- onlyoffice kubernetes resource limits and pvc

- continuous deploy revision
- environments variables validation
- vscode tasks for deploy
- vscode testing some new plugins

deploy/app/kustomization.yaml

@@ -14,7 +14,7 @@ resources:
   - ./storage-limbosolutions-com/pvc.yaml
   - ./mariadb-deploy.yaml
   - ./backups/backup-pbs-cronjob.yaml
-  # - ./onlyoffice  - enable to execute manually, required cicd revision to be enable by default 
+  - ./onlyoffice
 
 generatorOptions:
   disableNameSuffixHash: true

deploy/app/onlyoffice/deployment.yaml

@@ -26,3 +26,25 @@ spec:
                 secretKeyRef:
                   name: onlyoffice
                   key: secret
+
+          resources:
+            limits:
+              memory: "2048Mi"
+              cpu: "1000m"
+            requests:
+              memory: "256Mi"
+              cpu: "250m"
+
+          volumeMounts:
+            - name: onlyoffice-data
+              mountPath: /var/www/onlyoffice/Data
+            - name: onlyoffice-logs
+              mountPath: /var/log/onlyoffice
+
+      volumes:
+        - name: onlyoffice-data
+          persistentVolumeClaim:
+            claimName: onlyoffice-data
+        - name: onlyoffice-logs
+          persistentVolumeClaim:
+            claimName: onlyoffice-logs

deploy/app/onlyoffice/kustomization.yaml

@@ -6,7 +6,6 @@ secretGenerator:
     envs:
       - ./.env.d/onlyoffice.env
 
-
 generatorOptions:
   disableNameSuffixHash: true
 namespace: cloud-limbosolutions-com
@@ -14,3 +13,4 @@ namespace: cloud-limbosolutions-com
 resources:
   - ./deployment.yaml
   - ./service.yaml
+  - ./pvc.yaml

deploy/app/onlyoffice/pvc.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: onlyoffice-data
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 8Gi
+---
+
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: onlyoffice-logs
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi

deploy/infra/ingress.yaml

@@ -54,7 +54,7 @@ spec:
       middlewares:
           # middleware managed by icarus
          - name: authentik-forward-auth
-           namespace: kube-system
+           namespace: traefik-common
          - name: nextcloud-security-headers
          - name: rate-limit