Kimi minimal: add station folio-spec + SA

Author: MWest2020

gitops/apps/nldoc/kimi-minimal/deployments.yaml

@@ -1125,6 +1125,137 @@ items:
         - name: tmp
           emptyDir: {}
 
+# Station: folio-spec
+- apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: kimi-station-folio-spec
+    labels:
+      app.kubernetes.io/name: kimi
+      app.kubernetes.io/instance: kimi
+      app.kubernetes.io/component: station.folio-spec
+  spec:
+    replicas: 1
+    selector:
+      matchLabels:
+        app.kubernetes.io/name: kimi
+        app.kubernetes.io/instance: kimi
+        app.kubernetes.io/component: station.folio-spec
+    template:
+      metadata:
+        labels:
+          app.kubernetes.io/name: kimi
+          app.kubernetes.io/instance: kimi
+          app.kubernetes.io/component: station.folio-spec
+      spec:
+        serviceAccountName: kimi-station--folio-spec
+        automountServiceAccountToken: false
+        securityContext:
+          fsGroup: 1001
+          fsGroupChangePolicy: Always
+        containers:
+        - name: station
+          image: registry.gitlab.com/logius/nldoc/worker/stations:13.0.1
+          imagePullPolicy: IfNotPresent
+          env:
+          - name: NODE_TLS_REJECT_UNAUTHORIZED
+            value: "0"
+          - name: AMQP_HOST
+            value: rabbitmq.nldoc.svc.cluster.local
+          - name: AMQP_PROTOCOL
+            value: amqp
+          - name: AMQP_PORT
+            value: "5672"
+          - name: AMQP_USER
+            valueFrom:
+              secretKeyRef:
+                name: rabbitmq-default-user
+                key: username
+          - name: AMQP_USERNAME
+            valueFrom:
+              secretKeyRef:
+                name: rabbitmq-default-user
+                key: username
+          - name: AMQP_PASS
+            valueFrom:
+              secretKeyRef:
+                name: rabbitmq-default-user
+                key: password
+          - name: AMQP_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: rabbitmq-default-user
+                key: password
+          - name: STATION_CONFIGURATION
+            value: |
+              {"input":{"aggregation":{"countAttribute":"pageCount","indexing":"one-based"},"requiredAttributes":[{"behavior":"await_all","name":"content"}],"type":"folio"},"output":{"type":"spec"},"workerResult":"fileWorkerResult"}
+          - name: POSTGRES_HOST
+            value: nldoc-postgres.nldoc.svc.cluster.local
+          - name: POSTGRES_PORT
+            value: "5432"
+          - name: POSTGRES_DB
+            value: nldoc
+          - name: POSTGRES_USER
+            valueFrom:
+              secretKeyRef:
+                name: nldoc.nldoc-postgres.credentials.postgresql.acid.zalan.do
+                key: username
+          - name: POSTGRES_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: nldoc.nldoc-postgres.credentials.postgresql.acid.zalan.do
+                key: password
+          - name: POSTGRES_SCHEMA
+            value: public
+          - name: POSTGRES_SSL
+            value: require
+          - name: PGSSLMODE
+            value: require
+          - name: POSTGRES_POOL_SIZE
+            value: "20"
+          - name: S3_HOST
+            value: minio.nldoc.svc.cluster.local
+          - name: S3_PORT
+            value: "9000"
+          - name: S3_BUCKET_NAME
+            value: files
+          - name: S3_USE_SSL
+            value: "false"
+          - name: S3_SCHEME
+            value: http
+          - name: S3_FORCE_PATH_STYLE
+            value: "true"
+          - name: POSTGRESQL_USERNAME
+            valueFrom:
+              secretKeyRef:
+                name: nldoc.nldoc-postgres.credentials.postgresql.acid.zalan.do
+                key: username
+          - name: POSTGRESQL_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: nldoc.nldoc-postgres.credentials.postgresql.acid.zalan.do
+                key: password
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+            limits:
+              cpu: 150m
+              memory: 192Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 1001
+            runAsGroup: 1001
+          volumeMounts:
+          - name: tmp
+            mountPath: /tmp
+            subPath: tmp-dir
+        volumes:
+        - name: tmp
+          emptyDir: {}
+
 # Station: page-content
 - apiVersion: apps/v1
   kind: Deployment

gitops/apps/nldoc/kimi-minimal/sa.yaml

@@ -26,6 +26,11 @@ items:
   metadata:
     name: kimi-station--pdf-folio
     namespace: nldoc
+- apiVersion: v1
+  kind: ServiceAccount
+  metadata:
+    name: kimi-station--folio-spec
+    namespace: nldoc
 - apiVersion: v1
   kind: ServiceAccount
   metadata: