85 lines
2.4 KiB
YAML
85 lines
2.4 KiB
YAML
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: miniflux
|
|
namespace: argocd
|
|
spec:
|
|
destination:
|
|
name: ''
|
|
namespace: apps-roboces
|
|
server: https://kubernetes.default.svc
|
|
sources:
|
|
- path: k8s/charts/miniflux
|
|
repoURL: https://git.roboces.dev/catalin/fukuops.git
|
|
targetRevision: feat/miniflux-helm
|
|
helm:
|
|
valuesObject:
|
|
replicaCount: 3
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsUser: 10000
|
|
runAsGroup: 10000
|
|
capabilities:
|
|
drop:
|
|
- all
|
|
service:
|
|
type: LoadBalancer
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
hosts:
|
|
- host: feeds.roboces.dev
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
resources:
|
|
requests:
|
|
cpu: 300m
|
|
memory: 300Mi
|
|
ephemeral-storage: 2Gi
|
|
limits:
|
|
cpu: 400m
|
|
memory: 500Mi
|
|
ephemeral-storage: 4Gi
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: 8080
|
|
initialDelaySeconds: 5
|
|
timeoutSeconds: 15
|
|
successThreshold: 1
|
|
failureThreshold: 3
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /
|
|
port: 8080
|
|
initialDelaySeconds: 15
|
|
timeoutSeconds: 2
|
|
successThreshold: 1
|
|
failureThreshold: 3
|
|
periodSeconds: 10
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
maxUnavailable: 1
|
|
env:
|
|
RUN_MIGRATIONS: "1"
|
|
CREATE_ADMIN: "1"
|
|
OAUTH2_PROVIDER: oidc
|
|
OAUTH2_REDIRECT_URL: https://feeds.roboces.dev/oauth2/oidc/callback
|
|
OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://auth.fukurokuju.dev/application/o/miniflux/
|
|
OAUTH2_USER_CREATION: "1"
|
|
FETCH_YOUTUBE_WATCH_TIME: "1"
|
|
WORKER_POOL_SIZE: "1"
|
|
POLLING_FREQUENCY: "120"
|
|
BATCH_SIZE: "25"
|
|
METRICS_COLLECTOR: "1"
|
|
METRICS_ALLOWED_NETWORKS: 10.42.1.0/16
|
|
secret:
|
|
existingSecretName: miniflux
|
|
project: roboces
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|