155 lines
4.0 KiB
YAML
155 lines
4.0 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: seaweedfs
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: 'https://seaweedfs.github.io/seaweedfs/helm'
|
|
chart: seaweedfs
|
|
targetRevision: 4.*.*
|
|
helm:
|
|
values: |
|
|
# Global Konfiguration
|
|
global:
|
|
imagePullPolicy: IfNotPresent
|
|
enableSecurity: true
|
|
monitoring:
|
|
enabled: true
|
|
|
|
master:
|
|
enabled: true
|
|
replicas: 1
|
|
data:
|
|
type: "persistentVolumeClaim"
|
|
size: "25Gi"
|
|
storageClass: ""
|
|
logs:
|
|
type: "persistentVolumeClaim"
|
|
size: „5Gi"
|
|
storageClass: ""
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
# host: false for "*" hostname
|
|
host: "seaweed.innovation-hub-niedersachsen.de"
|
|
annotations:
|
|
kubernetes.io/ingress.class: "traefik"
|
|
traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: "lets-encrypt"
|
|
|
|
tls:
|
|
- secretName: "seaweed.innovation-hub-niedersachsen.de-tls"
|
|
hosts:
|
|
- "seaweed.innovation-hub-niedersachsen.de"
|
|
|
|
volume:
|
|
enabled: true
|
|
replicas: 1
|
|
dataDirs:
|
|
- name: data
|
|
type: "persistentVolumeClaim"
|
|
storageClass: ""
|
|
size: "100Gi"
|
|
idx:
|
|
type: "persistentVolumeClaim"
|
|
size: "10Gi"
|
|
storageClass: ""
|
|
|
|
filer:
|
|
enabled: true
|
|
data:
|
|
type: "persistentVolumeClaim"
|
|
size: "25Gi"
|
|
storageClass: ""
|
|
logs:
|
|
type: "persistentVolumeClaim"
|
|
size: "5Gi"
|
|
storageClass: ""
|
|
|
|
# ingress:
|
|
# enabled: true
|
|
# className: "traefik"
|
|
# host: "sws3.innovation-hub-niedersachsen.de"
|
|
# annotations:
|
|
# kubernetes.io/ingress.class: "traefik"
|
|
# traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
|
|
# traefik.ingress.kubernetes.io/router.tls: "true"
|
|
# cert-manager.io/cluster-issuer: "lets-encrypt"
|
|
# tls:
|
|
# - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
|
|
# hosts:
|
|
# - "sws3.innovation-hub-niedersachsen.de"
|
|
# s3:
|
|
# enabled: true
|
|
# port: 8333
|
|
# httpsPort: 0
|
|
# allowEmptyFolder: false
|
|
# # Suffix of the host name, {bucket}.{domainName}
|
|
# domainName: ""
|
|
# # enable user & permission to s3 (need to inject to all services)
|
|
# enableAuth: true
|
|
# # set to the name of an existing kubernetes Secret with the s3 json config file
|
|
# # should have a secret key called seaweedfs_s3_config with an inline json configure
|
|
# existingConfigSecret: "admin-s3-secret"
|
|
|
|
s3:
|
|
enabled: true
|
|
imageOverride: null
|
|
restartPolicy: null
|
|
replicas: 1
|
|
bindAddress: 0.0.0.0
|
|
port: 8333
|
|
# add additional https port
|
|
httpsPort: 0
|
|
metricsPort: 9327
|
|
loggingOverrideLevel: null
|
|
# allow empty folders
|
|
allowEmptyFolder: true
|
|
# enable user & permission to s3 (need to inject to all services)
|
|
enableAuth: true
|
|
# set to the name of an existing kubernetes Secret with the s3 json config file
|
|
# should have a secret key called seaweedfs_s3_config with an inline json config
|
|
existingConfigSecret: "admin-s3-secret"
|
|
auditLogConfig: {}
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
host: "sws3.innovation-hub-niedersachsen.de"
|
|
# additional ingress annotations for the s3 endpoint
|
|
annotations:
|
|
kubernetes.io/ingress.class: "traefik"
|
|
traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: "lets-encrypt"
|
|
tls:
|
|
- secretName: "sws3.innovation-hub-niedersachsen.de-tls"
|
|
hosts:
|
|
- "sws3.innovation-hub-niedersachsen.de"
|
|
|
|
# Resource management
|
|
resources:
|
|
limits:
|
|
cpu: "2"
|
|
memory: "2Gi"
|
|
requests:
|
|
cpu: "500m"
|
|
memory: "1Gi"
|
|
|
|
destination:
|
|
server: 'https://kubernetes.default.svc'
|
|
namespace: seaweedfs
|
|
syncPolicy:
|
|
managedNamespaceMetadata:
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: "privileged"
|
|
automated:
|
|
selfHeal: true
|
|
prune: true
|
|
syncOptions:
|
|
- CreateNamespace=true |