Make release name templatable

This commit is contained in:
2026-02-16 15:52:27 +02:00
parent ddcec86b9c
commit aec600c300
5 changed files with 41 additions and 41 deletions

View File

@@ -2,9 +2,9 @@
apiVersion: s3.onyxia.sh/v1alpha1 apiVersion: s3.onyxia.sh/v1alpha1
kind: Policy kind: Policy
metadata: metadata:
name: memelord-laurivosandi-policy name: {{ .Release.name }}-policy
spec: spec:
name: memelord-laurivosandi-policy name: {{ .Release.name }}-policy
s3InstanceRef: minio/default s3InstanceRef: minio/default
policyContent: >- policyContent: >-
{ {
@@ -18,8 +18,8 @@ spec:
"s3:PutObject" "s3:PutObject"
], ],
"Resource": [ "Resource": [
"arn:aws:s3:::memelord-laurivosandi", "arn:aws:s3:::{{ .Release.name }}",
"arn:aws:s3:::memelord-laurivosandi/*" "arn:aws:s3:::{{ .Release.name }}/*"
] ]
} }
] ]
@@ -28,19 +28,19 @@ spec:
apiVersion: s3.onyxia.sh/v1alpha1 apiVersion: s3.onyxia.sh/v1alpha1
kind: S3User kind: S3User
metadata: metadata:
name: memelord-laurivosandi-bucket name: {{ .Release.name }}-bucket
spec: spec:
accessKey: memelord-laurivosandi-bucket # This is automatically created accessKey: {{ .Release.name }}-bucket # This is automatically created
policies: policies:
- memelord-laurivosandi-policy - {{ .Release.name }}-policy
s3InstanceRef: minio/default s3InstanceRef: minio/default
--- ---
apiVersion: s3.onyxia.sh/v1alpha1 apiVersion: s3.onyxia.sh/v1alpha1
kind: Bucket kind: Bucket
metadata: metadata:
name: memelord-laurivosandi name: {{ .Release.name }}
spec: spec:
name: memelord-laurivosandi name: {{ .Release.name }}
s3InstanceRef: minio/default s3InstanceRef: minio/default
quota: quota:
default: 100000000 default: 100000000

View File

@@ -43,29 +43,29 @@ spec:
- name: DB_ENGINE - name: DB_ENGINE
value: postgres value: postgres
- name: POSTGRES_HOST - name: POSTGRES_HOST
value: memelord-laurivosandi-database-rw value: {{ .Release.Name }}-database-rw
- name: POSTGRES_PORT - name: POSTGRES_PORT
value: '5432' value: '5432'
- name: POSTGRES_DB - name: POSTGRES_DB
value: memelord-laurivosandi value: {{ .Release.Name }}
- name: POSTGRES_USER - name: POSTGRES_USER
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: memelord-laurivosandi-database name: {{ .Release.Name }}-database
key: username key: username
- name: POSTGRES_PASSWORD - name: POSTGRES_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: memelord-laurivosandi-database name: {{ .Release.Name }}-database
key: password key: password
- name: REDIS_HOST - name: REDIS_HOST
value: memelord-laurivosandi-redis value: {{ .Release.Name }}-redis
- name: REDIS_PORT - name: REDIS_PORT
value: '6379' value: '6379'
- name: REDIS_PASSWORD - name: REDIS_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: memelord-laurivosandi-redis name: {{ .Release.Name }}-redis
key: redis-password key: redis-password
- name: STORAGE_BACKEND - name: STORAGE_BACKEND
value: s3 value: s3
@@ -79,15 +79,15 @@ spec:
- name: AWS_ACCESS_KEY_ID - name: AWS_ACCESS_KEY_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: memelord-laurivosandi-bucket name: {{ .Release.Name }}-bucket
key: accessKey key: accessKey
- name: AWS_SECRET_ACCESS_KEY - name: AWS_SECRET_ACCESS_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: memelord-laurivosandi-bucket name: {{ .Release.Name }}-bucket
key: secretKey key: secretKey
- name: AWS_STORAGE_BUCKET_NAME - name: AWS_STORAGE_BUCKET_NAME
value: "memelord-laurivosandi" value: "{{ .Release.Name }}"
- name: AWS_S3_REGION_NAME - name: AWS_S3_REGION_NAME
value: "ee-lte-1" value: "ee-lte-1"
- name: AWS_S3_ENDPOINT_URL - name: AWS_S3_ENDPOINT_URL
@@ -105,34 +105,34 @@ spec:
- name: OIDC_RP_SIGN_ALGO - name: OIDC_RP_SIGN_ALGO
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: oidc-client-memelord-laurivosandi-owner-secrets name: oidc-client-{{ .Release.Name }}-owner-secrets
key: OIDC_ID_TOKEN_SIGNED_RESPONSE_ALG key: OIDC_ID_TOKEN_SIGNED_RESPONSE_ALG
- name: OIDC_OP_JWKS_ENDPOINT - name: OIDC_OP_JWKS_ENDPOINT
value: https://auth.ee-lte-1.codemowers.io/jwks value: https://auth.ee-lte-1.codemowers.io/jwks
- name: OIDC_RP_CLIENT_ID - name: OIDC_RP_CLIENT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: oidc-client-memelord-laurivosandi-owner-secrets name: oidc-client-{{ .Release.Name }}-owner-secrets
key: OIDC_CLIENT_ID key: OIDC_CLIENT_ID
- name: OIDC_RP_CLIENT_SECRET - name: OIDC_RP_CLIENT_SECRET
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: oidc-client-memelord-laurivosandi-owner-secrets name: oidc-client-{{ .Release.Name }}-owner-secrets
key: OIDC_CLIENT_SECRET key: OIDC_CLIENT_SECRET
- name: OIDC_OP_AUTHORIZATION_ENDPOINT - name: OIDC_OP_AUTHORIZATION_ENDPOINT
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: oidc-client-memelord-laurivosandi-owner-secrets name: oidc-client-{{ .Release.Name }}-owner-secrets
key: OIDC_IDP_AUTH_URI key: OIDC_IDP_AUTH_URI
- name: OIDC_OP_TOKEN_ENDPOINT - name: OIDC_OP_TOKEN_ENDPOINT
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: oidc-client-memelord-laurivosandi-owner-secrets name: oidc-client-{{ .Release.Name }}-owner-secrets
key: OIDC_IDP_TOKEN_URI key: OIDC_IDP_TOKEN_URI
- name: OIDC_OP_USER_ENDPOINT - name: OIDC_OP_USER_ENDPOINT
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: oidc-client-memelord-laurivosandi-owner-secrets name: oidc-client-{{ .Release.Name }}-owner-secrets
key: OIDC_IDP_USERINFO_URI key: OIDC_IDP_USERINFO_URI
- name: SECRET_KEY - name: SECRET_KEY
valueFrom: valueFrom:

View File

@@ -15,9 +15,9 @@ spec:
apiVersion: cert-manager.io/v1 apiVersion: cert-manager.io/v1
kind: Certificate kind: Certificate
metadata: metadata:
name: memelord-laurivosandi name: {{ .Release.Name }}
spec: spec:
secretName: memelord-laurivosandi-tls secretName: {{ .Release.Name }}-tls
dnsNames: dnsNames:
- {{ .Values.hostname }} - {{ .Values.hostname }}
issuerRef: issuerRef:
@@ -27,7 +27,7 @@ spec:
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:
name: memelord-laurivosandi name: {{ .Release.Name }}
annotations: annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
spec: spec:
@@ -43,13 +43,13 @@ spec:
port: port:
number: 80 number: 80
tls: tls:
- secretName: memelord-laurivosandi-tls - secretName: {{ .Release.Name }}-tls
--- ---
apiVersion: codemowers.cloud/v1beta1 apiVersion: codemowers.cloud/v1beta1
kind: OIDCClient kind: OIDCClient
metadata: metadata:
name: memelord-laurivosandi name: {{ .Release.Name }}
spec: spec:
displayName: Memelord laurivosandi displayName: Memelord laurivosandi
uri: https://{{ .Values.hostname }}/oidc/authenticate/ uri: https://{{ .Values.hostname }}/oidc/authenticate/

View File

@@ -2,12 +2,12 @@
apiVersion: secretgenerator.mittwald.de/v1alpha1 apiVersion: secretgenerator.mittwald.de/v1alpha1
kind: StringSecret kind: StringSecret
metadata: metadata:
name: memelord-laurivosandi-database name: {{ .Release.Name }}-database
labels: labels:
cnpg.io/reload: "true" cnpg.io/reload: "true"
spec: spec:
data: data:
username: memelord-laurivosandi username: {{ .Release.Name }}
fields: fields:
- fieldName: password - fieldName: password
length: "32" length: "32"
@@ -16,7 +16,7 @@ spec:
apiVersion: postgresql.cnpg.io/v1 apiVersion: postgresql.cnpg.io/v1
kind: Cluster kind: Cluster
metadata: metadata:
name: memelord-laurivosandi-database name: {{ .Release.Name }}-database
spec: spec:
instances: 2 instances: 2
imageName: ghcr.io/cloudnative-pg/postgresql:17 imageName: ghcr.io/cloudnative-pg/postgresql:17
@@ -49,18 +49,18 @@ spec:
effective_cache_size: "2GB" effective_cache_size: "2GB"
managed: managed:
roles: roles:
- name: memelord-laurivosandi - name: {{ .Release.Name }}
ensure: present ensure: present
login: true login: true
passwordSecret: passwordSecret:
name: memelord-laurivosandi-database name: {{ .Release.Name }}-database
--- ---
apiVersion: postgresql.cnpg.io/v1 apiVersion: postgresql.cnpg.io/v1
kind: Database kind: Database
metadata: metadata:
name: memelord-laurivosandi name: {{ .Release.Name }}
spec: spec:
name: memelord-laurivosandi name: {{ .Release.Name }}
owner: memelord-laurivosandi owner: {{ .Release.Name }}
cluster: cluster:
name: memelord-laurivosandi-database name: {{ .Release.Name }}-database

View File

@@ -2,7 +2,7 @@
apiVersion: secretgenerator.mittwald.de/v1alpha1 apiVersion: secretgenerator.mittwald.de/v1alpha1
kind: StringSecret kind: StringSecret
metadata: metadata:
name: memelord-laurivosandi-redis name: {{ .Release.Name }}-redis
spec: spec:
fields: fields:
- fieldName: redis-password - fieldName: redis-password
@@ -12,7 +12,7 @@ spec:
apiVersion: dragonflydb.io/v1alpha1 apiVersion: dragonflydb.io/v1alpha1
kind: Dragonfly kind: Dragonfly
metadata: metadata:
name: memelord-laurivosandi-redis name: {{ .Release.Name }}-redis
spec: spec:
affinity: affinity:
podAffinity: podAffinity:
@@ -25,7 +25,7 @@ spec:
topologyKey: topology.kubernetes.io/zone topologyKey: topology.kubernetes.io/zone
authentication: authentication:
passwordFromSecret: passwordFromSecret:
name: memelord-laurivosandi-redis name: {{ .Release.Name }}-redis
key: redis-password key: redis-password
replicas: 2 replicas: 2
resources: resources: