Make release name templatable
This commit is contained in:
@@ -2,9 +2,9 @@
|
|||||||
apiVersion: s3.onyxia.sh/v1alpha1
|
apiVersion: s3.onyxia.sh/v1alpha1
|
||||||
kind: Policy
|
kind: Policy
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi-policy
|
name: {{ .Release.name }}-policy
|
||||||
spec:
|
spec:
|
||||||
name: memelord-laurivosandi-policy
|
name: {{ .Release.name }}-policy
|
||||||
s3InstanceRef: minio/default
|
s3InstanceRef: minio/default
|
||||||
policyContent: >-
|
policyContent: >-
|
||||||
{
|
{
|
||||||
@@ -18,8 +18,8 @@ spec:
|
|||||||
"s3:PutObject"
|
"s3:PutObject"
|
||||||
],
|
],
|
||||||
"Resource": [
|
"Resource": [
|
||||||
"arn:aws:s3:::memelord-laurivosandi",
|
"arn:aws:s3:::{{ .Release.name }}",
|
||||||
"arn:aws:s3:::memelord-laurivosandi/*"
|
"arn:aws:s3:::{{ .Release.name }}/*"
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
@@ -28,19 +28,19 @@ spec:
|
|||||||
apiVersion: s3.onyxia.sh/v1alpha1
|
apiVersion: s3.onyxia.sh/v1alpha1
|
||||||
kind: S3User
|
kind: S3User
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi-bucket
|
name: {{ .Release.name }}-bucket
|
||||||
spec:
|
spec:
|
||||||
accessKey: memelord-laurivosandi-bucket # This is automatically created
|
accessKey: {{ .Release.name }}-bucket # This is automatically created
|
||||||
policies:
|
policies:
|
||||||
- memelord-laurivosandi-policy
|
- {{ .Release.name }}-policy
|
||||||
s3InstanceRef: minio/default
|
s3InstanceRef: minio/default
|
||||||
---
|
---
|
||||||
apiVersion: s3.onyxia.sh/v1alpha1
|
apiVersion: s3.onyxia.sh/v1alpha1
|
||||||
kind: Bucket
|
kind: Bucket
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.name }}
|
||||||
spec:
|
spec:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.name }}
|
||||||
s3InstanceRef: minio/default
|
s3InstanceRef: minio/default
|
||||||
quota:
|
quota:
|
||||||
default: 100000000
|
default: 100000000
|
||||||
|
|||||||
@@ -43,29 +43,29 @@ spec:
|
|||||||
- name: DB_ENGINE
|
- name: DB_ENGINE
|
||||||
value: postgres
|
value: postgres
|
||||||
- name: POSTGRES_HOST
|
- name: POSTGRES_HOST
|
||||||
value: memelord-laurivosandi-database-rw
|
value: {{ .Release.Name }}-database-rw
|
||||||
- name: POSTGRES_PORT
|
- name: POSTGRES_PORT
|
||||||
value: '5432'
|
value: '5432'
|
||||||
- name: POSTGRES_DB
|
- name: POSTGRES_DB
|
||||||
value: memelord-laurivosandi
|
value: {{ .Release.Name }}
|
||||||
- name: POSTGRES_USER
|
- name: POSTGRES_USER
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: memelord-laurivosandi-database
|
name: {{ .Release.Name }}-database
|
||||||
key: username
|
key: username
|
||||||
- name: POSTGRES_PASSWORD
|
- name: POSTGRES_PASSWORD
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: memelord-laurivosandi-database
|
name: {{ .Release.Name }}-database
|
||||||
key: password
|
key: password
|
||||||
- name: REDIS_HOST
|
- name: REDIS_HOST
|
||||||
value: memelord-laurivosandi-redis
|
value: {{ .Release.Name }}-redis
|
||||||
- name: REDIS_PORT
|
- name: REDIS_PORT
|
||||||
value: '6379'
|
value: '6379'
|
||||||
- name: REDIS_PASSWORD
|
- name: REDIS_PASSWORD
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: memelord-laurivosandi-redis
|
name: {{ .Release.Name }}-redis
|
||||||
key: redis-password
|
key: redis-password
|
||||||
- name: STORAGE_BACKEND
|
- name: STORAGE_BACKEND
|
||||||
value: s3
|
value: s3
|
||||||
@@ -79,15 +79,15 @@ spec:
|
|||||||
- name: AWS_ACCESS_KEY_ID
|
- name: AWS_ACCESS_KEY_ID
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: memelord-laurivosandi-bucket
|
name: {{ .Release.Name }}-bucket
|
||||||
key: accessKey
|
key: accessKey
|
||||||
- name: AWS_SECRET_ACCESS_KEY
|
- name: AWS_SECRET_ACCESS_KEY
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: memelord-laurivosandi-bucket
|
name: {{ .Release.Name }}-bucket
|
||||||
key: secretKey
|
key: secretKey
|
||||||
- name: AWS_STORAGE_BUCKET_NAME
|
- name: AWS_STORAGE_BUCKET_NAME
|
||||||
value: "memelord-laurivosandi"
|
value: "{{ .Release.Name }}"
|
||||||
- name: AWS_S3_REGION_NAME
|
- name: AWS_S3_REGION_NAME
|
||||||
value: "ee-lte-1"
|
value: "ee-lte-1"
|
||||||
- name: AWS_S3_ENDPOINT_URL
|
- name: AWS_S3_ENDPOINT_URL
|
||||||
@@ -105,34 +105,34 @@ spec:
|
|||||||
- name: OIDC_RP_SIGN_ALGO
|
- name: OIDC_RP_SIGN_ALGO
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-client-memelord-laurivosandi-owner-secrets
|
name: oidc-client-{{ .Release.Name }}-owner-secrets
|
||||||
key: OIDC_ID_TOKEN_SIGNED_RESPONSE_ALG
|
key: OIDC_ID_TOKEN_SIGNED_RESPONSE_ALG
|
||||||
- name: OIDC_OP_JWKS_ENDPOINT
|
- name: OIDC_OP_JWKS_ENDPOINT
|
||||||
value: https://auth.ee-lte-1.codemowers.io/jwks
|
value: https://auth.ee-lte-1.codemowers.io/jwks
|
||||||
- name: OIDC_RP_CLIENT_ID
|
- name: OIDC_RP_CLIENT_ID
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-client-memelord-laurivosandi-owner-secrets
|
name: oidc-client-{{ .Release.Name }}-owner-secrets
|
||||||
key: OIDC_CLIENT_ID
|
key: OIDC_CLIENT_ID
|
||||||
- name: OIDC_RP_CLIENT_SECRET
|
- name: OIDC_RP_CLIENT_SECRET
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-client-memelord-laurivosandi-owner-secrets
|
name: oidc-client-{{ .Release.Name }}-owner-secrets
|
||||||
key: OIDC_CLIENT_SECRET
|
key: OIDC_CLIENT_SECRET
|
||||||
- name: OIDC_OP_AUTHORIZATION_ENDPOINT
|
- name: OIDC_OP_AUTHORIZATION_ENDPOINT
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-client-memelord-laurivosandi-owner-secrets
|
name: oidc-client-{{ .Release.Name }}-owner-secrets
|
||||||
key: OIDC_IDP_AUTH_URI
|
key: OIDC_IDP_AUTH_URI
|
||||||
- name: OIDC_OP_TOKEN_ENDPOINT
|
- name: OIDC_OP_TOKEN_ENDPOINT
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-client-memelord-laurivosandi-owner-secrets
|
name: oidc-client-{{ .Release.Name }}-owner-secrets
|
||||||
key: OIDC_IDP_TOKEN_URI
|
key: OIDC_IDP_TOKEN_URI
|
||||||
- name: OIDC_OP_USER_ENDPOINT
|
- name: OIDC_OP_USER_ENDPOINT
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-client-memelord-laurivosandi-owner-secrets
|
name: oidc-client-{{ .Release.Name }}-owner-secrets
|
||||||
key: OIDC_IDP_USERINFO_URI
|
key: OIDC_IDP_USERINFO_URI
|
||||||
- name: SECRET_KEY
|
- name: SECRET_KEY
|
||||||
valueFrom:
|
valueFrom:
|
||||||
|
|||||||
@@ -15,9 +15,9 @@ spec:
|
|||||||
apiVersion: cert-manager.io/v1
|
apiVersion: cert-manager.io/v1
|
||||||
kind: Certificate
|
kind: Certificate
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.Name }}
|
||||||
spec:
|
spec:
|
||||||
secretName: memelord-laurivosandi-tls
|
secretName: {{ .Release.Name }}-tls
|
||||||
dnsNames:
|
dnsNames:
|
||||||
- {{ .Values.hostname }}
|
- {{ .Values.hostname }}
|
||||||
issuerRef:
|
issuerRef:
|
||||||
@@ -27,7 +27,7 @@ spec:
|
|||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.Name }}
|
||||||
annotations:
|
annotations:
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||||
spec:
|
spec:
|
||||||
@@ -43,13 +43,13 @@ spec:
|
|||||||
port:
|
port:
|
||||||
number: 80
|
number: 80
|
||||||
tls:
|
tls:
|
||||||
- secretName: memelord-laurivosandi-tls
|
- secretName: {{ .Release.Name }}-tls
|
||||||
|
|
||||||
---
|
---
|
||||||
apiVersion: codemowers.cloud/v1beta1
|
apiVersion: codemowers.cloud/v1beta1
|
||||||
kind: OIDCClient
|
kind: OIDCClient
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.Name }}
|
||||||
spec:
|
spec:
|
||||||
displayName: Memelord laurivosandi
|
displayName: Memelord laurivosandi
|
||||||
uri: https://{{ .Values.hostname }}/oidc/authenticate/
|
uri: https://{{ .Values.hostname }}/oidc/authenticate/
|
||||||
|
|||||||
@@ -2,12 +2,12 @@
|
|||||||
apiVersion: secretgenerator.mittwald.de/v1alpha1
|
apiVersion: secretgenerator.mittwald.de/v1alpha1
|
||||||
kind: StringSecret
|
kind: StringSecret
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi-database
|
name: {{ .Release.Name }}-database
|
||||||
labels:
|
labels:
|
||||||
cnpg.io/reload: "true"
|
cnpg.io/reload: "true"
|
||||||
spec:
|
spec:
|
||||||
data:
|
data:
|
||||||
username: memelord-laurivosandi
|
username: {{ .Release.Name }}
|
||||||
fields:
|
fields:
|
||||||
- fieldName: password
|
- fieldName: password
|
||||||
length: "32"
|
length: "32"
|
||||||
@@ -16,7 +16,7 @@ spec:
|
|||||||
apiVersion: postgresql.cnpg.io/v1
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
kind: Cluster
|
kind: Cluster
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi-database
|
name: {{ .Release.Name }}-database
|
||||||
spec:
|
spec:
|
||||||
instances: 2
|
instances: 2
|
||||||
imageName: ghcr.io/cloudnative-pg/postgresql:17
|
imageName: ghcr.io/cloudnative-pg/postgresql:17
|
||||||
@@ -49,18 +49,18 @@ spec:
|
|||||||
effective_cache_size: "2GB"
|
effective_cache_size: "2GB"
|
||||||
managed:
|
managed:
|
||||||
roles:
|
roles:
|
||||||
- name: memelord-laurivosandi
|
- name: {{ .Release.Name }}
|
||||||
ensure: present
|
ensure: present
|
||||||
login: true
|
login: true
|
||||||
passwordSecret:
|
passwordSecret:
|
||||||
name: memelord-laurivosandi-database
|
name: {{ .Release.Name }}-database
|
||||||
---
|
---
|
||||||
apiVersion: postgresql.cnpg.io/v1
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
kind: Database
|
kind: Database
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.Name }}
|
||||||
spec:
|
spec:
|
||||||
name: memelord-laurivosandi
|
name: {{ .Release.Name }}
|
||||||
owner: memelord-laurivosandi
|
owner: {{ .Release.Name }}
|
||||||
cluster:
|
cluster:
|
||||||
name: memelord-laurivosandi-database
|
name: {{ .Release.Name }}-database
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
apiVersion: secretgenerator.mittwald.de/v1alpha1
|
apiVersion: secretgenerator.mittwald.de/v1alpha1
|
||||||
kind: StringSecret
|
kind: StringSecret
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi-redis
|
name: {{ .Release.Name }}-redis
|
||||||
spec:
|
spec:
|
||||||
fields:
|
fields:
|
||||||
- fieldName: redis-password
|
- fieldName: redis-password
|
||||||
@@ -12,7 +12,7 @@ spec:
|
|||||||
apiVersion: dragonflydb.io/v1alpha1
|
apiVersion: dragonflydb.io/v1alpha1
|
||||||
kind: Dragonfly
|
kind: Dragonfly
|
||||||
metadata:
|
metadata:
|
||||||
name: memelord-laurivosandi-redis
|
name: {{ .Release.Name }}-redis
|
||||||
spec:
|
spec:
|
||||||
affinity:
|
affinity:
|
||||||
podAffinity:
|
podAffinity:
|
||||||
@@ -25,7 +25,7 @@ spec:
|
|||||||
topologyKey: topology.kubernetes.io/zone
|
topologyKey: topology.kubernetes.io/zone
|
||||||
authentication:
|
authentication:
|
||||||
passwordFromSecret:
|
passwordFromSecret:
|
||||||
name: memelord-laurivosandi-redis
|
name: {{ .Release.Name }}-redis
|
||||||
key: redis-password
|
key: redis-password
|
||||||
replicas: 2
|
replicas: 2
|
||||||
resources:
|
resources:
|
||||||
|
|||||||
Reference in New Issue
Block a user