replace hedgedoc helm with manifests

This commit is contained in:
Alexander Rogov
2026-06-28 17:54:11 +03:00
parent 00b861f5d5
commit c42e9e56c1
2 changed files with 168 additions and 53 deletions

View File

@@ -10,59 +10,12 @@ metadata:
spec:
project: default
source:
repoURL: https://nicholaswilde.github.io/helm-charts
chart: hedgedoc
targetRevision: "1.1.0"
helm:
values: |
mariadb:
enabled: false
env:
TZ: Europe/Moscow
CMD_DB_DIALECT: postgres
DB_HOST: shared-pg-rw.cnpg.svc.cluster.local
DB_PORT: "5432"
DB_USER: hedgedoc
DB_NAME: hedgedoc
CMD_DOMAIN: hedgedoc.t0rt1k.tech
CMD_PROTOCOL_USESSL: "true"
CMD_URL_ADDPORT: "false"
CMD_ALLOW_ORIGIN: "['hedgedoc.t0rt1k.tech']"
secret:
DB_PASS: hedgedoc-change-me
ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
hosts:
- host: hedgedoc.t0rt1k.tech
paths:
- path: /
pathType: Prefix
tls:
- secretName: hedgedoc-tls
hosts:
- hedgedoc.t0rt1k.tech
persistence:
config:
enabled: true
size: 1Gi
accessMode: ReadWriteOnce
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
targetRevision: master
path: manifests/hedgedoc
directory:
recurse: true
include: "*.yaml"
destination:
server: https://kubernetes.default.svc
namespace: hedgedoc

162
manifests/hedgedoc/all.yaml Normal file
View File

@@ -0,0 +1,162 @@
apiVersion: v1
kind: Secret
metadata:
name: hedgedoc
namespace: hedgedoc
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
type: Opaque
stringData:
DB_PASS: hedgedoc-change-me
---
apiVersion: v1
kind: ConfigMap
metadata:
name: hedgedoc
namespace: hedgedoc
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
data:
TZ: Europe/Moscow
CMD_DB_DIALECT: postgres
DB_HOST: shared-pg-rw.cnpg.svc.cluster.local
DB_PORT: "5432"
DB_USER: hedgedoc
DB_NAME: hedgedoc
CMD_DOMAIN: hedgedoc.t0rt1k.tech
CMD_PROTOCOL_USESSL: "true"
CMD_URL_ADDPORT: "false"
CMD_ALLOW_ORIGIN: '["hedgedoc.t0rt1k.tech"]'
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: hedgedoc-config
namespace: hedgedoc
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi
---
apiVersion: v1
kind: Service
metadata:
name: hedgedoc
namespace: hedgedoc
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hedgedoc
ports:
- port: 3000
targetPort: http
protocol: TCP
name: http
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: hedgedoc
namespace: hedgedoc
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
spec:
replicas: 1
strategy:
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/name: hedgedoc
template:
metadata:
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
spec:
containers:
- name: hedgedoc
image: ghcr.io/linuxserver/hedgedoc:1.11.0-ls193
imagePullPolicy: IfNotPresent
envFrom:
- configMapRef:
name: hedgedoc
- secretRef:
name: hedgedoc
ports:
- name: http
containerPort: 3000
protocol: TCP
volumeMounts:
- mountPath: /config
name: config
livenessProbe:
tcpSocket:
port: http
initialDelaySeconds: 30
failureThreshold: 5
timeoutSeconds: 10
readinessProbe:
tcpSocket:
port: http
initialDelaySeconds: 30
failureThreshold: 5
timeoutSeconds: 10
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
volumes:
- name: config
persistentVolumeClaim:
claimName: hedgedoc-config
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: hedgedoc
namespace: hedgedoc
labels:
app.kubernetes.io/name: hedgedoc
app.kubernetes.io/version: "1.11.0"
app.kubernetes.io/part-of: hedgedoc
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- hedgedoc.t0rt1k.tech
secretName: hedgedoc-tls
rules:
- host: hedgedoc.t0rt1k.tech
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: hedgedoc
port:
number: 3000