336 lines
11 KiB
YAML
336 lines
11 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: phppgadmin-config
|
|
namespace: default
|
|
labels:
|
|
app.kubernetes.io/name: phppgadmin
|
|
data:
|
|
config.inc.php: |
|
|
<?php
|
|
|
|
/**
|
|
* Central phpPgAdmin configuration. As a user you may modify the
|
|
* settings here for your particular configuration.
|
|
*
|
|
* $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
|
|
*/
|
|
|
|
// An example server. Create as many of these as you wish,
|
|
// indexed from zero upwards.
|
|
|
|
// Display name for the server on the login screen
|
|
$conf['servers'][0]['desc'] = 'arschrock';
|
|
|
|
// Hostname or IP address for server. Use '' for UNIX domain socket.
|
|
// use 'localhost' for TCP/IP connection on this computer
|
|
$conf['servers'][0]['host'] = 'arschrock';
|
|
|
|
// Database port on server (5432 is the PostgreSQL default)
|
|
$conf['servers'][0]['port'] = 5432;
|
|
|
|
// Database SSL mode
|
|
// Possible options: disable, allow, prefer, require
|
|
// To require SSL on older servers use option: legacy
|
|
// To ignore the SSL mode, use option: unspecified
|
|
$conf['servers'][0]['sslmode'] = 'allow';
|
|
|
|
// Change the default database only if you cannot connect to template1.
|
|
// For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
|
|
$conf['servers'][0]['defaultdb'] = 'template1';
|
|
|
|
// Specify the path to the database dump utilities for this server.
|
|
// You can set these to '' if no dumper is available.
|
|
$conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
|
|
$conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
|
|
|
|
$conf['servers'][1]['desc'] = 'nextcloud-postgresql.nextcloud.svc.cluster.local';
|
|
$conf['servers'][1]['host'] = 'nextcloud-postgresql.nextcloud.svc.cluster.local';
|
|
$conf['servers'][1]['port'] = 5432;
|
|
$conf['servers'][1]['sslmode'] = 'allow';
|
|
$conf['servers'][1]['defaultdb'] = 'template1';
|
|
|
|
$conf['servers'][2]['desc'] = 'postgresql.default.svc.cluster.local';
|
|
$conf['servers'][2]['host'] = 'postgresql.default.svc.cluster.local';
|
|
$conf['servers'][2]['port'] = 5432;
|
|
$conf['servers'][2]['sslmode'] = 'allow';
|
|
$conf['servers'][2]['defaultdb'] = 'template1';
|
|
|
|
$conf['servers'][3]['desc'] = 'postgresql.authentik.svc.cluster.local';
|
|
$conf['servers'][3]['host'] = 'postgresql.authentik.svc.cluster.local';
|
|
$conf['servers'][3]['port'] = 5432;
|
|
$conf['servers'][3]['sslmode'] = 'allow';
|
|
$conf['servers'][3]['defaultdb'] = 'template1';
|
|
|
|
$conf['servers'][4]['desc'] = 'postgresql.gramps.svc.cluster.local';
|
|
$conf['servers'][4]['host'] = 'postgresql.gramps.svc.cluster.local';
|
|
$conf['servers'][4]['port'] = 5432;
|
|
$conf['servers'][4]['sslmode'] = 'allow';
|
|
$conf['servers'][4]['defaultdb'] = 'template1';
|
|
|
|
$conf['servers'][5]['desc'] = 'postgresql.matrix.svc.cluster.local';
|
|
$conf['servers'][5]['host'] = 'postgresql.matrix.svc.cluster.local';
|
|
$conf['servers'][5]['port'] = 5432;
|
|
$conf['servers'][5]['sslmode'] = 'allow';
|
|
$conf['servers'][5]['defaultdb'] = 'template1';
|
|
|
|
/* Groups definition */
|
|
/* Groups allow administrators to logicaly group servers together under
|
|
* group nodes in the left browser tree
|
|
*
|
|
* The group '0' description
|
|
*/
|
|
//$conf['srv_groups'][0]['desc'] = 'group one';
|
|
|
|
/* Add here servers indexes belonging to the group '0' separated by comma */
|
|
//$conf['srv_groups'][0]['servers'] = '0,1,2';
|
|
|
|
/* A server can belong to multi groups. Here server 1 is referenced in both
|
|
* 'group one' and 'group two'*/
|
|
//$conf['srv_groups'][1]['desc'] = 'group two';
|
|
//$conf['srv_groups'][1]['servers'] = '3,1';
|
|
|
|
