diff --git a/argocd/apps/hedgedoc.yaml b/argocd/apps/hedgedoc.yaml index 39c3007..ab6b4e1 100644 --- a/argocd/apps/hedgedoc.yaml +++ b/argocd/apps/hedgedoc.yaml @@ -10,59 +10,12 @@ metadata: spec: project: default source: - repoURL: https://nicholaswilde.github.io/helm-charts - chart: hedgedoc - targetRevision: "1.1.0" - helm: - values: | - mariadb: - enabled: false - - env: - TZ: Europe/Moscow - CMD_DB_DIALECT: postgres - DB_HOST: shared-pg-rw.cnpg.svc.cluster.local - DB_PORT: "5432" - DB_USER: hedgedoc - DB_NAME: hedgedoc - CMD_DOMAIN: hedgedoc.t0rt1k.tech - CMD_PROTOCOL_USESSL: "true" - CMD_URL_ADDPORT: "false" - CMD_ALLOW_ORIGIN: "['hedgedoc.t0rt1k.tech']" - - secret: - DB_PASS: hedgedoc-change-me - - ingress: - enabled: true - annotations: - cert-manager.io/cluster-issuer: letsencrypt-production - traefik.ingress.kubernetes.io/router.entrypoints: websecure - traefik.ingress.kubernetes.io/router.tls: "true" - hosts: - - host: hedgedoc.t0rt1k.tech - paths: - - path: / - pathType: Prefix - tls: - - secretName: hedgedoc-tls - hosts: - - hedgedoc.t0rt1k.tech - - persistence: - config: - enabled: true - size: 1Gi - accessMode: ReadWriteOnce - - resources: - requests: - cpu: 100m - memory: 256Mi - limits: - cpu: 500m - memory: 512Mi - + repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git + targetRevision: master + path: manifests/hedgedoc + directory: + recurse: true + include: "*.yaml" destination: server: https://kubernetes.default.svc namespace: hedgedoc diff --git a/manifests/hedgedoc/all.yaml b/manifests/hedgedoc/all.yaml new file mode 100644 index 0000000..a686341 --- /dev/null +++ b/manifests/hedgedoc/all.yaml @@ -0,0 +1,162 @@ +apiVersion: v1 +kind: Secret +metadata: + name: hedgedoc + namespace: hedgedoc + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc +type: Opaque +stringData: + DB_PASS: hedgedoc-change-me +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: hedgedoc + namespace: hedgedoc + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc +data: + TZ: Europe/Moscow + CMD_DB_DIALECT: postgres + DB_HOST: shared-pg-rw.cnpg.svc.cluster.local + DB_PORT: "5432" + DB_USER: hedgedoc + DB_NAME: hedgedoc + CMD_DOMAIN: hedgedoc.t0rt1k.tech + CMD_PROTOCOL_USESSL: "true" + CMD_URL_ADDPORT: "false" + CMD_ALLOW_ORIGIN: '["hedgedoc.t0rt1k.tech"]' +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: hedgedoc-config + namespace: hedgedoc + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi +--- +apiVersion: v1 +kind: Service +metadata: + name: hedgedoc + namespace: hedgedoc + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc +spec: + type: ClusterIP + selector: + app.kubernetes.io/name: hedgedoc + ports: + - port: 3000 + targetPort: http + protocol: TCP + name: http +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: hedgedoc + namespace: hedgedoc + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc +spec: + replicas: 1 + strategy: + type: RollingUpdate + selector: + matchLabels: + app.kubernetes.io/name: hedgedoc + template: + metadata: + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc + spec: + containers: + - name: hedgedoc + image: ghcr.io/linuxserver/hedgedoc:1.11.0-ls193 + imagePullPolicy: IfNotPresent + envFrom: + - configMapRef: + name: hedgedoc + - secretRef: + name: hedgedoc + ports: + - name: http + containerPort: 3000 + protocol: TCP + volumeMounts: + - mountPath: /config + name: config + livenessProbe: + tcpSocket: + port: http + initialDelaySeconds: 30 + failureThreshold: 5 + timeoutSeconds: 10 + readinessProbe: + tcpSocket: + port: http + initialDelaySeconds: 30 + failureThreshold: 5 + timeoutSeconds: 10 + resources: + requests: + cpu: 100m + memory: 256Mi + limits: + cpu: 500m + memory: 512Mi + volumes: + - name: config + persistentVolumeClaim: + claimName: hedgedoc-config +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: hedgedoc + namespace: hedgedoc + labels: + app.kubernetes.io/name: hedgedoc + app.kubernetes.io/version: "1.11.0" + app.kubernetes.io/part-of: hedgedoc + annotations: + cert-manager.io/cluster-issuer: letsencrypt-production + traefik.ingress.kubernetes.io/router.entrypoints: websecure + traefik.ingress.kubernetes.io/router.tls: "true" +spec: + ingressClassName: traefik + tls: + - hosts: + - hedgedoc.t0rt1k.tech + secretName: hedgedoc-tls + rules: + - host: hedgedoc.t0rt1k.tech + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: hedgedoc + port: + number: 3000