zdashboard.yml

apiVersion: storage.k8s.io/v1beta1
kind: StorageClass
metadata:
  name: manila-cephfs-share
provisioner: manila-provisioner
parameters:
  type: "Meyrin CephFS"
  zones: nova
  osSecretName: os-trustee
  osSecretNamespace: kube-system
  protocol: CEPHFS
  backend: csi-cephfs
  csi-driver: cephfs.csi.ceph.com
  osShareID: b9XXXXf-cfXX-4Xcc-bdad-0dXXXXXXa
  osShareAccessID: 03XXXX87-cXe-4Xc-aX2-b0XXXXXXXXXe
reclaimPolicy: Retain
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: manila-cephfs-pvc
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 100G
  storageClassName: manila-cephfs-share
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: zoom-dashboard
spec:
  selector:
    matchLabels:
      app: zoom-dashboard
  replicas: 1
  template:
    metadata:
      labels:
        app: zoom-dashboard
    spec:
      securityContext:
        runAsUser: 0
      hostNetwork: true
      containers:
      - name: zoom-dashboard
        image: gitlab-registry.cern.ch/videoconference/zoom-dashboard:latest
        command: ["/app/dispatch_collectors.sh"]
        terminationMessagePolicy: FallbackToLogsOnError
        livenessProbe:
            exec:
              command:
                - bash
                - '-c'
                - '[ $(date +%s -r /var/log/zoom-dashboard/zoom-meetings-live.log) -gt $(date +%s --date="60 min ago") ]'
            failureThreshold: 3
            periodSeconds: 120
            successThreshold: 1
            timeoutSeconds: 30
        volumeMounts:
          - mountPath: /var/log/zoom-dashboard
            name: zoomdata
          - mountPath: /app/config.py
            subPath: config.py
            name: config-py-config
            readOnly: true
      volumes:
      - name: zoomdata
        persistentVolumeClaim:
          claimName: manila-cephfs-pvc
          readOnly: false
      - name: config-py-config
        configMap:
          name: config-py-config
          items:
          - key: config.py
            path: config.py
      imagePullSecrets:
      - name: regcred