openproject commented

argocd/apps/openproject/cvmtmp.sh

@@ -1,13 +0,0 @@
-#!/bin/bash
-
-echo "=== Pods Status ==="
-kubectl get pods -n openproject
-
-echo -e "\n=== Deployment Status ==="
-kubectl get deployment -n openproject
-
-echo -e "\n=== Web Pod Details ==="
-kubectl describe pod -n openproject -l app.kubernetes.io/name=openproject,app.kubernetes.io/component=web | tail -50
-
-echo -e "\n=== ReplicaSet Status ==="
-kubectl get replicaset -n openproject

argocd/apps/openproject/openproject-ns.yaml

@@ -1,8 +1,8 @@
-apiVersion: v1
+#apiVersion: v1
-kind: Namespace
+#kind: Namespace
-metadata: 
+#metadata: 
-  name: openproject
+#  name: openproject
-  labels:
+#  labels:
-    pod-security.kubernetes.io/enforce: privileged
+#    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/audit: privileged
+#    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/warn: privileged
+#    pod-security.kubernetes.io/warn: privileged

argocd/apps/openproject/postgresql-auth.yaml

@@ -1,9 +1,9 @@
-apiVersion: v1
+#apiVersion: v1
-kind: Secret
+#kind: Secret
-metadata:
+#metadata:
-  name: postgresql-auth
+#  name: postgresql-auth
-  namespace: openproject
+#  namespace: openproject
-type: Opaque
+#type: Opaque
-stringData:
+#stringData:
-  postgres-password: InnoPG2025
+#  postgres-password: InnoPG2025
-  password: InnoDB2025
+#  password: InnoDB2025

