wip

k8s/services/miniflux/deployment.yaml

@@ -1,96 +0,0 @@
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: miniflux-deployment
-  namespace: apps-roboces
-  labels:
-    app.kubernetes.io/name: miniflux
-    app.kubernetes.io/managed-by: argo
-    app.kubernetes.io/version: 2.2.13
-  annotations:
-    kube-score/ignore: pod-networkpolicy,deployment-has-host-podantiaffinity
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: miniflux
-  replicas: 3
-  strategy:
-    rollingUpdate:
-      maxSurge: 50%
-      maxUnavailable: 50%
-    type: RollingUpdate
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: miniflux
-        app.kubernetes.io/version: 2.2.13
-    spec:
-      containers:
-        - name: miniflux
-          image: miniflux/miniflux:2.2.13
-          imagePullPolicy: Always
-          securityContext:
-            allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: true
-            runAsUser: 10000
-            runAsGroup: 10000
-            capabilities:
-              drop:
-                - all
-          resources:
-            requests:
-              cpu: 300m
-              memory: 300Mi
-              ephemeral-storage: 2Gi
-            limits:
-              cpu: 400m
-              memory: 500Mi
-              ephemeral-storage: 4Gi
-          livenessProbe:
-            tcpSocket:
-              port: 8080
-            initialDelaySeconds: 5
-            timeoutSeconds: 15
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 10
-          readinessProbe:
-            httpGet:
-              path: /
-              port: 8080
-            initialDelaySeconds: 15
-            timeoutSeconds: 2
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 10
-          envFrom:
-            - secretRef:
-                name: miniflux
-          env:
-            - name: RUN_MIGRATIONS
-              value: '1'
-            - name: CREATE_ADMIN
-              value: '1'
-            - name: OAUTH2_PROVIDER
-              value: oidc
-            - name: OAUTH2_REDIRECT_URL
-              value: https://feeds.roboces.dev/oauth2/oidc/callback
-            - name: OAUTH2_OIDC_DISCOVERY_ENDPOINT
-              value: https://auth.fukurokuju.dev/application/o/miniflux/
-            - name: OAUTH2_USER_CREATION
-              value: '1'
-            - name: FETCH_YOUTUBE_WATCH_TIME
-              value: '1'
-            - name: WORKER_POOL_SIZE
-              value: '1'
-            - name: POLLING_FREQUENCY
-              value: '120'
-            - name: BATCH_SIZE
-              value: '25'
-            - name: METRICS_COLLECTOR
-              value: '1'
-            - name: METRICS_ALLOWED_NETWORKS
-              value: 10.42.1.0/16
-      restartPolicy: Always
-      automountServiceAccountToken: false

k8s/services/miniflux/ingress.yaml

@@ -1,21 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-    name: miniflux
-    namespace: apps-roboces
-    annotations:
-        nginx.ingress.kubernetes.io/rewrite-target: /
-spec:
-    ingressClassName: traefik
-    rules:
-        - host: feeds.roboces.dev
-          http:
-              paths:
-                  - path: /
-                    pathType: Prefix
-                    backend:
-                        service:
-                            name: miniflux-service
-                            port:
-                                number: 8888

k8s/services/miniflux/poddisruptionbudget.yaml

@@ -1,11 +0,0 @@
----
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-    name: miniflux-pdb
-    namespace: apps-roboces
-spec:
-    selector:
-        matchLabels:
-            app.kubernetes.io/name: miniflux
-    maxUnavailable: 1

k8s/services/miniflux/sealedsecrets.yaml

@@ -1,10 +1,9 @@
-# yamllint disable rule:line-length
----
 apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
-  creationTimestamp: null
-  name: miniflux
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: 'true'
+  name: miniflux-secrets
   namespace: apps-roboces
 spec:
   encryptedData:
@@ -15,6 +14,5 @@ spec:
     OAUTH2_CLIENT_SECRET: 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
   template:
     metadata:
-      creationTimestamp: null
-      name: miniflux
+      name: miniflux-secrets
       namespace: apps-roboces

k8s/services/miniflux/service.yaml

@@ -1,19 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-    name: miniflux-service
-    namespace: apps-roboces
-    labels:
-        app.kubernetes.io/name: miniflux
-        app.kubernetes.io/managed-by: argo
-        app.kubernetes.io/version: 2.2.13
-spec:
-    selector:
-        app.kubernetes.io/name: miniflux
-    type: LoadBalancer
-    ports:
-        - name: miniflux-service
-          protocol: TCP
-          port: 8888
-          targetPort: 8080