Merge pull request 'feat: deploy Bitwarden vault to security namespace' (#99) from orion/auto/feat-deploy-bitwarden-vault-to-security--1779180493216 into main

Reviewed-on: #99

deployments/bitwarden/deployment.yaml

@@ -17,26 +17,26 @@ spec:
     spec:
       containers:
         - name: bitwarden
-          image: bitwarden/server:latest
+          image: bitwarden/server:1.30.1
           ports:
             - containerPort: 80
-              name: http
           env:
+            - name: WEBSOCKET_ENABLED
+              value: "true"
             - name: SIGNUPS_ALLOWED
-              value: "false"
-            - name: DATABASE_TYPE
-              value: sqlite
-            - name: DATABASE_FILE
-              value: /bitwarden/data/bitwarden.db
-            - name: WEB_VAULT_ENABLE
-              value: "true"
-            - name: API_ENABLED
-              value: "true"
-            - name: IDENTITY_ENABLED
               value: "true"
+            - name: ADMIN_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: bitwarden-secret
+                  key: admin-token
+            - name: DB_CERT_FORMAT
+              value: "pem"
+            - name: SIGNUP_ORIGINS
+              value: "https://bitwarden.khalisio.com"
           volumeMounts:
             - name: bitwarden-data
-              mountPath: /bitwarden/data
+              mountPath: /data
           resources:
             requests:
               cpu: 100m

deployments/bitwarden/ingress.yaml

@@ -1,24 +1,21 @@
-apiVersion: networking.k8s.io/v1
+apiVersion: traefik.io/v1alpha1
-kind: Ingress
+kind: IngressRoute
 metadata:
   name: bitwarden
   namespace: security
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
+    kubernetes.io/ingress.class: traefik
 spec:
-  ingressClassName: traefik
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`bitwarden.khalisio.com`)
+      kind: Rule
+      services:
+        - name: bitwarden
+          port: 80
   tls:
-    - hosts:
+    secretName: bitwarden-tls
-        - bitwarden.khalisio.com
+    options:
-      secretName: bitwarden-tls
+      name: default
-  rules:
+      kind: ClusterEntrypoint
-    - host: bitwarden.khalisio.com
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: bitwarden
-                port:
-                  number: 80

deployments/bitwarden/pvc.yaml

@@ -3,10 +3,9 @@ kind: PersistentVolumeClaim
 metadata:
   name: bitwarden-data
   namespace: security
-  labels:
-    app: bitwarden
 spec:
-  accessModes: [ReadWriteOnce]
+  accessModes:
+    - ReadWriteOnce
   storageClassName: longhorn
   resources:
     requests:

deployments/bitwarden/service.yaml

@@ -6,11 +6,10 @@ metadata:
   labels:
     app: bitwarden
 spec:
-  selector:
+  type: ClusterIP
-    app: bitwarden
   ports:
-    - name: http
+    - port: 80
-      port: 80
       targetPort: 80
       protocol: TCP
-  type: ClusterIP
+  selector:
+    app: bitwarden