From 03988f0484b34159afdf5d804d54a24bf92abbf1 Mon Sep 17 00:00:00 2001 From: titver968 Date: Tue, 28 Oct 2025 08:37:01 +0100 Subject: [PATCH] openproject commented --- argocd/apps/openproject/cvmtmp.sh | 13 - argocd/apps/openproject/openproject-ns.yaml | 16 +- argocd/apps/openproject/postgresql-auth.yaml | 18 +- .../apps/openproject/values-openproject.yaml | 252 +++++++++--------- 4 files changed, 143 insertions(+), 156 deletions(-) delete mode 100755 argocd/apps/openproject/cvmtmp.sh diff --git a/argocd/apps/openproject/cvmtmp.sh b/argocd/apps/openproject/cvmtmp.sh deleted file mode 100755 index 6b0e83f..0000000 --- a/argocd/apps/openproject/cvmtmp.sh +++ /dev/null @@ -1,13 +0,0 @@ -#!/bin/bash - -echo "=== Pods Status ===" -kubectl get pods -n openproject - -echo -e "\n=== Deployment Status ===" -kubectl get deployment -n openproject - -echo -e "\n=== Web Pod Details ===" -kubectl describe pod -n openproject -l app.kubernetes.io/name=openproject,app.kubernetes.io/component=web | tail -50 - -echo -e "\n=== ReplicaSet Status ===" -kubectl get replicaset -n openproject diff --git a/argocd/apps/openproject/openproject-ns.yaml b/argocd/apps/openproject/openproject-ns.yaml index 0c0a8ea..a05cffc 100644 --- a/argocd/apps/openproject/openproject-ns.yaml +++ b/argocd/apps/openproject/openproject-ns.yaml @@ -1,8 +1,8 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: openproject - labels: - pod-security.kubernetes.io/enforce: privileged - pod-security.kubernetes.io/audit: privileged - pod-security.kubernetes.io/warn: privileged +#apiVersion: v1 +#kind: Namespace +#metadata: +# name: openproject +# labels: +# pod-security.kubernetes.io/enforce: privileged +# pod-security.kubernetes.io/audit: privileged +# pod-security.kubernetes.io/warn: privileged diff --git a/argocd/apps/openproject/postgresql-auth.yaml b/argocd/apps/openproject/postgresql-auth.yaml index b34ed52..b2d0930 100644 --- a/argocd/apps/openproject/postgresql-auth.yaml +++ b/argocd/apps/openproject/postgresql-auth.yaml @@ -1,9 +1,9 @@ -apiVersion: v1 -kind: Secret -metadata: - name: postgresql-auth - namespace: openproject -type: Opaque -stringData: - postgres-password: InnoPG2025 - password: InnoDB2025 +#apiVersion: v1 +#kind: Secret +#metadata: +# name: postgresql-auth +# namespace: openproject +#type: Opaque +#stringData: +# postgres-password: InnoPG2025 +# password: InnoDB2025 diff --git a/argocd/apps/openproject/values-openproject.yaml b/argocd/apps/openproject/values-openproject.yaml index 4e53282..50e858b 100644 --- a/argocd/apps/openproject/values-openproject.yaml +++ b/argocd/apps/openproject/values-openproject.yaml @@ -1,126 +1,126 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: openproject - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: default - source: - repoURL: 'https://charts.openproject.org' - chart: openproject - targetRevision: 11.*.* - helm: - values: | - develop: false - - environment: - EMAIL_DELIVERY_METHOD: "smtp" - SMTP_ADDRESS: "smtp.innohub.local" - SMTP_PORT: "25" - SMTP_DOMAIN: "innovation-hub-niedersachsen.de" - SMTP_AUTHENTICATION: "none" - SMTP_ENABLE_STARTTLS_AUTO: "false" - - cron: - enabled: false - environment: - IMAP_HOST: "smtp.innovation-hub-niedersachsen.de" - IMAP_PORT: 993 - IMAP_SSL: "true" - IMAP_USERNAME: "openproject" - IMAP_PASSWORD: "openproject-imap-password" - schedule: "*/5 * * * *" - ingress: - enabled: true - ingressClassName: traefik - annotations: - kubernetes.io/ingress.class: traefik - traefik.ingress.kubernetes.io/router.entrypoints: websecure - traefik.ingress.kubernetes.io/router.tls: "true" - cert-manager.io/cluster-issuer: lets-encrypt - host: "openproject.innovation-hub-niedersachsen.de" - path: / - pathType: "Prefix" - tls: - enabled: true - secretName: openproject-tls - - openproject: - https: true - hsts: true - seed_locale: "de" - useTmpVolumes: "false" - admin_user: - password: "admin" - password_reset: true - name: "OpenProject Admin" - mail: "inno-netz@zpd.polizei.niedersachsen.de" - - resources: - requests: - memory: "1Gi" - limits: - memory: "2Gi" - - appInit: - resources: - requests: - memory: "512Mi" - limits: - memory: "1Gi" - - memcached: - global: - readOnlyRootFilesystem: false - - containerSecurityContext: - readOnlyRootFilesystem: false - - persistence: - enabled: false - accessModes: - - "ReadWriteOnce" - - s3: - enabled: true - auth: - accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8" - secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k" - host: "sws3.innovation-hub-niedersachsen.de" - port: 443 - bucketName: "openproject" - region: "eu-central-1" - - postgresql: - bundled: true - auth: - existingSecret: "postgresql-auth" - username: "openproject" - # password: "openproject123" - # postgresPassword: "postgres123" - database: "openproject" - global: - readOnlyRootFilesystem: false - primary: - persistence: - enabled: true - size: 8Gi - service: - type: ClusterIP - ports: - postgresql: 5432 - - destination: - server: 'https://kubernetes.default.svc' - namespace: openproject - - syncPolicy: - managedNamespaceMetadata: - labels: - pod-security.kubernetes.io/enforce: "privileged" - automated: - selfHeal: true - prune: true - syncOptions: - - CreateNamespace=true +#apiVersion: argoproj.io/v1alpha1 +#kind: Application +#metadata: +# name: openproject +# finalizers: +# - resources-finalizer.argocd.argoproj.io +#spec: +# project: default +# source: +# repoURL: 'https://charts.openproject.org' +# chart: openproject +# targetRevision: 11.*.* +# helm: +# values: | +# develop: false +# +# environment: +# EMAIL_DELIVERY_METHOD: "smtp" +# SMTP_ADDRESS: "smtp.innohub.local" +# SMTP_PORT: "25" +# SMTP_DOMAIN: "innovation-hub-niedersachsen.de" +# SMTP_AUTHENTICATION: "none" +# SMTP_ENABLE_STARTTLS_AUTO: "false" +# +# cron: +# enabled: false +# environment: +# IMAP_HOST: "smtp.innovation-hub-niedersachsen.de" +# IMAP_PORT: 993 +# IMAP_SSL: "true" +# IMAP_USERNAME: "openproject" +# IMAP_PASSWORD: "openproject-imap-password" +# schedule: "*/5 * * * *" +# ingress: +# enabled: true +# ingressClassName: traefik +# annotations: +# kubernetes.io/ingress.class: traefik +# traefik.ingress.kubernetes.io/router.entrypoints: websecure +# traefik.ingress.kubernetes.io/router.tls: "true" +# cert-manager.io/cluster-issuer: lets-encrypt +# host: "openproject.innovation-hub-niedersachsen.de" +# path: / +# pathType: "Prefix" +# tls: +# enabled: true +# secretName: openproject-tls +# +# openproject: +# https: true +# hsts: true +# seed_locale: "de" +# useTmpVolumes: "false" +# admin_user: +# password: "admin" +# password_reset: true +# name: "OpenProject Admin" +# mail: "inno-netz@zpd.polizei.niedersachsen.de" +# +# resources: +# requests: +# memory: "1Gi" +# limits: +# memory: "2Gi" +# +# appInit: +# resources: +# requests: +# memory: "512Mi" +# limits: +# memory: "1Gi" +# +# memcached: +# global: +# readOnlyRootFilesystem: false +# +# containerSecurityContext: +# readOnlyRootFilesystem: false +# +# persistence: +# enabled: false +# accessModes: +# - "ReadWriteOnce" +# +# s3: +# enabled: true +# auth: +# accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8" +# secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k" +# host: "sws3.innovation-hub-niedersachsen.de" +# port: 443 +# bucketName: "openproject" +# region: "eu-central-1" +# +# postgresql: +# bundled: true +# auth: +# existingSecret: "postgresql-auth" +# username: "openproject" +# # password: "openproject123" +# # postgresPassword: "postgres123" +# database: "openproject" +# global: +# readOnlyRootFilesystem: false +# primary: +# persistence: +# enabled: true +# size: 8Gi +# service: +# type: ClusterIP +# ports: +# postgresql: 5432 +# +# destination: +# server: 'https://kubernetes.default.svc' +# namespace: openproject +# +# syncPolicy: +# managedNamespaceMetadata: +# labels: +# pod-security.kubernetes.io/enforce: "privileged" +# automated: +# selfHeal: true +# prune: true +# syncOptions: +# - CreateNamespace=true