Deploy pgAdmin (DB Interface)

services/databases/pgadmin/00-namespace.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: pgadmin

services/databases/pgadmin/01-secrets.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: pgadmin-secret
+  namespace: pgadmin
+type: Opaque
+stringData:
+  PGADMIN_DEFAULT_EMAIL: <FILL-IN>
+  PGADMIN_DEFAULT_PASSWORD: <FILL-IN>

services/databases/pgadmin/02-deployment.yaml

@@ -0,0 +1,79 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pgadmin
+  namespace: pgadmin
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: pgadmin
+  template:
+    metadata:
+      labels:
+        app: pgadmin
+    spec:
+      containers:
+        - name: pgadmin
+          image: dpage/pgadmin4:8.14
+          imagePullPolicy: IfNotPresent # ou Always, para garantir que temos a última versão?
+          resources: # Que valores devemos usar, para já temos isto como default?
+            limits:
+              memory: "512Mi" # mais, menos?
+              cpu: "1" # 1, 500m, ...?
+              requests:
+                memory: "32Mi" # mais, menos?
+                cpu: "0m" # 0m, 100m, ...?
+          ports: # que port usar? 80 ou outro?
+            - containerPort: 80
+          envFrom:
+            - secretRef:
+                name: pgadmin-secret
+          env:
+            - name: PGADMIN_CONFIG_MFA_ENABLED
+              value: "True"
+            - name: PGADMIN_CONFIG_MFA_FORCE_REGISTRATION
+              value: "True"
+            - name: PGADMIN_CONFIG_MFA_SUPPORTED_METHODS
+              value: "['authenticator']"
+          volumeMounts:
+            - name: pgadmin-config
+              mountPath: /pgadmin4/servers.json
+              subPath: servers.json
+              readOnly: true
+            - name: pgadmin-data
+              mountPath: /var/lib/pgadmin
+      volumes:
+        - name: pgadmin-config
+          configMap:
+            name: pgadmin-config
+        - name: pgadmin-data
+          persistentVolumeClaim:
+            claimName: pgadmin-data
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pgadmin-data
+  namespace: pgadmin
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pgadmin
+  namespace: pgadmin
+spec:
+  selector:
+    app: pgadmin
+  ports:
+    - port: 80
+      targetPort: 80
+      protocol: TCP # é preciso especificar o protocolo?
+  type: ClusterIP # ou NodePort, LoadBalancer? ClusterIP é suficiente para o Traefik aceder ao serviço, certo? Precisamos de deixar definido mesmo?

services/databases/pgadmin/03-certificates.yaml

@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: pgadmin-cert
+  namespace: pgadmin
+spec:
+  secretName: pgadmin-cert
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  commonName: pgadmin.niaefeup.pt
+  dnsNames:
+    - pgadmin.niaefeup.pt

services/databases/pgadmin/04-ingress-routes.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: pgadmin-https
+  namespace: pgadmin
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`pgadmin.niaefeup.pt`)
+      kind: Rule
+      services:
+        - name: pgadmin
+          port: 80
+  tls:
+    secretName: pgadmin-cert

services/databases/pgadmin/05-config.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pgadmin-config
+  namespace: pgadmin
+data:
+  # Configurações adicionais do pgAdmin podem ser adicionadas aqui