Initialisation depot

samba-api/k8s/samba-dc.yaml

@@ -0,0 +1,140 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: samba-dc
+  namespace: samba-api
+  labels:
+    app: samba-dc
+spec:
+  serviceName: samba-dc
+  replicas: 1
+  selector:
+    matchLabels:
+      app: samba-dc
+  template:
+    metadata:
+      labels:
+        app: samba-dc
+    spec:
+      containers:
+      - name: samba-dc
+        image: nowsci/samba-domain:4.16.0
+        env:
+        - name: DOMAIN
+          value: "example.com"
+        - name: DOMAINPASS
+          valueFrom:
+            secretKeyRef:
+              name: samba-api-secrets
+              key: SAMBA_ADMIN_PASSWORD
+        - name: DNSFORWARDER
+          value: "8.8.8.8"
+        - name: HOSTIP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        ports:
+        - containerPort: 53
+          name: dns
+          protocol: UDP
+        - containerPort: 53
+          name: dns-tcp
+          protocol: TCP
+        - containerPort: 88
+          name: kerberos
+          protocol: TCP
+        - containerPort: 88
+          name: kerberos-udp
+          protocol: UDP
+        - containerPort: 135
+          name: rpc
+        - containerPort: 139
+          name: netbios
+        - containerPort: 389
+          name: ldap
+        - containerPort: 445
+          name: smb
+        - containerPort: 464
+          name: kpasswd
+        - containerPort: 636
+          name: ldaps
+        - containerPort: 3268
+          name: gc
+        - containerPort: 3269
+          name: gc-ssl
+        volumeMounts:
+        - name: samba-data
+          mountPath: /var/lib/samba
+        - name: samba-config
+          mountPath: /etc/samba
+        securityContext:
+          privileged: true
+          capabilities:
+            add:
+            - NET_ADMIN
+        resources:
+          requests:
+            memory: "512Mi"
+            cpu: "500m"
+          limits:
+            memory: "1Gi"
+            cpu: "1000m"
+  volumeClaimTemplates:
+  - metadata:
+      name: samba-data
+    spec:
+      accessModes: ["ReadWriteOnce"]
+      storageClassName: "standard"
+      resources:
+        requests:
+          storage: 10Gi
+  - metadata:
+      name: samba-config
+    spec:
+      accessModes: ["ReadWriteOnce"]
+      storageClassName: "standard"
+      resources:
+        requests:
+          storage: 1Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: samba-dc
+  namespace: samba-api
+  labels:
+    app: samba-dc
+spec:
+  type: ClusterIP
+  clusterIP: None
+  ports:
+  - port: 53
+    name: dns
+    protocol: UDP
+  - port: 53
+    name: dns-tcp
+    protocol: TCP
+  - port: 88
+    name: kerberos
+    protocol: TCP
+  - port: 88
+    name: kerberos-udp
+    protocol: UDP
+  - port: 135
+    name: rpc
+  - port: 139
+    name: netbios
+  - port: 389
+    name: ldap
+  - port: 445
+    name: smb
+  - port: 464
+    name: kpasswd
+  - port: 636
+    name: ldaps
+  - port: 3268
+    name: gc
+  - port: 3269
+    name: gc-ssl
+  selector:
+    app: samba-dc