examples

Author: Tob1as

examples/fpm-nginx-dhi-k8s/README.md

@@ -9,6 +9,7 @@
     * Change `ConfigMap` and `Secret` (Passwords) in `wsc-db.yaml` and `wsc-db.yaml`.
     * Set Domain/Host(s) in `Ingress` in `wsc-db.yaml` and set ssl-cert.
     * Set `storageClassName` in `volumes.yaml`.
+    * check rest of yaml`s/configs ...
 4. ```kubectl apply -f volumes.yaml```
 5. ```kubectl apply -f wsc-db.yaml```
     * create database and user and set permission:
@@ -29,8 +30,19 @@
       ```
     * Now you can edit `wsc-db.yaml` and use `MYSQL_EXPORTER_USER` and `MYSQLD_EXPORTER_PASSWORD` for exporter and optional use other user instead root for healtcheck. Then redeploy.
 6. ```kubectl apply -f wsc-web.yaml```
-7. copy wsc files to html folder in wsc-web deployment: ```kubectl cp ....```
-8. ...
+7. check:
+   ```sh
+   kubectl -n wsc get secrets,configmaps,ingresses,services,pods,deployments,pvc,pv
+   ```
+8. [Download WSC](https://www.woltlab.com/en/woltlab-suite-download/) and unzip archive and copy wsc files form upload-folder to html-folder in wsc-web deployment: 
+   ```sh
+   kubectl -n wsc cp ./upload/. $(kubectl -n wsc get pod -l app.kubernetes.io/name=wsc-web -o jsonpath="{.items[0].metadata.name}"):/var/www/html/ -c helper
+   ```
+9. Call your domain and file test.php, example: `http://example.com/test.php`
+10. Now follows the installation setup of the WSC.  
+   Manual/Help: https://manual.woltlab.com/en/installation/  
+   (Notice: Database Host is `wsc-db`!)
+11. Installation complete.
 
 ## Registry Login
 

examples/fpm-nginx-dhi-k8s/wsc-db.yaml

@@ -97,6 +97,9 @@ spec:
         - containerPort: 3306
           name: mysql
           protocol: TCP
+        - containerPort: 33306
+          name: mysqlx
+          protocol: TCP
         readinessProbe:
           exec:
             command: ["/bin/sh", "-c", "mysqladmin ping -h localhost -P 3306 -u root || exit 1"]
@@ -187,6 +190,10 @@ spec:
     protocol: TCP
     port: 3306
     targetPort: 3306
+  - name: "mysqlx"
+    protocol: TCP
+    port: 33306
+    targetPort: 33306
   - name: "exporter"
     protocol: TCP
     port: 9104

examples/fpm-nginx-dhi-k8s/wsc-web.yaml

@@ -93,6 +93,7 @@ spec:
         volumeMounts:
         - name: wsc-web-data
           mountPath: /var/www/html
+          #readOnly: true
         - name: nginx-config
           subPath: default.conf
           mountPath: /etc/nginx/conf.d/default.conf
@@ -193,6 +194,24 @@ spec:
           limits:
             memory: "128Mi"
             cpu: "0.5"
+      # helper (for "kubectl cp", tar-backups from "html"-folder, ... when using ReadWriteOnce-PVC)
+      - name: helper
+        image: dhi.io/alpine-base:3.23 # or: docker.io/tobi312/php:dhi-helper-alpine
+        imagePullPolicy: Always
+        args: [ "tail", "-f", "/dev/null" ]
+        resources:
+          requests:
+            memory: "64Mi"
+            cpu: "0.1"
+          limits:
+            memory: "128Mi"
+            cpu: "0.5"
+        volumeMounts:
+        - name: wsc-web-data
+          mountPath: /var/www/html
+          #readOnly: true
+        - name: wsc-web-helper
+          mountPath: /data
       volumes:
       - name: wsc-web-data
         persistentVolumeClaim:
@@ -203,6 +222,9 @@ spec:
       - name: php-fpm-config
         configMap:
           name: wsc-web-file-config-php-fpm
+      # helper
+      - name: wsc-web-helper
+        emptyDir: {}
 
 ---
 
@@ -424,7 +446,7 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-body-size: "0"
     nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
     ## Traefik
-    #traefik.ingress.kubernetes.io/router.middlewares: 'default-https-redirectscheme@kubernetescrd'
+    #traefik.ingress.kubernetes.io/router.middlewares: 'wsc-https-redirectscheme@kubernetescrd'
     traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
     traefik.ingress.kubernetes.io/service.serversscheme: http
 spec:
@@ -461,6 +483,20 @@ spec:
 #  tls.crt: <ssl.crt>
 #  tls.key: <ssl.key
 
+#---
+## redirect http to https
+#
+#apiVersion: traefik.io/v1alpha1
+#kind: Middleware
+#metadata:
+#  name: https-redirectscheme
+#  namespace: wsc
+#spec:
+#  redirectScheme:
+#    scheme: https
+#    #port: "443"
+#    #permanent: true
+
 #---
 #
 ### After this line ONLY for Monitoring !