mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 19:04:31 +00:00
bcc8f23a0d
- Secret Management: Integrated AESGCM for temporary secret handling in install.py and enhanced OpenBao (Vault) support with namespace injection and additional secret paths (Grafana, Kerberos, TDE).
- Infrastructure & K8s:
- Added Barman Object Store backup configuration (S3) to prole-db.yaml.
- Updated Prometheus deployment with PVC and persistent configuration.
- Updated k3s cluster/registry creation scripts.
- Added etc/build-a-bao.sh for OpenBao setup.
- MSSQL Integration: Updated docker scripts and k8s deployments for Prole MSSQL database.
- Documentation: Added docs/PROLE-CFG-SECRETS.md explaining the new secret handling.
- General: Refined initialization scripts (init_authority.sh, init_openbao.sh, etc.) and updated the ncurses installer.
32 lines
782 B
YAML
32 lines
782 B
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: prole-mssql-db
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
service: db
|
|
template:
|
|
metadata:
|
|
labels:
|
|
service: db
|
|
spec:
|
|
containers:
|
|
- name: prole-mssql-db
|
|
image: k3d-prole-data-registry:5000/prole-mssql-db:017
|
|
ports:
|
|
- containerPort: 1433
|
|
volumeMounts:
|
|
- mountPath: "/var/opt/mssql/data"
|
|
name: prole-db-mssql-data
|
|
env:
|
|
- name: ACCEPT_EULA
|
|
value: 'Y'
|
|
- name: MSSQL_SA_PASSWORD
|
|
value: '${OPENBAO:kv/prole/<namespace>/mssql#sa_password}'
|
|
volumes:
|
|
- name: prole-db-mssql-data
|
|
persistentVolumeClaim:
|
|
claimName: prole-mssql-db-nfs-data001
|