wip

2026-03-11 10:19:36 +01:00 · 2026-03-11 10:19:36 +01:00 · ea6354530d
commit ea6354530d
parent 3f598b02f1
14 changed files with 361 additions and 167 deletions
--- a/k8s/argo-apps/miniflux.yaml
+++ b/k8s/argo-apps/miniflux.yaml
@ -2,18 +2,87 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-    name: miniflux
-    namespace: argocd
+  name: miniflux
+  namespace: argocd
 spec:
-    destination:
-        name: ''
-        namespace: apps-roboces
-        server: https://kubernetes.default.svc
-    source:
-        path: k8s/services/miniflux
-        repoURL: https://git.roboces.dev/catalin/fukuops.git
-        targetRevision: main
-    sources: []
-    project: roboces
-    syncPolicy:
-        automated: {}
+  destination:
+    name: ''
+    namespace: apps-roboces
+    server: https://kubernetes.default.svc
+  sources:
+    - path: k8s/charts/miniflux
+      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      targetRevision: feat/miniflux-helm
+      helm:
+        valuesObject:
+          replicaCount: 3
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            runAsUser: 10000
+            runAsGroup: 10000
+            capabilities:
+              drop:
+                - all
+          service:
+            type: LoadBalancer
+          ingress:
+            enabled: true
+            className: "traefik"
+            hosts:
+              - host: feeds.roboces.dev
+                paths:
+                  - path: /
+                    pathType: Prefix
+          resources:
+            requests:
+              cpu: 300m
+              memory: 300Mi
+              ephemeral-storage: 2Gi
+            limits:
+              cpu: 400m
+              memory: 500Mi
+              ephemeral-storage: 4Gi
+          livenessProbe:
+            tcpSocket:
+              port: 8080
+            initialDelaySeconds: 5
+            timeoutSeconds: 15
+            successThreshold: 1
+            failureThreshold: 3
+            periodSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /
+              port: 8080
+            initialDelaySeconds: 15
+            timeoutSeconds: 2
+            successThreshold: 1
+            failureThreshold: 3
+            periodSeconds: 10
+          podDisruptionBudget:
+            enabled: true
+            maxUnavailable: 1
+          env:
+            RUN_MIGRATIONS: "1"
+            CREATE_ADMIN: "1"
+            OAUTH2_PROVIDER: oidc
+            OAUTH2_REDIRECT_URL: https://feeds.roboces.dev/oauth2/oidc/callback
+            OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://auth.fukurokuju.dev/application/o/miniflux/
+            OAUTH2_USER_CREATION: "1"
+            FETCH_YOUTUBE_WATCH_TIME: "1"
+            WORKER_POOL_SIZE: "1"
+            POLLING_FREQUENCY: "120"
+            BATCH_SIZE: "25"
+            METRICS_COLLECTOR: "1"
+            METRICS_ALLOWED_NETWORKS: 10.42.1.0/16
+          secret:
+            existingSecretName: miniflux
+    - path: k8s/services/miniflux
+      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      targetRevision: main
+  project: roboces
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true