K8s 部署

apiVersion: v1
kind: ConfigMap
metadata:
  name: teable-config
data:
  # 应用基础配置，对外访问的域名
  PUBLIC_ORIGIN: "https://your-domain.com"
  
  # 存储配置
  BACKEND_STORAGE_PROVIDER: "minio"
  # 外网端点，重要！需要终端用户可以直接访问到
  BACKEND_STORAGE_MINIO_ENDPOINT: "minio.example.com"
  # 与前面的值保持一样，但是要加个协议名称
  STORAGE_PREFIX: "https://minio.example.com"
  # 内网端点
  BACKEND_STORAGE_MINIO_INTERNAL_ENDPOINT: "minio.namespace.svc"
  # 外网端口，一般为 443 或者 9000
  BACKEND_STORAGE_MINIO_PORT: "443"
  # 内网端口，一般为 80 或者 9000
  BACKEND_STORAGE_MINIO_INTERNAL_PORT: "80"
  # 是否启用 HTTPS, 注意如果 Teable 启用了 https 则 minio 也必须启用 https 否则有跨域问题
  BACKEND_STORAGE_MINIO_USE_SSL: "true"
  
  # 缓存配置, 固定值
  BACKEND_CACHE_PROVIDER: "redis"
  
  # 其他配置，固定值
  NEXT_ENV_IMAGES_ALL_REMOTE: "true"
  PRISMA_ENGINES_CHECKSUM_IGNORE_MISSING: "1"
  # 使用自签发证书需要保留这个
  NODE_TLS_REJECT_UNAUTHORIZED: '0'

apiVersion: v1
kind: Secret
metadata:
  name: teable-secrets
type: Opaque
stringData:
  # 数据库敏感信息
  PRISMA_DATABASE_URL: "postgresql://postgres:your-password@your-postgres-host:5432/teable"
  
  # 应用密钥
  BACKEND_JWT_SECRET: "your-jwt-secret"
  BACKEND_SESSION_SECRET: "your-session-secret"
  
  # MinIO 认证信息
  BACKEND_STORAGE_PUBLIC_BUCKET: "teable-pub"
  BACKEND_STORAGE_PRIVATE_BUCKET: "teable-pvt"
  BACKEND_STORAGE_MINIO_ACCESS_KEY: "your-minio-access-key"
  BACKEND_STORAGE_MINIO_SECRET_KEY: "your-minio-secret-key"
  
  # Redis 认证信息
  BACKEND_CACHE_REDIS_URI: "redis://username:password@your-redis-host:6379/0"

apiVersion: apps/v1
kind: Deployment
metadata:
  name: teable
spec:
  replicas: 1 # 根据需要配置
  selector:
    matchLabels:
      app: teable
  template:
    metadata:
      labels:
        app: teable
    spec:
      # Add initContainers for database migration
      initContainers:
        - name: db-migrate
          image: registry.cn-shenzhen.aliyuncs.com/teable/teable-ee:latest
          args:
            - migrate-only
          envFrom:
            - configMapRef:
                name: teable-config
            - secretRef:
                name: teable-secrets
          resources:
            requests:
              cpu: 100m
              memory: 102Mi
            limits:
              cpu: 1000m
              memory: 1024Mi
      containers:
        - name: teable
          image: registry.cn-shenzhen.aliyuncs.com/teable/teable-ee:latest
          args:
            - skip-migrate
          ports:
            - containerPort: 3000
          envFrom:
            - configMapRef:
                name: teable-config
            - secretRef:
                name: teable-secrets
          resources:
            requests:
              cpu: 200m
              memory: 400Mi
            limits:
              cpu: 2000m
              memory: 4096Mi
          startupProbe:
            httpGet:
              path: /health
              port: 3000
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 5
            failureThreshold: 30
            successThreshold: 1
          livenessProbe:
            httpGet:
              path: /health
              port: 3000
            initialDelaySeconds: 30
            periodSeconds: 30
            timeoutSeconds: 5
            failureThreshold: 3
            successThreshold: 1
          readinessProbe:
            httpGet:
              path: /health
              port: 3000
            initialDelaySeconds: 15
            periodSeconds: 10
            timeoutSeconds: 5
            failureThreshold: 3
            successThreshold: 1

apiVersion: v1
kind: Service
metadata:
  name: teable
spec:
  ports:
    - port: 3000
      targetPort: 3000
  selector:
    app: teable

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: teable
  # 以 nginx 做示例，如果使用其他的 ingress class 请替换
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
    nginx.ingress.kubernetes.io/proxy-buffer-size: "128k"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-request-buffering: "off"
spec:
  rules:
    - host: your-domain.com  # 应用基础配置，对外访问的域名
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: teable
                port:
                  number: 3000
  tls:
    - hosts:
        - your-domain.com  # 应用基础配置，对外访问的域名
      secretName: your-tls-secret