infra/stacks/stirling-pdf/main.tf
Viktor Barzin 56ddee457a fix: openclaw policy violation + reduce memory requests for capacity
- openclaw: fix Kyverno policy violation (node:22-alpine ->
  docker.io/library/node:22-alpine), reduce request to 1536Mi
  with 2Gi limit for overcommit
- rybbit/clickhouse: reduce 1Gi -> 768Mi (frees 256Mi)
- stirling-pdf: reduce 1536Mi -> 1200Mi (frees 336Mi)
2026-03-15 10:37:58 +00:00

122 lines
2.8 KiB
HCL

variable "tls_secret_name" {
type = string
sensitive = true
}
variable "nfs_server" { type = string }
resource "kubernetes_namespace" "stirling-pdf" {
metadata {
name = "stirling-pdf"
labels = {
"istio-injection" : "disabled"
tier = local.tiers.aux
}
}
}
module "tls_secret" {
source = "../../modules/kubernetes/setup_tls_secret"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
tls_secret_name = var.tls_secret_name
}
module "nfs_configs" {
source = "../../modules/kubernetes/nfs_volume"
name = "stirling-pdf-configs"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
nfs_server = var.nfs_server
nfs_path = "/mnt/main/stirling-pdf"
}
resource "kubernetes_deployment" "stirling-pdf" {
metadata {
name = "stirling-pdf"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
labels = {
app = "stirling-pdf"
tier = local.tiers.aux
}
}
spec {
replicas = 1
selector {
match_labels = {
app = "stirling-pdf"
}
}
template {
metadata {
labels = {
app = "stirling-pdf"
}
}
spec {
container {
image = "stirlingtools/stirling-pdf:latest"
name = "stirling-pdf"
resources {
requests = {
cpu = "25m"
memory = "1200Mi"
}
limits = {
memory = "1200Mi"
}
}
port {
container_port = 8080
}
volume_mount {
name = "configs"
mount_path = "/configs"
}
}
volume {
name = "configs"
persistent_volume_claim {
claim_name = module.nfs_configs.claim_name
}
}
}
}
}
}
resource "kubernetes_service" "stirling-pdf" {
metadata {
name = "stirling-pdf"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
labels = {
"app" = "stirling-pdf"
}
}
spec {
selector = {
app = "stirling-pdf"
}
port {
name = "http"
port = 80
target_port = 8080
}
}
}
module "ingress" {
source = "../../modules/kubernetes/ingress_factory"
namespace = kubernetes_namespace.stirling-pdf.metadata[0].name
name = "stirling-pdf"
tls_secret_name = var.tls_secret_name
rybbit_site_id = "a55ac54ec749"
extra_annotations = {
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/name" = "Stirling PDF"
"gethomepage.dev/description" = "PDF toolkit"
"gethomepage.dev/icon" = "stirling-pdf.png"
"gethomepage.dev/group" = "Productivity"
"gethomepage.dev/pod-selector" = ""
}
}