k8s: fixes and formating

- Add checkmk secrets example
- space-tab fixes (linter)
- switcher kener redis to statefulset
- disabled netronome voulme mount (not needed). postgres statefulset instead
-  switched naio to 8888 port (traefik port conflict)
- changed nextcloud ips and ports to prod

nextcloud/compose.yaml

@@ -9,7 +9,7 @@ services:
       - /var/run/docker.sock:/var/run/docker.sock
       - /dev/dri:/dev/dri
     ports:
-      - 8080:8080
+      - 8888:8080
     networks:
       - nextcloud-aio
       - proxy # Optional: Connects the mastercontainer to the proxy network in order to make the built-in reverse proxy detection work. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md

nextcloud/k8s/external-service.yaml

@@ -5,8 +5,8 @@ metadata:
   namespace: nextcloud
 spec:
   ports:
-  - port: 11000
-    targetPort: 11000
+    - port: 11000
+      targetPort: 11000
 ---
 apiVersion: discovery.k8s.io/v1
 kind: EndpointSlice
@@ -17,11 +17,11 @@ metadata:
     kubernetes.io/service-name: nextcloud-apache
 addressType: IPv4
 ports:
-- port: 11000
-  protocol: TCP
+  - port: 11000
+    protocol: TCP
 endpoints:
-- addresses:
-  - "192.168.49.1"
+  - addresses:
+      - "192.168.88.100"
 ---
 apiVersion: v1
 kind: Service
@@ -30,8 +30,8 @@ metadata:
   namespace: nextcloud
 spec:
   ports:
-  - port: 8080
-    targetPort: 8080
+    - port: 8080
+      targetPort: 8888
 ---
 apiVersion: discovery.k8s.io/v1
 kind: EndpointSlice
@@ -42,8 +42,8 @@ metadata:
     kubernetes.io/service-name: nextcloud-aio
 addressType: IPv4
 ports:
-- port: 8080
-  protocol: TCP
+  - port: 8888
+    protocol: TCP
 endpoints:
-- addresses:
-  - "192.168.49.1"
+  - addresses:
+      - "192.168.88.100"

nextcloud/k8s/ingress.yaml

@@ -8,13 +8,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nextcloud.forust.xyz`)
-    kind: Rule
-    middlewares:
-    - name: nextcloud-chain@file
-    services:
-    - name: nextcloud-apache
-      port: 11000
+    - match: Host(`nextcloud.forust.xyz`)
+      kind: Rule
+      middlewares:
+        - name: nextcloud-chain@file
+      services:
+        - name: nextcloud-apache
+          port: 11000
   tls:
     certResolver: letsencrypt
 ---
@@ -27,13 +27,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nextcloud.workstation.internal`)
-    kind: Rule
-    middlewares:
-    - name: nextcloud-chain@file
-    services:
-    - name: nextcloud-apache
-      port: 11000
+    - match: Host(`nextcloud.workstation.internal`)
+      kind: Rule
+      middlewares:
+        - name: nextcloud-chain@file
+      services:
+        - name: nextcloud-apache
+          port: 11000
   tls:
     secretName: local-tls
 ---
@@ -46,13 +46,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nextcloud.gigaforust.internal`)
-    kind: Rule
-    middlewares:
-    - name: nextcloud-chain@file
-    services:
-    - name: nextcloud-apache
-      port: 11000
+    - match: Host(`nextcloud.gigaforust.internal`)
+      kind: Rule
+      middlewares:
+        - name: nextcloud-chain@file
+      services:
+        - name: nextcloud-apache
+          port: 11000
   tls:
     secretName: local-tls
 ---
@@ -66,13 +66,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`naio.forust.xyz`)
-    kind: Rule
-    services:
-    - name: nextcloud-aio
-      port: 8080
-      scheme: https
-      serversTransport: insecureTransport@file
+    - match: Host(`naio.forust.xyz`)
+      kind: Rule
+      services:
+        - name: nextcloud-aio
+          port: 8888
+          scheme: https
+          serversTransport: insecure-transport # <-- Ссылка на ваш CRD ресурс вместо @file
   tls:
     certResolver: letsencrypt
 ---
@@ -85,13 +85,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`naio.workstation.internal`)
-    kind: Rule
-    services:
-    - name: nextcloud-aio
-      port: 8080
-      scheme: https
-      serversTransport: insecureTransport@file
+    - match: Host(`naio.workstation.internal`)
+      kind: Rule
+      services:
+        - name: nextcloud-aio
+          port: 8888
+          scheme: https
+          serversTransport: insecure-transport
   tls:
     secretName: local-tls
 ---
@@ -104,12 +104,12 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`naio.gigaforust.internal`)
-    kind: Rule
-    services:
-    - name: nextcloud-aio
-      port: 8080
-      scheme: https
-      serversTransport: insecureTransport@file
+    - match: Host(`naio.gigaforust.internal`)
+      kind: Rule
+      services:
+        - name: nextcloud-aio
+          port: 8888
+          scheme: https
+          serversTransport: insecure-transport
   tls:
     secretName: local-tls