Add mongodb

Author: Brutus5000

apps/faf-mongodb/Chart.yaml

@@ -0,0 +1,3 @@
+apiVersion: v2
+name: faf-mongodb
+version: 1.0.0

apps/faf-mongodb/templates/service.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongodb
+spec:
+  type: ExternalName
+  # Define mongodb.hostName in config, if you use an external database
+  externalName: {{ default "mongodb.faf-infra.svc.cluster.local" .Values.mongodb.hostName }}

apps/faf-mongodb/values.yaml

@@ -0,0 +1,2 @@
+# placeholder for .Values.mongodb.hostName
+mongodb: {}

apps/faf-postgres/templates/service.yaml

@@ -4,5 +4,5 @@ metadata:
   name: postgres
 spec:
   type: ExternalName
-  # Define mariadb.hostName in config, if you use an external database
-  externalName: {{ default "postgres.postgres.svc.cluster.local" .Values.postgres.hostName }}
+  # Define postgres.hostName in config, if you use an external database
+  externalName: {{ default "postgres.faf-infra.svc.cluster.local" .Values.postgres.hostName }}

apps/mongodb/templates/service.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mongodb
+  labels:
+    app: mongodb
+data:
+  MONGO_INITDB_ROOT_USERNAME: "root"

apps/mongodb/Chart.yaml infra/mongodb/Chart.yamlapps/mongodb/Chart.yaml renamed to infra/mongodb/Chart.yaml

@@ -0,0 +1,19 @@
+apiVersion: secrets.infisical.com/v1alpha1
+kind: InfisicalSecret
+metadata:
+  name: mongodb
+  namespace: faf-infra
+spec:
+  authentication:
+    universalAuth:
+      credentialsRef:
+        secretName: infisical-machine-identity
+        secretNamespace: faf-ops
+      secretsScope:
+        projectSlug: {{.Values.infisical.projectSlug}}
+        envSlug: {{.Values.infisical.envSlug}}
+        secretsPath: "/mongodb"
+  managedSecretReference:
+    secretName: mongodb
+    secretNamespace: faf-infra
+    creationPolicy: "Owner"

infra/mongodb/templates/config.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongodb
+  labels:
+    app: mongodb
+spec:
+  selector:
+    app: mongodb
+  ports:
+    - port: 27017
+      targetPort: 27017

infra/mongodb/templates/secret.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: mongodb
+  labels:
+    app: mongodb
+spec:
+  serviceName: mongodb
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: mongodb
+  template:
+    metadata:
+      labels:
+        app: mongodb
+    spec:
+      containers:
+        - image: mongo:7.0.14
+          imagePullPolicy: Always
+          name: mongodb
+          ports:
+            - containerPort: 27017
+              protocol: TCP
+          envFrom:
+            - configMapRef:
+                name: mongodb
+            - secretRef:
+                name: mongodb
+          volumeMounts:
+            - name: mongodb-pvc
+              mountPath: /data/db
+              subPath: data/db
+            - name: mongodb-pvc
+              mountPath: /data/backup
+              subPath: backup
+      restartPolicy: Always
+      volumes:
+        - name: config
+          configMap:
+            name: mongodb
+        - name: mongodb-pvc
+          persistentVolumeClaim:
+            claimName: mongodb-pvc
+      securityContext:
+        fsGroup: 999 # MongoDB user