modified: deploy/mosquitto-deploy.yaml

modified:   docker-compose.yml

.gitea/workflows/deploy.yml

@@ -0,0 +1,42 @@
+name: Mosquitto CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - fix/*
+      - main
+      - master
+  pull_request:
+  schedule:
+    - cron: '0 15 * * 0' # every sunday 3 pm
+
+jobs:
+  deploy:
+    runs-on: casa-vlan-cicd
+    env:
+      GITHUB_TEMP: ${{ runner.temp }}
+      
+    steps:
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Fetch limbo public actions
+        env: 
+          RUNNER_TEMP: "${{ runner.temp }}"
+          WORKSPACE: "${{ gitea.workspace }}"
+        run: |
+          curl -fsSL https://git.limbosolutions.com/kb/gitea/raw/branch/main/cloud-scripts/setup-limbo-actions.sh | bash 2>&1
+
+      - name: Setup kubectl
+        uses: ./.gitea/limbo_actions/kubectl-setup
+        with:
+          kube_server: ${{ secrets.CASA_VLAN_KUBE_SERVER }}
+          kube_ca_base64: ${{ secrets.CASA_VLAN_KUBE_CA_BASE64 }}
+          kube_token: ${{ secrets.CASA_VLAN_KUBE_TOKEN }}
+         
+      - name: Deploy Mosquitto
+        shell: bash
+        run: |
+          kubectl apply -f ./deploy/mosquitto-deploy.yaml
+            

README.md

@@ -0,0 +1,20 @@
+# mosquitto
+
+Currently hosted on [kubernetes cluster - casa](https://git.limbosolutions.com/myLimbo/casa).
+
+## Namespace
+
+```bash { cwd=../ terminalRows=15 }
+kubectl create namespace mosquitto
+```
+
+## Deploy
+
+- [deployment](./deploy/cicd-rbac.yaml)
+- [cicd-rbac](./deploy/cicd-rbac.yaml)
+
+## Continuous Deploy
+
+Weekly cron update.
+
+[Gitea Workflow](./.gitea/workflows/%20deploy.yml)

deploy/cicd-rbac.yaml

@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: mqtt
+  name: ci-cd
+rules:
+- apiGroups: [""]
+  resources: ["pods", "services", "secrets", "configmaps", "persistentvolumeclaims", "endpoints"]
+  verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
+- apiGroups: ["apps"]
+  resources: ["deployments", "statefulsets"]
+  verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
+- apiGroups: ["networking.k8s.io"]
+  resources: ["ingresses"]
+  verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
+- apiGroups: ["traefik.io"]
+  resources: ["ingressroutes"]
+  verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name:  ci-cd
+  namespace: mqtt
+subjects:
+- kind: ServiceAccount
+  name: casa-ci-cd
+  namespace: home-assistant
+roleRef:
+  kind: Role
+  name: ci-cd
+  apiGroup: rbac.authorization.k8s.io

deploy/mosquitto-deploy.yaml

@@ -0,0 +1,90 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mosquitto-data  
+  namespace: mqtt 
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: local-path 
+
+---
+
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mosquitto
+  namespace: mqtt  
+type: Opaque
+stringData:
+  config: |
+      listener 1883
+      allow_anonymous true
+
+---
+
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+    name: mosquitto
+    namespace: mqtt
+    labels:
+        app: mosquitto
+spec:
+    replicas: 1
+    selector:
+        matchLabels:
+            app: mosquitto
+    template:
+        metadata:
+          labels:
+              app: mosquitto
+        spec:
+          hostNetwork: true
+          containers:
+            - name: mosquitto
+              image: eclipse-mosquitto:latest
+              imagePullPolicy: Always
+              command: ["/usr/sbin/mosquitto"]
+              args: ["-c", "/etc/mosquitto/mosquitto.conf"]
+
+              ports:
+                - containerPort: 8883 # Default MQTT port for encrypted communication using TLS/SSL
+                  #hostPort: 8883 
+                  protocol: TCP
+                - containerPort: 1883 # Default MQTT port for unencrypted communication
+                  protocol: TCP
+                  #hostPort: 1883
+
+              volumeMounts:
+                - name: mosquitto-data
+                  mountPath: /mosquitto-data
+                  
+                - mountPath: /etc/mosquitto/mosquitto.conf
+                  name: mosquitto-secret
+                  subPath: config
+
+              resources:
+                requests:
+                  memory: "50Mi"
+                  cpu: "100m"
+                limits:
+                  memory: "100Mi"
+                  cpu: "200m"
+          volumes:
+
+              - name: mosquitto-data
+                persistentVolumeClaim:
+                  claimName : mosquitto-data
+                
+                
+              - name: mosquitto-secret
+                secret:
+                  secretName: "mosquitto"
+
+
+               

docker/docker-compose.yaml

@@ -1,30 +0,0 @@
-
-version: "3"
-services:
-  mosquitto:
-    container_name: mosquitto
-    image: eclipse-mosquitto:latest
-    ports:
-      - '1883:1883'
-      - '8883:8883'
-    volumes:
-      - 'data:/mosquitto/data/'
-      - 'config:/mosquitto/config/'
-    environment:
-      TZ: 'America/Chicago'
-    restart: unless-stopped
-volumes:
-  data:
-    name: mosquitto_data
-    driver: local
-    driver_opts:
-      type: ${MOSQUITTO_VOLUME_DATA_TYPE}
-      o: ${MOSQUITTO_VOLUME_DATA_O}
-      device: "${MOSQUITTO_VOLUME_DATA_DEVICE}"
-  config:
-    name: mosquitto_config
-    driver: local
-    driver_opts:
-      type: ${MOSQUITTO_VOLUME_CONFIG_TYPE}
-      o: ${MOSQUITTO_VOLUME_CONFIG_O}
-      device: "${MOSQUITTO_VOLUME_CONFIG_DEVICE}"