74 lines
2.4 KiB
YAML
74 lines
2.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: minio
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: 'registry-1.docker.io/bitnamicharts'
|
|
path: minio
|
|
targetRevision: 16.*.*
|
|
chart: minio
|
|
helm:
|
|
parameters:
|
|
- name: auth.rootPassword
|
|
value: 'InnoHubMINIO_2024!'
|
|
- name: ingress.enabled
|
|
value: 'true'
|
|
- name: ingress.hostname
|
|
value: 's3.innovation-hub-niedersachsen.de'
|
|
- name: ingress.tls
|
|
value: 'true'
|
|
# - name: 'ingress.secrets'
|
|
# value: 's3-tls'
|
|
- name: ingress.annotations.kubernetes\.io\/ingress\.class
|
|
value: traefik
|
|
- name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
|
|
value: 'true'
|
|
forceString: true
|
|
- name: ingress.annotations.cert-manager\.io\/cluster-issuer
|
|
value: 'lets-encrypt'
|
|
#- name: ingress.annotations.ingress\.secrets
|
|
# value: 's3.innovation-hub-niedersachsen.de-tls'
|
|
#- name: ingress.selfSigned
|
|
# value: 'true'
|
|
# - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
|
|
# value: websecure
|
|
- name: apiIngress.enabled
|
|
value: 'true'
|
|
- name: apiIngress.hostname
|
|
value: 'api-s3.innovation-hub-niedersachsen.de'
|
|
- name: apiIngress.tls
|
|
value: 'true'
|
|
#- name: apiIngress.selfSigned
|
|
# value: 'true'
|
|
# - name: apiIngress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
|
|
# value: 'websecure'
|
|
- name: apiIngress.annotations.kubernetes\.io\/ingress\.class
|
|
value: traefik
|
|
- name: apiIngress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
|
|
value: 'true'
|
|
forceString: true
|
|
- name: apiIngress.annotations.cert-manager\.io\/cluster-issuer
|
|
value: 'lets-encrypt'
|
|
# - name: apiIngress.secrets
|
|
# value: 'api-s3-tls'
|
|
destination:
|
|
server: 'https://kubernetes.default.svc'
|
|
namespace: minio
|
|
syncPolicy:
|
|
managedNamespaceMetadata:
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: "privileged"
|
|
automated:
|
|
selfHeal: true
|
|
prune: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- RespectIgnoreDifferences=true
|
|
# ignoreDifferences:
|
|
# - kind: Secret
|
|
# name: 'innovation-hub-niedersachsen.de-s3'
|