mirror/QuickStack
1
0
Fork 0
mirror of https://github.com/biersoeckli/QuickStack.git synced 2026-01-02 01:30:38 -06:00
Code Issues Packages Projects Releases Wiki Activity

added nextauthsecret and securityContext for quickstack pod

Browse Source
This commit is contained in:
biersoeckli
2024-11-21 14:59:27 +00:00
parent d2350e1470
commit b9846f4445
3 changed files with 23 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.devcontainer/devcontainer.json
View File

@@ -20,7 +20,8 @@
"VisualStudioExptTeam.vscodeintellicode",
"mhutchie.git-graph",
"donjayamanne.githistory",
"qwtel.sqlite-viewer"
"qwtel.sqlite-viewer",
"mindaro.mindaro"
]
}
},

2
Dockerfile
View File

@@ -37,13 +37,13 @@ ENV NODE_ENV production
RUN addgroup --system --gid 1001 nodejs
RUN adduser --system --uid 1001 nextjs
COPY --from=builder /app/public ./public
RUN mkdir storage
RUN chown nextjs:nodejs storage
# Automatically leverage output traces to reduce image size
# https://nextjs.org/docs/advanced-features/output-file-tracing
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
COPY --from=builder --chown=nextjs:nodejs /app/prisma ./prisma
COPY --from=builder --chown=nextjs:nodejs /app/.next ./.next
COPY --from=builder --chown=nextjs:nodejs /app/dist ./dist

23
src/server/services/init.service.ts
View File

@@ -2,6 +2,7 @@ import k3s from "../adapter/kubernetes-api.adapter";
import { V1Deployment, V1Service } from "@kubernetes/client-node";
import namespaceService from "./namespace.service";
import { StringUtils } from "../utils/string.utils";
import crypto from "crypto";
class InitService {
@@ -12,9 +13,9 @@ class InitService {
async initializeQuickStack() {
await namespaceService.createNamespaceIfNotExists(this.QUICKSTACK_NAMESPACE)
await this.deleteExistingDeployment();
const nextAuthSecret = await this.deleteExistingDeployment();
await this.createOrUpdatePvc();
await this.createDeployment();
await this.createDeployment(nextAuthSecret);
await this.createOrUpdateService(true);
console.log('QuickStack successfully initialized');
}
@@ -101,7 +102,8 @@ class InitService {
}
private async createDeployment() {
private async createDeployment(existingNextAuthSecret?: string) {
const generatedNextAuthSecret = crypto.randomBytes(32).toString('base64');
const body: V1Deployment = {
metadata: {
name: this.QUICKSTACK_DEPLOYMENT_NAME,
@@ -121,11 +123,22 @@ class InitService {
},
spec: {
serviceAccountName: this.QUICKSTACK_SERVICEACCOUNT_NAME,
securityContext: {
runAsUser: 1001,
runAsGroup: 1001,
fsGroup: 1001
},
containers: [
{
name: this.QUICKSTACK_DEPLOYMENT_NAME,
image: 'quickstack/quickstack:latest',
imagePullPolicy: 'Always',
env: [
{
name: 'NEXTAUTH_SECRET',
value: existingNextAuthSecret || generatedNextAuthSecret
}
],
volumeMounts: [{
name: 'quickstack-volume',
mountPath: '/app/storage'
@@ -146,6 +159,9 @@ class InitService {
console.log('Deployment created');
}
/**
* @returns: the existing NEXTAUTH_SECRET if the deployment already exists
*/
private async deleteExistingDeployment() {
const allDeployments = await k3s.apps.listNamespacedDeployment(this.QUICKSTACK_NAMESPACE);
const existingDeployments = allDeployments.body.items.find(d => d.metadata!.name === this.QUICKSTACK_DEPLOYMENT_NAME);
@@ -155,6 +171,7 @@ class InitService {
await k3s.apps.deleteNamespacedDeployment(this.QUICKSTACK_DEPLOYMENT_NAME, this.QUICKSTACK_NAMESPACE);
console.log('Existing deployment deleted');
}
return existingDeployments?.spec?.template?.spec?.containers?.[0].env?.find(e => e.name === 'NEXTAUTH_SECRET')?.value;
}
}