Migrate to using EnvFrom with the use of Infisical Secret sync for env vars

2026-08-23 18:23:56 +02:00
parent 19bab56874
commit 7956c6b1b9
9 changed files with 39 additions and 45 deletions
@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: uptime-kuma-mariadb
+  namespace: uptime-kuma
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: uptime-kuma-mariadb
+  serviceName: uptime-kuma-mariadb
+  template:
+    metadata:
+      labels:
+        app: uptime-kuma-mariadb
+    spec:
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 60
+      containers:
+        - name: uptime-kuma-mariadb
+          image: mariadb:11
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          ports:
+            - containerPort: 3306
+          volumeMounts:
+            - name: uptime-kuma-mariadb-database
+              mountPath: /var/lib/mysql
+          # MARIADB_USER/PASSWORD/DATABASE come from the Secret.
+          envFrom:
+            - secretRef:
+                name: uptime-kuma-mariadb-secrets
+          env:
+            - name: MARIADB_RANDOM_ROOT_PASSWORD
+              value: "true"
+      volumes:
+        - name: uptime-kuma-mariadb-database
+          persistentVolumeClaim:
+            claimName: uptime-kuma-mariadb-pvc