This commit is contained in:
Raiko Oll
2026-02-16 21:51:53 +02:00
parent 4c1750a6fd
commit d50b5f22e6
8 changed files with 73 additions and 80 deletions

View File

@@ -2,7 +2,7 @@
apiVersion: secretgenerator.mittwald.de/v1alpha1
kind: StringSecret
metadata:
name: memelord-raiko-redis
name: {{ .Release.Name }}-redis
spec:
fields:
- fieldName: redis-password
@@ -12,11 +12,11 @@ spec:
apiVersion: dragonflydb.io/v1alpha1
kind: Dragonfly
metadata:
name: memelord-raiko-redis
name: {{ .Release.Name }}-redis
spec:
authentication:
passwordFromSecret:
name: memelord-raiko-redis
name: {{ .Release.Name }}-redis
key: redis-password
replicas: 1
resources:
@@ -30,12 +30,12 @@ spec:
apiVersion: secretgenerator.mittwald.de/v1alpha1
kind: StringSecret
metadata:
name: memelord-raiko-database
name: {{ .Release.Name }}-database
labels:
cnpg.io/reload: "true"
spec:
data:
username: memelord-raiko
username: {{ .Release.Name }}
fields:
- fieldName: password
length: "32"
@@ -44,7 +44,7 @@ spec:
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: memelord-raiko-database
name: {{ .Release.Name }}-database
spec:
instances: 1
imageName: ghcr.io/cloudnative-pg/postgresql:17
@@ -69,28 +69,28 @@ spec:
effective_cache_size: "2GB"
managed:
roles:
- name: memelord-raiko
- name: {{ .Release.Name }}
ensure: present
login: true
passwordSecret:
name: memelord-raiko-database
name: {{ .Release.Name }}-database
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
metadata:
name: memelord-raiko
name: {{ .Release.Name }}
spec:
name: memelord-raiko
owner: memelord-raiko
name: {{ .Release.Name }}
owner: {{ .Release.Name }}
cluster:
name: memelord-raiko-database
name: {{ .Release.Name }}-database
---
apiVersion: s3.onyxia.sh/v1alpha1
kind: Policy
metadata:
name: memelord-raiko-policy
name: {{ .Release.Name }}-policy
spec:
name: memelord-raiko-policy
name: {{ .Release.Name }}-policy
s3InstanceRef: minio/default
policyContent: >-
{
@@ -102,8 +102,8 @@ spec:
"s3:*"
],
"Resource": [
"arn:aws:s3:::memelord-raiko",
"arn:aws:s3:::memelord-raiko/*"
"arn:aws:s3:::{{ .Release.Name }}",
"arn:aws:s3:::{{ .Release.Name }}/*"
]
}
]
@@ -112,19 +112,19 @@ spec:
apiVersion: s3.onyxia.sh/v1alpha1
kind: S3User
metadata:
name: memelord-raiko-bucket
name: {{ .Release.Name }}-bucket
spec:
accessKey: memelord-raiko-bucket
accessKey: {{ .Release.Name }}-bucket
policies:
- memelord-raiko-policy
- {{ .Release.Name }}-policy
s3InstanceRef: minio/default
---
apiVersion: s3.onyxia.sh/v1alpha1
kind: Bucket
metadata:
name: memelord-raiko
name: {{ .Release.Name }}
spec:
name: memelord-raiko
name: {{ .Release.Name }}
s3InstanceRef: minio/default
quota:
default: 100000000
@@ -132,11 +132,11 @@ spec:
apiVersion: v1
kind: Service
metadata:
name: memelord
name: {{ .Release.Name }}
spec:
type: ClusterIP
selector:
app: memelord
app: {{ .Release.Name }}
ports:
- name: http
port: 80
@@ -145,11 +145,11 @@ spec:
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: memelord-raiko
name: {{ .Release.Name }}
spec:
secretName: memelord-raiko-tls
secretName: {{ .Release.Name }}-tls
dnsNames:
- memelord-raiko.ee-lte-1.codemowers.io
- {{ .Values.hostname }}
issuerRef:
name: letsencrypt
kind: ClusterIssuer
@@ -157,21 +157,21 @@ spec:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: memelord-raiko
name: {{ .Release.Name }}
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
spec:
ingressClassName: traefik
rules:
- host: memelord-raiko.ee-lte-1.codemowers.io
- host: {{ .Values.hostname }}
http:
paths:
- pathType: Prefix
path: "/"
backend:
service:
name: memelord
name: {{ .Release.Name }}
port:
number: 80
tls:
- secretName: memelord-raiko-tls
- secretName: {{ .Release.Name }}-tls