argocd/apps/openproject/values-openproject.yaml

@@ -1,126 +1,126 @@
-apiVersion: argoproj.io/v1alpha1
+#apiVersion: argoproj.io/v1alpha1
-kind: Application
+#kind: Application
-metadata:
+#metadata:
-  name: openproject
+#  name: openproject
-  finalizers:
+#  finalizers:
-    - resources-finalizer.argocd.argoproj.io
+#    - resources-finalizer.argocd.argoproj.io
-spec:
+#spec:
-  project: default
+#  project: default
-  source:
+#  source:
-    repoURL: 'https://charts.openproject.org'
+#    repoURL: 'https://charts.openproject.org'
-    chart: openproject
+#    chart: openproject
-    targetRevision: 11.*.*
+#    targetRevision: 11.*.*
-    helm:
+#    helm:
-      values: |
+#      values: |
-        develop: false
+#        develop: false
-        
+#        
-        environment:
+#        environment:
-          EMAIL_DELIVERY_METHOD: "smtp"
+#          EMAIL_DELIVERY_METHOD: "smtp"
-          SMTP_ADDRESS: "smtp.innohub.local"
+#          SMTP_ADDRESS: "smtp.innohub.local"
-          SMTP_PORT: "25"
+#          SMTP_PORT: "25"
-          SMTP_DOMAIN: "innovation-hub-niedersachsen.de"
+#          SMTP_DOMAIN: "innovation-hub-niedersachsen.de"
-          SMTP_AUTHENTICATION: "none"
+#          SMTP_AUTHENTICATION: "none"
-          SMTP_ENABLE_STARTTLS_AUTO: "false"
+#          SMTP_ENABLE_STARTTLS_AUTO: "false"
-
+#
-        cron:
+#        cron:
-          enabled: false
+#          enabled: false
-          environment:
+#          environment:
-            IMAP_HOST: "smtp.innovation-hub-niedersachsen.de"
+#            IMAP_HOST: "smtp.innovation-hub-niedersachsen.de"
-            IMAP_PORT: 993
+#            IMAP_PORT: 993
-            IMAP_SSL: "true"
+#            IMAP_SSL: "true"
-            IMAP_USERNAME: "openproject"
+#            IMAP_USERNAME: "openproject"
-            IMAP_PASSWORD: "openproject-imap-password"
+#            IMAP_PASSWORD: "openproject-imap-password"
-          schedule: "*/5 * * * *"  
+#          schedule: "*/5 * * * *"  
-        ingress:
+#        ingress:
-          enabled: true
+#          enabled: true
-          ingressClassName: traefik
+#          ingressClassName: traefik
-          annotations:
+#          annotations:
-            kubernetes.io/ingress.class: traefik
+#            kubernetes.io/ingress.class: traefik
-            traefik.ingress.kubernetes.io/router.entrypoints: websecure
+#            traefik.ingress.kubernetes.io/router.entrypoints: websecure
-            traefik.ingress.kubernetes.io/router.tls: "true"
+#            traefik.ingress.kubernetes.io/router.tls: "true"
-            cert-manager.io/cluster-issuer: lets-encrypt
+#            cert-manager.io/cluster-issuer: lets-encrypt
-          host: "openproject.innovation-hub-niedersachsen.de"
+#          host: "openproject.innovation-hub-niedersachsen.de"
-          path: /
+#          path: /
-          pathType: "Prefix"
+#          pathType: "Prefix"
-          tls:
+#          tls:
-            enabled: true
+#            enabled: true
-            secretName: openproject-tls
+#            secretName: openproject-tls
-        
+#        
-        openproject:
+#        openproject:
-          https: true
+#          https: true
-          hsts: true
+#          hsts: true
-          seed_locale: "de"
+#          seed_locale: "de"
-          useTmpVolumes: "false"
+#          useTmpVolumes: "false"
-          admin_user:
+#          admin_user:
-            password: "admin"
+#            password: "admin"
-            password_reset: true
+#            password_reset: true
-            name: "OpenProject Admin"
+#            name: "OpenProject Admin"
-            mail: "inno-netz@zpd.polizei.niedersachsen.de"
+#            mail: "inno-netz@zpd.polizei.niedersachsen.de"
-
+#
-        resources:
+#        resources:
-          requests:
+#          requests:
-            memory: "1Gi"
+#            memory: "1Gi"
-          limits:
+#          limits:
-            memory: "2Gi"
+#            memory: "2Gi"
-
+#
-        appInit:
+#        appInit:
-          resources:
+#          resources:
-            requests:
+#            requests:
-              memory: "512Mi"
+#              memory: "512Mi"
-            limits:
+#            limits:
-              memory: "1Gi"       
+#              memory: "1Gi"       
-
+#
-        memcached:
+#        memcached:
-          global:
+#          global:
-            readOnlyRootFilesystem: false
+#            readOnlyRootFilesystem: false
-        
+#        
-        containerSecurityContext:
+#        containerSecurityContext:
-          readOnlyRootFilesystem: false
+#          readOnlyRootFilesystem: false
-
+#
-        persistence:
+#        persistence:
-          enabled: false
+#          enabled: false
-          accessModes:
+#          accessModes:
-            - "ReadWriteOnce"
+#            - "ReadWriteOnce"
-
+#
-        s3:
+#        s3:
-          enabled: true
+#          enabled: true
-          auth:
+#          auth:
-            accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8"
+#            accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8"
-            secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k"
+#            secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k"
-          host: "sws3.innovation-hub-niedersachsen.de"
+#          host: "sws3.innovation-hub-niedersachsen.de"
-          port: 443
+#          port: 443
-          bucketName: "openproject"
+#          bucketName: "openproject"
-          region: "eu-central-1"
+#          region: "eu-central-1"
-        
+#        
-        postgresql:
+#        postgresql:
-          bundled: true
+#          bundled: true
-          auth:
+#          auth:
-            existingSecret: "postgresql-auth"
+#            existingSecret: "postgresql-auth"
-            username: "openproject"
+#            username: "openproject"
-            # password: "openproject123"
+#            # password: "openproject123"
-            # postgresPassword: "postgres123"
+#            # postgresPassword: "postgres123"
-            database: "openproject"
+#            database: "openproject"
-          global:
+#          global:
-            readOnlyRootFilesystem: false
+#            readOnlyRootFilesystem: false
-          primary:
+#          primary:
-            persistence:
+#            persistence:
-              enabled: true
+#              enabled: true
-              size: 8Gi
+#              size: 8Gi
-            service:
+#            service:
-              type: ClusterIP
+#              type: ClusterIP
-              ports:
+#              ports:
-                postgresql: 5432
+#                postgresql: 5432
-  
+#  
-  destination:
+#  destination:
-    server: 'https://kubernetes.default.svc'
+#    server: 'https://kubernetes.default.svc'
-    namespace: openproject
+#    namespace: openproject
-  
+#  
-  syncPolicy:
+#  syncPolicy:
-    managedNamespaceMetadata:
+#    managedNamespaceMetadata:
-      labels:
+#      labels:
-        pod-security.kubernetes.io/enforce: "privileged"
+#        pod-security.kubernetes.io/enforce: "privileged"
-    automated:
+#    automated:
-      selfHeal: true
+#      selfHeal: true
-      prune: true
+#      prune: true
-    syncOptions:
+#    syncOptions:
-      - CreateNamespace=true
+#      - CreateNamespace=true