diff --git a/k8s/argo-apps/authentik.yaml b/k8s/argo-apps/authentik.yaml index fb7dc63..c88c03f 100644 --- a/k8s/argo-apps/authentik.yaml +++ b/k8s/argo-apps/authentik.yaml @@ -26,8 +26,8 @@ spec: timeout: 30 from: auth@fukurokuju.dev postgresql: - host: 192.168.1.3 - port: 55432 + host: psql15-postgres.apps-fuku.svc.cluster.local + port: 5432 name: auth user: file:///authentik-creds/pg_username password: file:///authentik-creds/pg_password diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index c830c2c..b2d781f 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -106,7 +106,7 @@ spec: redis: enabled: false redis-cluster: - enabled: false + enabled: true - path: k8s/services/forgejo repoURL: https://git.roboces.dev/catalin/fukuops.git targetRevision: main diff --git a/k8s/argo-apps/psql.yaml b/k8s/argo-apps/psql.yaml new file mode 100644 index 0000000..96bf839 --- /dev/null +++ b/k8s/argo-apps/psql.yaml @@ -0,0 +1,26 @@ +--- +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: psql15 + namespace: argocd +spec: + destination: + namespace: apps-fuku + server: 'https://kubernetes.default.svc' + sources: + - chart: postgres + targetRevision: 1.3.6 + repoURL: https://groundhog2k.github.io/helm-charts/ + helm: + valuesObject: + service: + type: LoadBalancer + storage: + accessModes: + - ReadWriteMany + className: truenas-nfs-csi + requestedSize: 150Gi + project: fuku + syncPolicy: + automated: {} diff --git a/k8s/services/argo/project-fuku.yaml b/k8s/services/argo/project-fuku.yaml index 0ad7233..1cb3714 100644 --- a/k8s/services/argo/project-fuku.yaml +++ b/k8s/services/argo/project-fuku.yaml @@ -28,3 +28,4 @@ spec: - registry-1.docker.io/bitnamicharts - https://meilisearch.github.io/meilisearch-kubernetes - https://kubetail-org.github.io/helm-charts/ + - https://groundhog2k.github.io/helm-charts/ diff --git a/k8s/services/forgejo/sealedsecrets.yaml b/k8s/services/forgejo/sealedsecrets.yaml index 4353b10..6c9aa28 100644 --- a/k8s/services/forgejo/sealedsecrets.yaml +++ b/k8s/services/forgejo/sealedsecrets.yaml @@ -66,6 +66,7 @@ spec: creationTimestamp: null name: secrets-forgejo-email namespace: apps-roboces + --- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret @@ -75,12 +76,15 @@ metadata: namespace: apps-roboces spec: encryptedData: - database: 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 + database: AgBmTrm6Kdk+pgMO/p88PQVQLH/hZKiEUzaOBqxXyCPPMOpEq/uoT9kR4bcFegVmjeKaZeQC9q5VCgvqfOusAroL3Kf2OvOq0C81jESs9mp5w2vBPJ0z8kE5F7jJ3mLpu2bYmHUbx/Zxs031O6+ciLGKxAu7F1e20zs/GUDYxudAyrz15zYNwPcQgCbMRnjpDpM3Dir0FYZ3uiv/Vn5/Jvr3jHdPlRM1LPBnIsGsNdLwGcGusybk+7vlGu2+KcRYsmOi9EZph4MFwUVsT5If2h/8PSwLkRGvp5XcA6rIhzHnRv8x8N4AsNwuSSHCFUp54xK1fhw/RFsfBiPhuFhrAYbVIk+PLkM/X9p9yZkr/d6ZfAkqlgMpKx4CNzDJqqDA3MDJssUoszcK0wbtbowVz4uDvK19KZuwK8ByUusTSi41aPGjIEBOBflV52sb4F7u5ur7WEgjfPKqQYd/G0ZyPTUeC99bFpyFzvwLmCDX6jI+d1g6qBNe6BzBOahfuBY462yQc8LLD0cAg848lDKHXtOnxVfMFRjaE6BN143FNJcMcE2h95LPD8C4CzO/KGUpeyUxFY4d0b6CEDYpRlTH+ytV352lYrwYVfQ6kyK4VQ9Fy6TNkdgSxr56FxIQrvbsIPrapzlIyLPdFfKCpBrQaYPAXEFWISi9ojJIqiJgNVStpjCcoU5wRGDvCob6MtzFjDnseDzmmM+No2ON+e++tEuNcuKeC0ZYoBFH7izQpxBaT/NTx50ahqwrlovzS0yZ8bKYhMWJsOkLUzAsJPL2QGUhXUcWd0BIC2AashB8Zp6JW1bq7cDRFgFgemU8FFbl9BwxtBUdCuLN1m2AQYzywEJykg7LrV+dhbJOVd7iqQ== template: metadata: creationTimestamp: null name: secrets-forgejo-db namespace: apps-roboces + type: Opaque + + --- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret