---
apiVersion: v1
kind: Namespace
metadata:
  name: phpmyadmin
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: phpmyadmin-config
  namespace: phpmyadmin
data:
  database.address: "192.168.1.137"
  database.port: "3306"
---
apiVersion: v1
kind: Secret
metadata:
  name: mysql-secret
  namespace: phpmyadmin
type: Opaque
data:
  username: cm9vdA==
  password: QmxhY2tzdGFyMkBob21l
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: phpmyadmin-sa
  namespace: phpmyadmin
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: phpmyadmin-role
  namespace: phpmyadmin
rules:
- apiGroups: [""]
  resources: ["pods", "services", "configmaps", "secrets"]
  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: phpmyadmin-rolebinding
  namespace: phpmyadmin
subjects:
- kind: ServiceAccount
  name: phpmyadmin-sa
  namespace: phpmyadmin
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: phpmyadmin-role
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: phpmyadmin
  namespace: phpmyadmin
spec:
  replicas: 1
  selector:
    matchLabels:
      app: phpmyadmin
  template:
    metadata:
      labels:
        app: phpmyadmin
    spec:
      serviceAccountName: phpmyadmin-sa
      containers:
      - name: phpmyadmin
        image: phpmyadmin/phpmyadmin:latest
        ports:
        - containerPort: 80
        env:
        - name: PMA_HOST
          valueFrom:
            configMapKeyRef:
              name: phpmyadmin-config
              key: database.address
        - name: PMA_PORT
          valueFrom:
            configMapKeyRef:
              name: phpmyadmin-config
              key: database.port
        - name: PMA_USER
          valueFrom:
            secretKeyRef:
              name: mysql-secret
              key: username
        - name: PMA_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mysql-secret
              key: password
---
apiVersion: v1
kind: Service
metadata:
  name: phpmyadmin
  namespace: phpmyadmin
spec:
  type: ClusterIP
  selector:
    app: phpmyadmin
  ports:
    - port: 80
      targetPort: 80
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: phpmyadmin-ingress
  namespace: phpmyadmin
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`phpmyadmin.apps.mngoma.lab`)
      kind: Rule
      services:
        - name: phpmyadmin
          port: 80
  tls: {}