feat(draw.io): added base/overlay for deploying draw.io

Author: GizzmoShifu

apps/base/drawio/deployment.yaml

@@ -0,0 +1,41 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: drawio
+  namespace: drawio
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: drawio
+  template:
+    metadata:
+      labels:
+        app: drawio
+        app.kubernetes.io/name: drawio
+    spec:
+      securityContext:
+        fsGroup: 1000
+      containers:
+        - name: drawio
+          image: jgraph/drawio:14.6.13-alpine
+          ports:
+            - containerPort: 8080
+          resources:
+            requests:
+              cpu: "10m"
+              memory: "64Mi"
+            limits:
+              memory: "128Mi"
+          securityContext:
+            readOnlyRootFilesystem: false
+            runAsNonRoot: true
+            runAsUser: 1000
+            seccompProfile:
+              type: RuntimeDefault
+          volumeMounts:
+            - name: tmp-volume
+              mountPath: /tmp
+      volumes:
+        - name: tmp-volume
+          emptyDir: {}

apps/base/drawio/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - service.yaml
+  - deployment.yaml

apps/base/drawio/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: drawio

apps/base/drawio/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: drawio
+  namespace: drawio
+spec:
+  selector:
+    app: drawio
+  ports:
+    - port: 8080
+      targetPort: 8080

apps/template-cluster/drawio/drawio-patch.yaml

@@ -0,0 +1,21 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: drawio
+  namespace: drawio
+spec:
+  template:
+    spec:
+      nodeSelector:
+        node-role.kubernetes.io/cpu-worker: "true"
+      containers:
+        - name: drawio
+          image: jgraph/drawio:latest
+          volumeMounts:
+            # Mounting to /opt/drawio/data is a safe standard
+            - name: drawio-storage
+              mountPath: /opt/drawio/data
+      volumes:
+        - name: drawio-storage
+          persistentVolumeClaim:
+            claimName: drawio-data

apps/template-cluster/drawio/ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: drawio-ingress
+  namespace: drawio
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    cert-manager.io/cluster-issuer: letsencrypt   # CHANGE to your cert-manager cluster-issuer
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: draw.example.com       # CHANGE to your draw.io URL
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: drawio
+                port:
+                  number: 8080
+  tls:
+    - hosts:
+        - draw.example.com         # CHANGE to your draw.io URL
+      secretName: drawio-tls

apps/template-cluster/drawio/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base/drawio
+  - pvc.yaml
+  - ingress.yaml
+
+patches:
+  - path: drawio-patch.yaml

apps/template-cluster/drawio/pvc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: drawio-data
+  namespace: drawio
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi