64 lines
1.6 KiB
YAML
64 lines
1.6 KiB
YAML
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: vaultwarden
|
|
namespace: argocd
|
|
spec:
|
|
destination:
|
|
name: ''
|
|
namespace: apps-roboces
|
|
server: https://kubernetes.default.svc
|
|
sources:
|
|
- path: k8s/charts/vaultwarden
|
|
repoURL: https://git.roboces.dev/catalin/fukuops.git
|
|
targetRevision: main
|
|
helm:
|
|
valuesObject:
|
|
conf:
|
|
db:
|
|
enable_db_wal: true
|
|
connection_retries: 15
|
|
timeout: 30
|
|
web_vault:
|
|
enabled: true
|
|
folder: "web-vault/"
|
|
|
|
replicaCount: 1
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
runAsUser: 10000
|
|
runAsGroup: 10000
|
|
capabilities:
|
|
drop:
|
|
- all
|
|
service:
|
|
type: LoadBalancer
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
hosts:
|
|
- host: vault.roboces.dev
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
persistence:
|
|
enabled: true
|
|
storageClass: "truenas-nfs-csi"
|
|
accessMode: ReadWriteMany
|
|
size: 5Gi
|
|
secret:
|
|
existingSecretName: vaultwarden-secrets
|
|
project: roboces
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|