Jeffrey/Kubernetes-Manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Outline

Browse Source
This commit is contained in:
Jeffrey
2026-06-22 23:32:35 +02:00
parent 62137018ea
commit be9bd3a227
15 changed files with 417 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

118
applications/outline/outline/outline-deployment.yaml Normal file
View File

@@ -0,0 +1,118 @@
apiVersion: apps/v1
kind: Deployment
metadata:
namespace: outline
name: outline
spec:
replicas: 1
selector:
matchLabels:
app: outline
template:
metadata:
labels:
app: outline
spec:
restartPolicy: Always
terminationGracePeriodSeconds: 60
containers:
- name: outline
image: docker.getoutline.com/outlinewiki/outline:1.8.1
resources:
requests:
memory: "512Mi"
cpu: "250m"
limits:
memory: "2Gi"
cpu: "2000m"
ports:
- containerPort: 3000
env:
- name: TZ
value: "Europe/Brussels"
- name: NODE_ENV
value: "production"
- name: URL
value: "https://outline.jsme.be"
- name: PORT
value: "3000"
# TLS is terminated at the gateway and X-Forwarded-Proto is set to
# https on the HTTPRoute, so Outline must not force an https redirect.
- name: FORCE_HTTPS
value: "false"
# --- Database (PostgreSQL) ---
- name: DATABASE_URL
valueFrom:
secretKeyRef:
name: outline-secrets
key: database_url
# In-cluster Postgres has no TLS; disable SSL on the connection.
- name: PGSSLMODE
value: "disable"
# --- Cache / queue (Redis-compatible Valkey) ---
- name: REDIS_URL
value: "redis://outline-redis.outline.svc.cluster.local:6379"
# --- Secrets ---
- name: SECRET_KEY
valueFrom:
secretKeyRef:
name: outline-secrets
key: secret_key
- name: UTILS_SECRET
valueFrom:
secretKeyRef:
name: outline-secrets
key: utils_secret
# --- File storage (MinIO / S3) ---
- name: FILE_STORAGE
value: "s3"
- name: AWS_REGION
value: "us-east-1"
- name: AWS_S3_UPLOAD_BUCKET_URL
value: "https://s3.jsme.be"
- name: AWS_S3_UPLOAD_BUCKET_NAME
value: "outline"
- name: AWS_S3_FORCE_PATH_STYLE
value: "true"
- name: AWS_S3_ACL
value: "private"
- name: AWS_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
name: outline-secrets
key: s3_access_key
- name: AWS_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
name: outline-secrets
key: s3_secret_key
# --- Authentication (Authentik OIDC) ---
- name: OIDC_DISPLAY_NAME
value: "Authentik"
- name: OIDC_AUTH_URI
value: "https://auth.jsme.be/application/o/authorize/"
- name: OIDC_TOKEN_URI
value: "https://auth.jsme.be/application/o/token/"
- name: OIDC_USERINFO_URI
value: "https://auth.jsme.be/application/o/userinfo/"
- name: OIDC_LOGOUT_URI
value: "https://auth.jsme.be/application/o/outline/end-session/"
- name: OIDC_USERNAME_CLAIM
value: "preferred_username"
- name: OIDC_SCOPES
value: "openid profile email"
- name: OIDC_CLIENT_ID
valueFrom:
secretKeyRef:
name: outline-secrets
key: oidc_client_id
- name: OIDC_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: outline-secrets
key: oidc_client_secret

51
applications/outline/outline/outline-httproute.yaml Normal file
View File

@@ -0,0 +1,51 @@
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: outline-route
namespace: outline
spec:
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: gateway-internal
namespace: envoy-gateway
sectionName: outline
- group: gateway.networking.k8s.io
kind: Gateway
name: gateway-public
namespace: envoy-gateway
sectionName: outline
hostnames:
- "outline.jsme.be"
rules:
- matches:
- path:
type: PathPrefix
value: /
filters:
- type: RequestHeaderModifier
requestHeaderModifier:
set:
- name: X-Forwarded-Host
value: "outline.jsme.be"
- name: X-Forwarded-Proto
value: https
- type: ResponseHeaderModifier
responseHeaderModifier:
set:
- name: Strict-Transport-Security
value: "max-age=31536000; includeSubDomains"
- name: X-Content-Type-Options
value: nosniff
- name: X-Frame-Options
value: SAMEORIGIN
- name: Referrer-Policy
value: strict-origin-when-cross-origin
- name: Permissions-Policy
value: "camera=(), microphone=(), geolocation=(), payment=()"
backendRefs:
- name: outline
port: 3000
kind: Service
group: ""
weight: 1

13
applications/outline/outline/outline-service.yaml Normal file
View File

@@ -0,0 +1,13 @@
apiVersion: v1
kind: Service
metadata:
namespace: outline
name: outline
spec:
selector:
app: outline
ports:
- protocol: TCP
port: 3000
targetPort: 3000
type: ClusterIP

12
applications/outline/postgres/outline-postgres-persistentvolumeclaim.yaml Normal file
View File

@@ -0,0 +1,12 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
namespace: outline
name: outline-postgres-pvc
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn-static
resources:
requests:
storage: 5Gi

14
applications/outline/postgres/outline-postgres-service.yaml Normal file
View File

@@ -0,0 +1,14 @@
apiVersion: v1
kind: Service
metadata:
name: outline-postgres
namespace: outline
spec:
selector:
app: outline-postgres
type: ClusterIP
ports:
- name: outline-postgres-port
protocol: TCP
port: 5432
targetPort: 5432

55
applications/outline/postgres/outline-postgres-statefulset.yaml Normal file
View File

@@ -0,0 +1,55 @@
apiVersion: apps/v1
kind: StatefulSet
metadata:
namespace: outline
name: outline-postgres
spec:
replicas: 1
serviceName: outline-postgres
selector:
matchLabels:
app: outline-postgres
template:
metadata:
labels:
app: outline-postgres
spec:
restartPolicy: Always
terminationGracePeriodSeconds: 60
containers:
- name: outline-postgres
image: postgres:18
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "1Gi"
cpu: "500m"
ports:
- containerPort: 5432
volumeMounts:
- name: outline-postgres-data
mountPath: /var/lib/postgresql/data
env:
- name: PGDATA
value: "/var/lib/postgresql/data/pgdata"
- name: POSTGRES_USER
valueFrom:
secretKeyRef:
name: outline-secrets
key: db_user
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: outline-secrets
key: db_password
- name: POSTGRES_DB
valueFrom:
secretKeyRef:
name: outline-secrets
key: db_name
volumes:
- name: outline-postgres-data
persistentVolumeClaim:
claimName: outline-postgres-pvc

28
applications/outline/redis/outline-redis-deployment.yaml Normal file
View File

@@ -0,0 +1,28 @@
apiVersion: apps/v1
kind: Deployment
metadata:
namespace: outline
name: outline-redis
spec:
replicas: 1
selector:
matchLabels:
app: outline-redis
template:
metadata:
labels:
app: outline-redis
spec:
restartPolicy: Always
containers:
- name: outline-redis
image: valkey/valkey:9
resources:
requests:
memory: "64Mi"
cpu: "50m"
limits:
memory: "256Mi"
cpu: "200m"
ports:
- containerPort: 6379

14
applications/outline/redis/outline-redis-service.yaml Normal file
View File

@@ -0,0 +1,14 @@
apiVersion: v1
kind: Service
metadata:
name: outline-redis
namespace: outline
spec:
selector:
app: outline-redis
type: ClusterIP
ports:
- name: outline-redis-port
protocol: TCP
port: 6379
targetPort: 6379