Deploy and configure cloudbeaver

kubernetes/aks/system/cloudbeaver/base/config/cloudbeaver.conf

@@ -0,0 +1,69 @@
+{
+    server: {
+        serverPort: 8978,
+
+        workspaceLocation: "workspace",
+        contentRoot: "web",
+        driversLocation: "drivers",
+
+        rootURI: "/",
+        serviceURI: "/api/",
+
+        productConfiguration: "conf/product.conf",
+
+        expireSessionAfterPeriod: 1800000,
+
+        develMode: false,
+
+        enableSecurityManager: false,
+
+        database: {
+            driver="h2_embedded",
+            url: "jdbc:h2:${workspace}/.data/cb.h2.dat",
+
+            createDatabase: true,
+
+            initialDataConfiguration: "conf/initial-data.conf",
+
+            pool: {
+                minIdleConnections: 4,
+                maxIdleConnections: 10,
+                maxConnections: 100,
+                validationQuery: "SELECT 1"
+            }
+        }
+
+    },
+    app: {
+        anonymousAccessEnabled: false,
+        anonymousUserRole: "user",
+        supportsCustomConnections: false,
+
+        forwardProxy: false,
+
+        publicCredentialsSaveEnabled: false,
+        adminCredentialsSaveEnabled: false,
+
+        resourceManagerEnabled: true,
+
+        resourceQuotas: {
+            dataExportFileSizeLimit: 10000000,
+            resourceManagerFileSizeLimit: 500000,
+            sqlMaxRunningQueries: 100,
+            sqlResultSetRowsLimit: 100000,
+            sqlResultSetMemoryLimit: 2000000,
+            sqlTextPreviewMaxLength: 4096,
+            sqlBinaryPreviewMaxLength: 261120
+        },
+        enabledAuthProviders: [
+            "local"
+        ],
+
+        enabledDrivers: [
+            "sqlite:sqlite_jdbc",
+            "h2:h2_embedded",
+            "clickhouse:yandex_clickhouse"
+        ]
+
+    }
+}

kubernetes/aks/system/cloudbeaver/base/config/data-sources.json

@@ -0,0 +1,29 @@
+{
+    "folders": {
+     "My DBs": {}
+    },
+    "connections": {
+        "DB-example-01": {
+        "provider": "postgresql",
+        "driver": "postgres-jdbc",
+        "name": "DB-example-01",
+        "description": "Postgre connection",
+        "save-password": false,
+        "show-system-objects": true,
+        "read-only": false,
+        "folder": "My DBs",
+        "configuration": {
+        "user": "my-db-user",
+        "host": "postgres",
+        "port": "5432",
+        "database": "my-postgre-db",
+        "url": "jdbc:postgresql://postgres:5432/my-postgre-db",
+        "type": "dev",
+        "provider-properties": {
+            "@dbeaver-show-non-default-db@": "true"
+        },
+        "auth-model": "native"
+        }
+        }
+    }
+}

kubernetes/aks/system/cloudbeaver/base/config/product.conf

@@ -0,0 +1,34 @@
+// Product configuration. Customized web application behavior
+// It is in JSONC format
+{
+    // Global properties
+    core: {
+        // User defaults
+        user: {
+            defaultTheme: "dark",
+            defaultLanguage: "en"
+        },
+        app: {
+            // Log viewer config
+            logViewer: {
+                refreshTimeout: 3000,
+                logBatchSize: 1000,
+                maxLogRecords: 2000,
+                maxFailedRequests: 3
+            }
+        },
+        authentication: {
+            anonymousAccessEnabled: false
+        }
+    },
+    // Notifications config
+    core_events: {
+        notificationsPool: 5
+    },
+    plugin_data_spreadsheet_new: {
+        hidden: false
+    },
+    plugin_data_export: {
+        disabled: false
+    }
+}

kubernetes/aks/system/cloudbeaver/base/deployment.yaml

@@ -0,0 +1,80 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cloudbeaver
+  namespace: cloudbeaver
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: cloudbeaver
+  template:
+    metadata:
+      labels:
+        app: cloudbeaver
+    spec:
+      containers:
+        - name: cloudbeaver
+          image: dbeaver/cloudbeaver:24.0.0
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8978
+          livenessProbe:
+            httpGet:
+              path: /
+              port: 8978
+            initialDelaySeconds: 60
+            periodSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /
+              port: 8978
+            initialDelaySeconds: 40
+            periodSeconds: 10
+          volumeMounts:
+            - name: dbeaver-product
+              mountPath: /opt/cloudbeaver/conf/product.conf
+              subPath: product.conf
+            - name: dbeaver-sources-user
+              mountPath: /opt/cloudbeaver/workspace/user-projects/admin.dbeaver/.dbeaver/data-sources.json
+              subPath: data-sources.json
+            - name: dbeaver-sources-global
+              mountPath: /opt/cloudbeaver/workspace/GlobalConfiguration/.dbeaver/data-sources.json
+              subPath: data-sources.json
+            - name: dbeaver-server
+              mountPath: /opt/cloudbeaver/conf/cloudbeaver.conf
+              subPath: cloudbeaver.conf
+            - name: dbeaver-initial-data
+              mountPath: /opt/cloudbeaver/conf/initial-data.conf
+              subPath: initial-data.conf
+      volumes:
+        - name: dbeaver-product
+          configMap:
+            name: dbeaver-product-configmap-76t74t24mh
+        - name: dbeaver-sources-user
+          configMap:
+            name: dbeaver-sources-user-configmap-t8m94c4gb7
+        - name: dbeaver-sources-global
+          configMap:
+            name: dbeaver-sources-global-configmap-t8m94c4gb7
+        - name: dbeaver-server
+          configMap:
+            name: dbeaver-server-configmap-9tgdffkdbb
+        - name: dbeaver-initial-data
+          configMap:
+            name: dbeaver-initial-data-configmap-t58fgmffkg
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: cloudbeaver
+  namespace: cloudbeaver
+spec:
+  clusterIP: None
+  selector:
+    app: cloudbeaver
+  ports:
+    - protocol: TCP
+      port: 8978

kubernetes/aks/system/cloudbeaver/base/ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: cloudbeaver-ingress
+  namespace: cloudbeaver
+  annotations:
+    external-dns.alpha.kubernetes.io/target: inspection.alpha.canada.ca
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    ingress.kubernetes.io/force-ssl-redirect: "true"
+    kubernetes.io/tls-acme: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - cloudbeaver.inspection.alpha.canada.ca
+      secretName: cloudbeaver-tls
+  rules:
+    - host: cloudbeaver.inspection.alpha.canada.ca
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: cloudbeaver
+                port:
+                  number: 8978

kubernetes/aks/system/cloudbeaver/base/kustomization.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - deployment.yaml
+  - ingress.yaml
+  - namespace.yaml
+
+configMapGenerator:
+  - name: dbeaver-product-configmap
+    files:
+      - config/product.conf
+  - name: dbeaver-sources-user-configmap
+    files:
+      - config/data-sources.json
+  - name: dbeaver-sources-global-configmap
+    files:
+      - config/data-sources.json
+  - name: dbeaver-server-configmap
+    files:
+      - config/cloudbeaver.conf
+  - name: dbeaver-initial-data-configmap
+    files:
+      - config/initial-data.conf

kubernetes/aks/system/cloudbeaver/base/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cloudbeaver
+  labels:
+    name: cloudbeaver

kubernetes/aks/system/cloudbeaver/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - argo-app.yaml