add stirling-pdf

Signed-off-by: gwg313 <gwg313@pm.me>

apps/harbor/templates/route.yaml

@@ -36,3 +36,21 @@ spec:
           name: harbor-portal
           port: 80
           weight: 1
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-ingress-to-harbor
+  namespace: harbor
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      namespace: cilium-ingress
+  to:
+    - group: ""
+      kind: Service
+      name: harbor-core
+    - group: ""
+      kind: Service
+      name: harbor-portal

apps/stirling-pdf/deployment.yaml

@@ -0,0 +1,49 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: stirling-pdf
+  namespace: stirling-pdf
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: stirling-pdf
+  template:
+    metadata:
+      labels:
+        app: stirling-pdf
+    spec:
+      securityContext:
+        fsGroup: 1000
+      containers:
+        - name: stirling-pdf
+          image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:2.11.0-fat
+          resources:
+            requests:
+              cpu: 250m
+              memory: 512Mi
+            limits:
+              cpu: 1000m
+              memory: 2Gi
+          ports:
+            - containerPort: 8080
+          volumeMounts:
+            - name: stirling-data
+              mountPath: /usr/share/tessdata
+              subPath: training-data
+            - name: stirling-data
+              mountPath: /configs
+              subPath: configs
+            - name: stirling-data
+              mountPath: /customFiles
+              subPath: custom-files
+            - name: stirling-data
+              mountPath: /logs
+              subPath: logs
+            - name: stirling-data
+              mountPath: /pipeline
+              subPath: pipeline
+      volumes:
+        - name: stirling-data
+          persistentVolumeClaim:
+            claimName: stirling-data

apps/stirling-pdf/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: stirling-pdf

apps/stirling-pdf/network-policy.yaml

@@ -0,0 +1,19 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-ingress
+  namespace: stirling-pdf
+spec:
+  endpointSelector:
+    matchLabels:
+      app: stirling-pdf
+
+  ingress:
+    - fromEntities:
+        - ingress
+      toPorts:
+        - ports:
+            - port: "80"
+              protocol: TCP
+            - port: "8080"
+              protocol: TCP

apps/stirling-pdf/pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: stirling-data
+  namespace: stirling-pdf
+spec:
+  storageClassName: nfs-retain
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi

apps/stirling-pdf/route.yaml

@@ -0,0 +1,41 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: stirling-pdf
+  namespace: stirling-pdf
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: shared-edge-gateway
+      namespace: cilium-ingress
+  hostnames:
+    - pdftools.gwg313.xyz
+    - pdftools.local.gwg313.xyz
+    - pdftools.zerotier.gwg313.xyz
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: stirling-pdf
+          port: 80
+          weight: 1
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-gateway-to-stirling
+  namespace: stirling-pdf
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      namespace: cilium-ingress
+  to:
+    - group: ""
+      kind: Service
+      name: stirling-pdf

apps/stirling-pdf/service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: stirling-pdf
+  namespace: stirling-pdf
+spec:
+  selector:
+    app: stirling-pdf
+  ports:
+    - port: 80
+      targetPort: 8080
+      protocol: TCP