78 lines
2 KiB
YAML
78 lines
2 KiB
YAML
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: rustical
|
|
namespace: argo-cd
|
|
spec:
|
|
destination:
|
|
name: ''
|
|
namespace: apps-roboces
|
|
server: https://kubernetes.default.svc
|
|
sources:
|
|
- repoURL: git.roboces.dev/catalin/fukuops
|
|
chart: rustical
|
|
targetRevision: 0.1.2
|
|
helm:
|
|
valuesObject:
|
|
replicaCount: 1
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsUser: 10000
|
|
runAsGroup: 10000
|
|
capabilities:
|
|
drop:
|
|
- all
|
|
service:
|
|
type: LoadBalancer
|
|
port: 8001
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
hosts:
|
|
- host: cal.roboces.dev
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: 4000
|
|
initialDelaySeconds: 10
|
|
timeoutSeconds: 15
|
|
successThreshold: 1
|
|
failureThreshold: 3
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: 4000
|
|
initialDelaySeconds: 5
|
|
timeoutSeconds: 2
|
|
successThreshold: 1
|
|
failureThreshold: 3
|
|
periodSeconds: 10
|
|
persistence:
|
|
enabled: true
|
|
rustical:
|
|
oidc:
|
|
name: "Authentik"
|
|
issuer: "https://auth.fukurokuju.dev/application/o/rustical/"
|
|
claim_userid: "preffered_username"
|
|
scopes: '["openid", "profile", "groups"]'
|
|
allow_sign_up: "true"
|
|
frontend:
|
|
allow_password_login: "false"
|
|
secret:
|
|
existingSecretName: rustical
|
|
project: roboces
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|