Added auto-suspend, added wol proxy for ollama

This commit is contained in:
2025-06-22 18:43:55 +02:00
parent dab5520630
commit 6579e15394
16 changed files with 449 additions and 266 deletions
-143
View File
@@ -3,146 +3,3 @@ resource "kubernetes_namespace" "openwebui" {
name = "openwebui"
}
}
resource "kubernetes_service_account" "openwebui" {
metadata {
name = "openwebui-sa"
namespace = kubernetes_namespace.openwebui.metadata[0].name
}
automount_service_account_token = false
}
resource "kubernetes_deployment" "openwebui" {
metadata {
name = "openwebui"
namespace = kubernetes_namespace.openwebui.metadata[0].name
labels = {
openwebui = "openwebui"
}
}
spec {
replicas = 1
selector {
match_labels = {
openwebui = "openwebui"
}
}
strategy {
type = "RollingUpdate"
}
template {
metadata {
labels = {
openwebui = "openwebui"
}
}
spec {
service_account_name = kubernetes_service_account.openwebui.metadata[0].name
automount_service_account_token = false
container {
name = "openwebui-container"
image = "ghcr.io/open-webui/open-webui:${var.tag}"
security_context {
allow_privilege_escalation = false
}
port {
name = "http"
container_port = 8080
}
readiness_probe {
tcp_socket {
port = 8080
}
initial_delay_seconds = 5
period_seconds = 10
failure_threshold = 10
}
volume_mount {
name = "openwebui-data"
mount_path = "/app/backend/data"
}
}
volume {
name = "openwebui-data"
host_path {
path = local.openwebui_data
}
}
}
}
}
}
resource "kubernetes_service" "openwebui" {
metadata {
name = "http"
namespace = kubernetes_namespace.openwebui.metadata[0].name
}
spec {
selector = {
openwebui = "openwebui"
}
port {
name = "http"
port = 8080
target_port = 8080
}
cluster_ip = "None"
}
lifecycle {
ignore_changes = [
metadata[0].annotations
]
}
}
resource "kubernetes_ingress_v1" "openwebui" {
metadata {
name = "ingress"
namespace = kubernetes_namespace.openwebui.metadata[0].name
annotations = {
"kubernetes.io/ingress.class" = "public"
"cert-manager.io/cluster-issuer" = "letsencrypt-prod"
"kubernetes.io/tls-acme" = "true"
"nginx.ingress.kubernetes.io/ssl-redirect" = "true"
}
}
spec {
tls {
hosts = [var.fqdn]
secret_name = "openwebui-tls"
}
rule {
host = var.fqdn
http {
path {
backend {
service {
name = "http"
port {
number = 8080
}
}
}
}
}
}
}
}