From 1a127b2a346d5009e909fcde6f239b44406d043f Mon Sep 17 00:00:00 2001
From: Serge van Ginderachter <serge@vanginderachter.be>
Date: Thu, 15 Apr 2021 22:31:12 +0200
Subject: [PATCH] Add an example manifest for kubernetes deployment

---
 examples/kubernetes/simple-manifest-yaml | 156 +++++++++++++++++++++++
 1 file changed, 156 insertions(+)
 create mode 100644 examples/kubernetes/simple-manifest-yaml

diff --git a/examples/kubernetes/simple-manifest-yaml b/examples/kubernetes/simple-manifest-yaml
new file mode 100644
index 0000000..02c2154
--- /dev/null
+++ b/examples/kubernetes/simple-manifest-yaml
@@ -0,0 +1,156 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: pastebin
+---
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: pastey-data
+  namespace: pastebin
+  labels:
+    app.kubernetes.io/name: pastey
+spec:
+  accessModes:
+    - "ReadWriteMany"
+  resources:
+    requests:
+      storage: "1Gi"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pastey-web
+  namespace: pastebin
+  labels:
+    app.kubernetes.io/name: pastey
+spec:
+  type: ClusterIP
+  ports:
+    - name: web
+      port: 5000
+      protocol: TCP
+      targetPort: 5000
+  selector:
+    app.kubernetes.io/name: pastey
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pastey
+  namespace: pastebin
+  labels:
+    app.kubernetes.io/name: pastey
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: pastey
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: pastey
+    spec:
+      initContainers:
+      containers:
+        - name: pastey
+          image: cesura/pastey:latest
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: web
+              containerPort: 5000
+              protocol: TCP
+          livenessProbe:
+            httpGet:
+              path: /
+              port: web
+              scheme: HTTP
+            initialDelaySeconds: 0
+            failureThreshold: 5
+            timeoutSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /
+              port: web
+              scheme: HTTP
+            initialDelaySeconds: 0
+            failureThreshold: 5
+            timeoutSeconds: 10
+          env:
+            - name: PASTEY_DATA_DIRECTORY
+              value: "./data"
+            - name: PASTEY_LISTEN_ADDRESS
+              value: "0.0.0.0"
+            - name: PASTEY_LISTEN_PORT
+              value: "5000"
+            - name: PASTEY_USE_WHITELIST
+              value: "True"
+            - name: PASTEY_WHITELIST_CIDR
+              value: "127.0.0.1/32,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
+            #- name: PASTEY_BLACKLIST_CIDR
+            #  value: ""
+            - name: PASTEY_RESTRICT_PASTING
+              value: "True"
+            - name: PASTEY_RESTRICT_RAW_PASTING
+              value: "True"
+            - name: PASTEY_RATE_LIMIT
+              value: "5/hour"
+            - name: PASTEY_GUESS_THRESHOLD
+              value: "0.20"
+            - name: PASTEY_RECENT_PASTES
+              value: "20"
+            - name: PASTEY_BEHIND_PROXY
+              value: "True"
+            - name: PASTEY_SHOW_CLI_BUTTON
+              value: "False"
+          volumeMounts:
+          - mountPath: /data
+            name: pastey-data
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: antiaffinity
+                operator: In
+                values:
+                - pastey-instance
+            topologyKey: kubernetes.io/hostname
+      volumes:
+      - name: pastey-data
+        persistentVolumeClaim:
+          claimName: pastey-data
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pastey
+  namespace: pastebin
+  labels:
+    app.kubernetes.io/name: pastey
+  annotations:
+    cert-manager.io/cluster-issuer: acme
+    kubernetes.io/ingress.class: ingress-nginx
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    # https://kubernetes.github.io/ingress-nginx/examples/affinity/cookie/
+    nginx.ingress.kubernetes.io/affinity: cookie
+    nginx.ingress.kubernetes.io/affinity-mode: balanced
+    nginx.ingress.kubernetes.io/session-cookie-name: pastey
+    nginx.ingress.kubernetes.io/session-cookie-max-age: "30"
+spec:
+  tls:
+    - hosts:
+        - "pastebin.example.com"
+      secretName: pastey
+  rules:
+    - host: pastebin.example.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: pastey-web
+                port:
+                  number: 5000