63 lines
1.7 KiB
YAML
63 lines
1.7 KiB
YAML
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: pocket-id
|
|
namespace: argo-cd
|
|
spec:
|
|
destination:
|
|
name: ''
|
|
namespace: apps-roboces
|
|
server: https://kubernetes.default.svc
|
|
sources:
|
|
- repoURL: git.roboces.dev/catalin/fukuops
|
|
chart: pocket-id
|
|
targetRevision: 0.1.3
|
|
helm:
|
|
valuesObject:
|
|
replicaCount: 1
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
runAsUser: 10000
|
|
runAsGroup: 10000
|
|
capabilities:
|
|
drop:
|
|
- all
|
|
service:
|
|
type: LoadBalancer
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
hosts:
|
|
- host: auth.roboces.dev
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
persistence:
|
|
enabled: true
|
|
storageClass: "truenas-nfs-csi"
|
|
accessMode: ReadWriteMany
|
|
size: 8Gi
|
|
config:
|
|
appUrl: "https://auth.roboces.dev"
|
|
trustProxy: "true"
|
|
uiConfigDisabled: true
|
|
allowUserSignups: "disabled"
|
|
secret:
|
|
existingSecretName: pocket-id-secrets
|
|
project: roboces
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|