feat: update authentik chart to 2024.2

k8s/argo-apps/authentik.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - chart: authentik
       repoURL: https://charts.goauthentik.io/
-      targetRevision: 2023.10.*
+      targetRevision: 2024.2.*
       helm:
         valuesObject:
           authentik:
@@ -26,7 +26,8 @@ spec:
                 timeout: 30
                 from: auth@fukurokuju.dev
               postgresql:
-                host: 192.168.1.13
+                host: 192.168.1.3
+                port: 55432
                 name: auth
                 user: file:///authentik-creds/pg_username
                 password: file:///authentik-creds/pg_password
@@ -34,6 +35,9 @@ spec:
                 host: 192.168.1.3
                 port: 30036
                 password: file:///authentik-creds/redis_password
+              error_reporting:
+                enabled: true
+          global:
             volumeMounts:
               - name: authentik-creds
                 mountPath: /authentik-creds
@@ -46,37 +50,40 @@ spec:
               - name: media
                 persistentVolumeClaim:
                   claimName: pvc-authentik-media
+          server:
             autoscaling:
-            server:
-              enabled: true
-              maxScaling: 3
-            worker:
               enabled: true
+              minReplicas: 1
+              maxReplicas: 3
             pdb:
-            server:
               enabled: true
-              maxUnavailable: 2
-            worker:
-              enabled:
-                maxUnavailable: 4
+              minAvailable: 1
             service:
               type: LoadBalancer
-            port: 9000
-            name: http
+              servicePortHttp: 9000
+              servicePortHttps: 9443
+            metrics:
+              enabled: true
+              service:
+                type: LoadBalancer
+              serviceMonitor:
+                enabled: true
             ingress:
               enabled: true
               ingressClassName: traefik
               hosts:
-              - host: auth.fukurokuju.dev
-                paths:
-                  - path: "/"
-                    pathType: Prefix
-                    backend:
-                      service:
-                        name: http
-                        port:
-                          number: 9000
+                - auth.fukurokuju.dev
               tls: []
+              https: true
+          worker:
+            autoscaling:
+              enabled: true
+              minReplicas: 2
+              maxReplicas: 6
+            pdb:
+              enabled: true
+              minAvailable: 2
+
     - repoURL: https://git.roboces.dev/catalin/fukuops.git
       path: k8s/services/authentik
       targetRevision: main

k8s/argo-apps/loki.yaml

@@ -90,6 +90,10 @@ spec:
               - job_name: 'argocd-notifications-controller-metrics'
                 static_configs:
                   - targets: ["argocd-notifications-controller-metrics.argocd:9001"]
+              
+              - job_name: 'miniflux'
+                static_configs:
+                  - targets: ["miniflux-service.apps-roboces:8888"]
             alertmanager:
               persistence:
                 enabled: true

k8s/services/argo/project-management.yaml

@@ -26,3 +26,4 @@ spec:
     - https://grafana.github.io/helm-charts
     - https://kubernetes-sigs.github.io/descheduler/
     - https://github.com/rancher/system-upgrade-controller.git
+    - https://charts.bitnami.com/bitnami

k8s/services/miniflux/deployment.yaml

@@ -90,5 +90,7 @@ spec:
               value: "25"
             - name: METRICS_COLLECTOR
               value: "1"
+            - name: METRICS_ALLOWED_NETWORKS
+              value: 10.42.1.0/16
       restartPolicy: Always
       automountServiceAccountToken: false

tofu/adguard/main.tf

@@ -86,17 +86,3 @@ resource "adguard_rewrite" "feeds_local_3" {
   answer = "192.168.1.33"
 }
 
-resource "adguard_rewrite" "feeds_local_1" {
-  domain = "feeds.fuku"
-  answer = "192.168.1.31"
-}
-
-resource "adguard_rewrite" "feeds_local_2" {
-  domain = "feeds.fuku"
-  answer = "192.168.1.32"
-}
-
-resource "adguard_rewrite" "feeds_local_3" {
-  domain = "feeds.fuku"
-  answer = "192.168.1.33"
-}