/* A group can be nested in one or more existing groups using the 'parents'
|
|
* parameter. Here the group 'group three' contains only one server and will
|
|
* appear as a subgroup in both 'group one' and 'group two':
|
|
*/
|
|
//$conf['srv_groups'][2]['desc'] = 'group three';
|
|
//$conf['srv_groups'][2]['servers'] = '4';
|
|
//$conf['srv_groups'][2]['parents'] = '0,1';
|
|
|
|
/* Warning: Only groups with no parents appears at the root of the tree. */
|
|
|
|
/* You can apply specific theme depending on servers, users and databases
|
|
* The priority order is :
|
|
* * the theme defined for a server
|
|
* * the theme defined for a database apply over the server one
|
|
* * the theme defined for a user apply over the database one
|
|
*/
|
|
/* Example for servers */
|
|
//$conf['servers'][0]['theme']['default'] = 'default';
|
|
/* Example for users */
|
|
//$conf['servers'][0]['theme']['user']['specific_user'] = 'default';
|
|
/* Example for databases */
|
|
//$conf['servers'][0]['theme']['db']['specific_db'] = 'default';
|
|
|
|
// Default language. E.g.: 'english', 'polish', etc. See lang/ directory
|
|
// for all possibilities. If you specify 'auto' (the default) it will use
|
|
// your browser preference.
|
|
$conf['default_lang'] = 'auto';
|
|
|
|
// If extra session security is true, then PHP's session cookies will have
|
|
// SameSite cookie flags set to prevent CSRF attacks. If you're using
|
|
// auto-start sessions, autostarted sessions will be destroyed and
|
|
// restarted with SameSite on. If this this solution is not acceptable for
|
|
// your situation, you will need to either turn off auot-start sessions, or
|
|
// turn off secure sessions. Versions of PHP below 7.3 do not have access
|
|
// to this feature and will be vulnerable to CSRF attacks.
|
|
$conf['extra_session_security'] = true;
|
|
|
|
// AutoComplete uses AJAX interaction to list foreign key values
|
|
// on insert fields. It currently only works on single column
|
|
// foreign keys. You can choose one of the following values:
|
|
// 'default on' enables AutoComplete and turns it on by default.
|
|
// 'default off' enables AutoComplete but turns it off by default.
|
|
// 'disable' disables AutoComplete.
|
|
$conf['autocomplete'] = 'default on';
|
|
|
|
// If extra login security is true, then logins via phpPgAdmin with no
|
|
// password or certain usernames (pgsql, postgres, root, administrator)
|
|
// will be denied. Only set this false once you have read the FAQ and
|
|
// understand how to change PostgreSQL's pg_hba.conf to enable
|
|
// passworded local connections.
|
|
$conf['extra_login_security'] = true;
|
|
|
|
// Only show owned databases?
|
|
// Note: This will simply hide other databases in the list - this does
|
|
// not in any way prevent your users from seeing other database by
|
|
// other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
|
|
$conf['owned_only'] = false;
|
|
|
|
// Display comments on objects? Comments are a good way of documenting
|
|
// a database, but they do take up space in the interface.
|
|
$conf['show_comments'] = true;
|
|
|
|
// Display "advanced" objects? Setting this to true will show
|
|
// aggregates, types, operators, operator classes, conversions,
|
|
// languages and casts in phpPgAdmin. These objects are rarely
|
|
// administered and can clutter the interface.
|
|
$conf['show_advanced'] = false;
|
|
|
|
// Display "system" objects?
|
|
$conf['show_system'] = false;
|
|
|
|
// Minimum length users can set their password to.
|
|
$conf['min_password_length'] = 1;
|
|
|
|
// Width of the left frame in pixels (object browser)
|
|
$conf['left_width'] = 200;
|
|
|
|
// Which look & feel theme to use
|
|
$conf['theme'] = 'default';
|
|
|
|
// Show OIDs when browsing tables?
|
|
// Only supported in versions <=11
|
|
$conf['show_oids'] = false;
|
|
|
|
// Max rows to show on a page when browsing record sets
|
|
$conf['max_rows'] = 30;
|
|
|
|
// Max chars of each field to display by default in browse mode
|
|
$conf['max_chars'] = 50;
|
|
|
|
// Send XHTML strict headers?
|
|
$conf['use_xhtml_strict'] = false;
|
|
|
|
// Base URL for PostgreSQL documentation.
|
|
// '%s', if present, will be replaced with the PostgreSQL version
|
|
// (e.g. 8.4 )
|
|
$conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
|
|
|
|
// Configuration for ajax scripts
|
|
// Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
|
|
$conf['ajax_refresh'] = 3;
|
|
|
|
/** Plugins management
|
|
* Add plugin names to the following array to activate them
|
|
* Example:
|
|
* $conf['plugins'] = array(
|
|
* 'Example',
|
|
* 'Slony'
|
|
* );
|
|
*/
|
|
$conf['plugins'] = array();
|
|
|
|
/*****************************************
|
|
* Don't modify anything below this line *
|
|
*****************************************/
|
|
|
|
$conf['version'] = 19;
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: phppgadmin
|
|
namespace: default
|
|
labels:
|
|
app: phppgadmin
|
|
app.kubernetes.io/name: phppgadmin
|
|
spec:
|
|
replicas: 1
|
|
revisionHistoryLimit: 3
|
|
minReadySeconds: 5
|
|
progressDeadlineSeconds: 600
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 0
|
|
maxSurge: 1
|
|
selector:
|
|
matchLabels:
|
|
app: phppgadmin
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
deployment.brunner.ninja/revision: manual
|
|
labels:
|
|
app: phppgadmin
|
|
app.kubernetes.io/name: phppgadmin
|
|
spec:
|
|
automountServiceAccountToken: false
|
|
terminationGracePeriodSeconds: 30
|
|
containers:
|
|
- name: phppgadmin
|
|
# CI replaces latest with the immutable source commit tag on main.
|
|
image: registry.brunner.ninja/feedc0de/phppgadmin:latest
|
|
imagePullPolicy: Always
|
|
ports:
|
|
- name: http
|
|
containerPort: 80
|
|
protocol: TCP
|
|
startupProbe:
|
|
httpGet:
|
|
path: /phppgadmin/
|
|
port: http
|
|
periodSeconds: 2
|
|
timeoutSeconds: 2
|
|
failureThreshold: 60
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /phppgadmin/
|
|
port: http
|
|
periodSeconds: 5
|
|
timeoutSeconds: 3
|
|
failureThreshold: 2
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /phppgadmin/
|
|
port: http
|
|
periodSeconds: 15
|
|
timeoutSeconds: 3
|
|
failureThreshold: 3
|
|
volumeMounts:
|
|
- name: phppgadmin-config
|
|
mountPath: /etc/phppgadmin/config.inc.php
|
|
subPath: config.inc.php
|
|
volumes:
|
|
- name: phppgadmin-config
|
|
configMap:
|
|
name: phppgadmin-config
|
|
imagePullSecrets:
|
|
- name: quay-pull-secret
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: phppgadmin
|
|
namespace: default
|
|
labels:
|
|
app: phppgadmin
|
|
app.kubernetes.io/name: phppgadmin
|
|
spec:
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
protocol: TCP
|
|
targetPort: http
|
|
selector:
|
|
app: phppgadmin
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: phppgadmin
|
|
namespace: default
|
|
labels:
|
|
app.kubernetes.io/name: phppgadmin
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.middlewares: default-phppgadmin-root-redirect@kubernetescrd
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: phppgadmin.brunner.ninja
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: phppgadmin
|
|
port:
|
|
name: http
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: phppgadmin-root-redirect
|
|
namespace: default
|
|
labels:
|
|
app.kubernetes.io/name: phppgadmin
|
|
spec:
|
|
redirectRegex:
|
|
regex: ^https://phppgadmin\.brunner\.ninja/?$
|
|
replacement: https://phppgadmin.brunner.ninja/phppgadmin/
|
|
permanent: true
|