Compare commits
2 Commits
7f83a3e526
...
83f1e5d98f
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
83f1e5d98f | ||
|
|
6d913d015e |
@@ -1,8 +0,0 @@
|
|||||||
#apiVersion: v1
|
|
||||||
#kind: Namespace
|
|
||||||
#metadata:
|
|
||||||
# name: openproject
|
|
||||||
# labels:
|
|
||||||
# pod-security.kubernetes.io/enforce: privileged
|
|
||||||
# pod-security.kubernetes.io/audit: privileged
|
|
||||||
# pod-security.kubernetes.io/warn: privileged
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
#apiVersion: v1
|
|
||||||
#kind: Secret
|
|
||||||
#metadata:
|
|
||||||
# name: postgresql-auth
|
|
||||||
# namespace: openproject
|
|
||||||
#type: Opaque
|
|
||||||
#stringData:
|
|
||||||
# postgres-password: InnoPG2025
|
|
||||||
# password: InnoDB2025
|
|
||||||
@@ -1,126 +0,0 @@
|
|||||||
#apiVersion: argoproj.io/v1alpha1
|
|
||||||
#kind: Application
|
|
||||||
#metadata:
|
|
||||||
# name: openproject
|
|
||||||
# finalizers:
|
|
||||||
# - resources-finalizer.argocd.argoproj.io
|
|
||||||
#spec:
|
|
||||||
# project: default
|
|
||||||
# source:
|
|
||||||
# repoURL: 'https://charts.openproject.org'
|
|
||||||
# chart: openproject
|
|
||||||
# targetRevision: 11.*.*
|
|
||||||
# helm:
|
|
||||||
# values: |
|
|
||||||
# develop: false
|
|
||||||
#
|
|
||||||
# environment:
|
|
||||||
# EMAIL_DELIVERY_METHOD: "smtp"
|
|
||||||
# SMTP_ADDRESS: "smtp.innohub.local"
|
|
||||||
# SMTP_PORT: "25"
|
|
||||||
# SMTP_DOMAIN: "innovation-hub-niedersachsen.de"
|
|
||||||
# SMTP_AUTHENTICATION: "none"
|
|
||||||
# SMTP_ENABLE_STARTTLS_AUTO: "false"
|
|
||||||
#
|
|
||||||
# cron:
|
|
||||||
# enabled: false
|
|
||||||
# environment:
|
|
||||||
# IMAP_HOST: "smtp.innovation-hub-niedersachsen.de"
|
|
||||||
# IMAP_PORT: 993
|
|
||||||
# IMAP_SSL: "true"
|
|
||||||
# IMAP_USERNAME: "openproject"
|
|
||||||
# IMAP_PASSWORD: "openproject-imap-password"
|
|
||||||
# schedule: "*/5 * * * *"
|
|
||||||
# ingress:
|
|
||||||
# enabled: true
|
|
||||||
# ingressClassName: traefik
|
|
||||||
# annotations:
|
|
||||||
# kubernetes.io/ingress.class: traefik
|
|
||||||
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
||||||
# traefik.ingress.kubernetes.io/router.tls: "true"
|
|
||||||
# cert-manager.io/cluster-issuer: lets-encrypt
|
|
||||||
# host: "openproject.innovation-hub-niedersachsen.de"
|
|
||||||
# path: /
|
|
||||||
# pathType: "Prefix"
|
|
||||||
# tls:
|
|
||||||
# enabled: true
|
|
||||||
# secretName: openproject-tls
|
|
||||||
#
|
|
||||||
# openproject:
|
|
||||||
# https: true
|
|
||||||
# hsts: true
|
|
||||||
# seed_locale: "de"
|
|
||||||
# useTmpVolumes: "false"
|
|
||||||
# admin_user:
|
|
||||||
# password: "admin"
|
|
||||||
# password_reset: true
|
|
||||||
# name: "OpenProject Admin"
|
|
||||||
# mail: "inno-netz@zpd.polizei.niedersachsen.de"
|
|
||||||
#
|
|
||||||
# resources:
|
|
||||||
# requests:
|
|
||||||
# memory: "1Gi"
|
|
||||||
# limits:
|
|
||||||
# memory: "2Gi"
|
|
||||||
#
|
|
||||||
# appInit:
|
|
||||||
# resources:
|
|
||||||
# requests:
|
|
||||||
# memory: "512Mi"
|
|
||||||
# limits:
|
|
||||||
# memory: "1Gi"
|
|
||||||
#
|
|
||||||
# memcached:
|
|
||||||
# global:
|
|
||||||
# readOnlyRootFilesystem: false
|
|
||||||
#
|
|
||||||
# containerSecurityContext:
|
|
||||||
# readOnlyRootFilesystem: false
|
|
||||||
#
|
|
||||||
# persistence:
|
|
||||||
# enabled: false
|
|
||||||
# accessModes:
|
|
||||||
# - "ReadWriteOnce"
|
|
||||||
#
|
|
||||||
# s3:
|
|
||||||
# enabled: true
|
|
||||||
# auth:
|
|
||||||
# accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8"
|
|
||||||
# secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k"
|
|
||||||
# host: "sws3.innovation-hub-niedersachsen.de"
|
|
||||||
# port: 443
|
|
||||||
# bucketName: "openproject"
|
|
||||||
# region: "eu-central-1"
|
|
||||||
#
|
|
||||||
# postgresql:
|
|
||||||
# bundled: true
|
|
||||||
# auth:
|
|
||||||
# existingSecret: "postgresql-auth"
|
|
||||||
# username: "openproject"
|
|
||||||
# # password: "openproject123"
|
|
||||||
# # postgresPassword: "postgres123"
|
|
||||||
# database: "openproject"
|
|
||||||
# global:
|
|
||||||
# readOnlyRootFilesystem: false
|
|
||||||
# primary:
|
|
||||||
# persistence:
|
|
||||||
# enabled: true
|
|
||||||
# size: 8Gi
|
|
||||||
# service:
|
|
||||||
# type: ClusterIP
|
|
||||||
# ports:
|
|
||||||
# postgresql: 5432
|
|
||||||
#
|
|
||||||
# destination:
|
|
||||||
# server: 'https://kubernetes.default.svc'
|
|
||||||
# namespace: openproject
|
|
||||||
#
|
|
||||||
# syncPolicy:
|
|
||||||
# managedNamespaceMetadata:
|
|
||||||
# labels:
|
|
||||||
# pod-security.kubernetes.io/enforce: "privileged"
|
|
||||||
# automated:
|
|
||||||
# selfHeal: true
|
|
||||||
# prune: true
|
|
||||||
# syncOptions:
|
|
||||||
# - CreateNamespace=true
|
|
||||||
@@ -1,108 +1,108 @@
|
|||||||
apiVersion: argoproj.io/v1alpha1
|
#apiVersion: argoproj.io/v1alpha1
|
||||||
kind: Application
|
#kind: Application
|
||||||
metadata:
|
#metadata:
|
||||||
name: seaweedfs
|
# name: seaweedfs
|
||||||
finalizers:
|
# finalizers:
|
||||||
- resources-finalizer.argocd.argoproj.io
|
# - resources-finalizer.argocd.argoproj.io
|
||||||
spec:
|
#spec:
|
||||||
project: default
|
# project: default
|
||||||
source:
|
# source:
|
||||||
repoURL: "https://seaweedfs.github.io/seaweedfs/helm"
|
# repoURL: "https://seaweedfs.github.io/seaweedfs/helm"
|
||||||
chart: seaweedfs
|
# chart: seaweedfs
|
||||||
targetRevision: "4.*.*"
|
# targetRevision: "4.*.*"
|
||||||
helm:
|
# helm:
|
||||||
values: |
|
# values: |
|
||||||
global:
|
# global:
|
||||||
extraEnvironmentVars:
|
# extraEnvironmentVars:
|
||||||
WEED_CLUSTER_DEFAULT: "sw"
|
# WEED_CLUSTER_DEFAULT: "sw"
|
||||||
WEED_CLUSTER_SW_MASTER: "seaweedfs-master.seaweedfs:9333"
|
# WEED_CLUSTER_SW_MASTER: "seaweedfs-master.seaweedfs:9333"
|
||||||
WEED_CLUSTER_SW_FILER: "seaweedfs-filer.seaweedfs:8888"
|
# WEED_CLUSTER_SW_FILER: "seaweedfs-filer.seaweedfs:8888"
|
||||||
|
#
|
||||||
master:
|
# master:
|
||||||
enabled: true
|
# enabled: true
|
||||||
replicas: 1
|
# replicas: 1
|
||||||
data:
|
# data:
|
||||||
type: existingClaim
|
# type: existingClaim
|
||||||
claimName: seaweedfs-master-data-longhorn
|
# claimName: seaweedfs-master-data-longhorn
|
||||||
|
#
|
||||||
volume:
|
# volume:
|
||||||
enabled: true
|
# enabled: true
|
||||||
replicas: 1
|
# replicas: 1
|
||||||
dataDirs:
|
# dataDirs:
|
||||||
- name: data1
|
# - name: data1
|
||||||
type: existingClaim
|
# type: existingClaim
|
||||||
claimName: seaweedfs-volume-data-longhorn
|
# claimName: seaweedfs-volume-data-longhorn
|
||||||
maxVolumes: 0
|
# maxVolumes: 0
|
||||||
idx:
|
# idx:
|
||||||
type: existingClaim
|
# type: existingClaim
|
||||||
claimName: seaweedfs-volume-idx-longhorn
|
# claimName: seaweedfs-volume-idx-longhorn
|
||||||
|
#
|
||||||
filer:
|
# filer:
|
||||||
enabled: true
|
# enabled: true
|
||||||
replicas: 1
|
# replicas: 1
|
||||||
data:
|
# data:
|
||||||
type: existingClaim
|
# type: existingClaim
|
||||||
claimName: seaweedfs-filer-data-longhorn
|
# claimName: seaweedfs-filer-data-longhorn
|
||||||
# s3:
|
# # s3:
|
||||||
# enabled: false
|
# # enabled: false
|
||||||
# port: 8333
|
# # port: 8333
|
||||||
# domainName: "sws3.innovation-hub-niedersachsen.de"
|
# # domainName: "sws3.innovation-hub-niedersachsen.de"
|
||||||
# allowEmptyFolder: true
|
# # allowEmptyFolder: true
|
||||||
# enableAuth: true
|
# # enableAuth: true
|
||||||
# allowDeleteBucketNotEmpty: true
|
# # allowDeleteBucketNotEmpty: true
|
||||||
|
#
|
||||||
s3:
|
# s3:
|
||||||
enabled: true
|
# enabled: true
|
||||||
replicas: 1
|
# replicas: 1
|
||||||
port: 8333
|
# port: 8333
|
||||||
enableAuth: true
|
# enableAuth: true
|
||||||
existingConfigSecret: admin-s3-secret
|
# existingConfigSecret: admin-s3-secret
|
||||||
existingConfigSecretKey: seaweedfs_s3_config
|
# existingConfigSecretKey: seaweedfs_s3_config
|
||||||
|
#
|
||||||
extraEnvironmentVars:
|
# extraEnvironmentVars:
|
||||||
WEED_S3_ALLOWED_ORIGINS: "*"
|
# WEED_S3_ALLOWED_ORIGINS: "*"
|
||||||
WEED_FILER: "seaweedfs-filer.seaweedfs.svc.cluster.local:8888"
|
# WEED_FILER: "seaweedfs-filer.seaweedfs.svc.cluster.local:8888"
|
||||||
extraArgs:
|
# extraArgs:
|
||||||
- "-allowedOrigins=*"
|
# - "-allowedOrigins=*"
|
||||||
- "-filer=seaweedfs-filer.seaweedfs:8888"
|
# - "-filer=seaweedfs-filer.seaweedfs:8888"
|
||||||
|
#
|
||||||
service:
|
# service:
|
||||||
type: ClusterIP
|
# type: ClusterIP
|
||||||
ports:
|
# ports:
|
||||||
- name: http
|
# - name: http
|
||||||
port: 8333
|
# port: 8333
|
||||||
targetPort: 8333
|
# targetPort: 8333
|
||||||
protocol: TCP
|
# protocol: TCP
|
||||||
|
#
|
||||||
ingress:
|
# ingress:
|
||||||
enabled: true
|
# enabled: true
|
||||||
className: traefik
|
# className: traefik
|
||||||
annotations:
|
# annotations:
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
# traefik.ingress.kubernetes.io/router.tls: "true"
|
||||||
cert-manager.io/cluster-issuer: "lets-encrypt"
|
# cert-manager.io/cluster-issuer: "lets-encrypt"
|
||||||
traefik.ingress.kubernetes.io/router.middlewares: seaweedfs-s3-cors@kubernetescrd
|
# traefik.ingress.kubernetes.io/router.middlewares: seaweedfs-s3-cors@kubernetescrd
|
||||||
host: "sws3.innovation-hub-niedersachsen.de"
|
# host: "sws3.innovation-hub-niedersachsen.de"
|
||||||
hosts:
|
# hosts:
|
||||||
- host: sws3.innovation-hub-niedersachsen.de
|
# - host: sws3.innovation-hub-niedersachsen.de
|
||||||
paths:
|
# paths:
|
||||||
- path: /
|
# - path: /
|
||||||
pathType: Prefix
|
# pathType: Prefix
|
||||||
tls:
|
# tls:
|
||||||
- secretName: sws3.innovation-hub-niedersachsen.de-tls
|
# - secretName: sws3.innovation-hub-niedersachsen.de-tls
|
||||||
hosts:
|
# hosts:
|
||||||
- sws3.innovation-hub-niedersachsen.de
|
# - sws3.innovation-hub-niedersachsen.de
|
||||||
|
#
|
||||||
destination:
|
# destination:
|
||||||
server: "https://kubernetes.default.svc"
|
# server: "https://kubernetes.default.svc"
|
||||||
namespace: seaweedfs
|
# namespace: seaweedfs
|
||||||
|
#
|
||||||
syncPolicy:
|
# syncPolicy:
|
||||||
managedNamespaceMetadata:
|
# managedNamespaceMetadata:
|
||||||
labels:
|
# labels:
|
||||||
pod-security.kubernetes.io/enforce: "privileged"
|
# pod-security.kubernetes.io/enforce: "privileged"
|
||||||
automated:
|
# automated:
|
||||||
selfHeal: true
|
# selfHeal: true
|
||||||
prune: true
|
# prune: true
|
||||||
syncOptions:
|
# syncOptions:
|
||||||
- CreateNamespace=true
|
# - CreateNamespace=true
|
||||||
|
|||||||
Reference in New Issue
Block a user