checkmk

Manifiesto
# Namespace
apiVersion: v1
kind: Namespace
metadata:
name: checkmk
---
# PVC
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: checkmk-data
namespace: checkmk
spec:
accessModes:
- ReadWriteOnce
storageClassName: ceph-rbd
resources:
requests:
storage: 5Gi
---
# Deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: checkmk
namespace: checkmk
spec:
replicas: 1
selector:
matchLabels:
app: checkmk
template:
metadata:
labels:
app: checkmk
spec:
containers:
- name: checkmk
image: checkmk/check-mk-raw:2.2.0-latest
ports:
- containerPort: 5000
env:
- name: CMK_SITE_ID
value: checkmk
volumeMounts:
- name: checkmk-storage
mountPath: /omd/sites
- name: checkmk-tmp
mountPath: /opt/omd/sites/checkmk/tmp
volumes:
- name: checkmk-storage
persistentVolumeClaim:
claimName: checkmk-data
- name: checkmk-tmp
emptyDir:
medium: Memory
---
# Servicio
apiVersion: v1
kind: Service
metadata:
name: checkmk
namespace: checkmk
spec:
selector:
app: checkmk
ports:
- name: http
port: 80
targetPort: 5000
type: ClusterIP
---
# Ingress
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: checkmk
namespace: checkmk
annotations:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/backend-protocol: "http"
cert-manager.io/cluster-issuer: "letsencrypt-staging" # Cambiar a letsencrypt-prod en producción
spec:
tls:
- hosts:
- checkmk.k8s.ictiberia.com # Ajusta el dominio real
secretName: checkmk-tls
rules:
- host: checkmk.k8s.ictiberia.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: checkmk
port:
number: 80