65 lines
1.7 KiB
YAML
65 lines
1.7 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: open-webui
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: 'https://helm.openwebui.com/'
|
|
targetRevision: 9.*.*
|
|
chart: open-webui
|
|
helm:
|
|
values: |
|
|
serviceAccount:
|
|
enable: false
|
|
|
|
persistence:
|
|
size: 200Gi
|
|
storageClass: longhorn
|
|
|
|
ollama:
|
|
enabled: false
|
|
|
|
extraEnvVars:
|
|
- name: OAUTH_LOGOUT_REDIRECT_URL
|
|
value: "https://innollm.innovation-hub-niedersachsen.de/"
|
|
|
|
ingress:
|
|
enabled: true
|
|
class: traefik
|
|
host: "innollm.innovation-hub-niedersachsen.de"
|
|
tls: true
|
|
existingSecret: "innollm-tls"
|
|
annotations:
|
|
kubernetes.io/ingress.class: traefik
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: lets-encrypt
|
|
|
|
sso:
|
|
enabled: true
|
|
enableSignup: true
|
|
mergeAccountsByEmail: false
|
|
enableRoleManagement: false
|
|
enableGroupManagement: false
|
|
oidc:
|
|
enabled: true
|
|
clientId: "open-webui"
|
|
clientSecret: "RFkQ5RDXv6KE4DiQsOq3BJejWFElu90G"
|
|
providerUrl: "https://keycloak.innovation-hub-niedersachsen.de/realms/innohub/.well-known/openid-configuration"
|
|
providerName: "Keycloak"
|
|
|
|
destination:
|
|
server: 'https://kubernetes.default.svc'
|
|
namespace: open-webui
|
|
syncPolicy:
|
|
managedNamespaceMetadata:
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: 'privileged'
|
|
automated:
|
|
selfHeal: true
|
|
prune: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|