64 lines
1.7 KiB
YAML
64 lines
1.7 KiB
YAML
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: vaultwarden
|
|
namespace: argo-cd
|
|
spec:
|
|
destination:
|
|
name: ''
|
|
namespace: apps-roboces
|
|
server: https://kubernetes.default.svc
|
|
sources:
|
|
- repoURL: git.roboces.dev/catalin/fukuops
|
|
chart: vaultwarden
|
|
targetRevision: 1.0.3
|
|
helm:
|
|
valuesObject:
|
|
vaultwarden:
|
|
config:
|
|
database:
|
|
enableWal: true
|
|
connectionRetries: 15
|
|
timeout: 30
|
|
webVault:
|
|
enabled: true
|
|
folder: "web-vault/"
|
|
replicaCount: 1
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
runAsUser: 10000
|
|
runAsGroup: 10000
|
|
capabilities:
|
|
drop:
|
|
- all
|
|
service:
|
|
type: LoadBalancer
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
hosts:
|
|
- host: vault.roboces.dev
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
persistence:
|
|
enabled: true
|
|
storageClass: "truenas-nfs-csi"
|
|
accessMode: ReadWriteMany
|
|
size: 5Gi
|
|
secret:
|
|
existingSecretName: vaultwarden-secrets
|
|
project: roboces
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|