supabase-storage
|
|
persistentVolumeClaim:
|
|
claimName: supabase-storage
|