Files
k3s/argocd/apps/seaweedfs/seaweedfs.yaml
2025-06-10 11:10:50 +02:00

69 lines
2.6 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: seaweedfs
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
source:
repoURL: 'https://seaweedfs.github.io/seaweedfs/helm'
path: seaweedfs
targetRevision: 4.*.*
chart: seaweedfs
helm:
parameters:
- name: ingress.enabled
value: 'true'
- name: ingress.hostname
value: 's3x.innovation-hub-niedersachsen.de'
- name: ingress.tls
value: 'true'
- name: ingress.annotations.kubernetes\.io\/ingress\.class
value: traefik
- name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
value: 'true'
forceString: true
- name: ingress.annotations.cert-manager\.io\/cluster-issuer
value: 'lets-encrypt'
- name: ingress.annotations.ingress\.secrets
value: 's3x.innovation-hub-niedersachsen.de-tls'
- name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
value: websecure
- name: apiIngress.enabled
value: 'true'
- name: apiIngress.hostname
value: 'api-s3x.innovation-hub-niedersachsen.de'
- name: apiIngress.tls
value: 'true'
- name: apiIngress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
value: 'websecure'
- name: apiIngress.annotations.kubernetes\.io\/ingress\.class
value: traefik
- name: apiIngress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
value: 'true'
forceString: true
- name: apiIngress.annotations.cert-manager\.io\/cluster-issuer
value: 'lets-encrypt'
- name: apiIngress.annotations.ingress\.secrets
value: 'api-s3x.innovation-hub-niedersachsen.de-tls'
- name: 'filer.s3.enabled'
value: 'true'
- name: 'filer.s3.enableAuth'
value: 'true'
- name: 'stringData.seaweedfs_s3_config'
value: '{"identities":[{"name":"anvAdmin","credentials":[{"accessKey":"snu8yoP6QAlY0ne4","secretKey":"PNzBcmeLNEdR0oviwm04NQAicOrDH1Km"}],"actions":["Admin","Read","Write"]},{"name":"anvReadOnly","credentials":[{"accessKey":"SCigFee6c5lbi04A","secretKey":"kgFhbT38R8WUYVtiFQ1OiSVOrYr3NKku"}],"actions":["Read"]}]}'
destination:
server: 'https://kubernetes.default.svc'
namespace: seaweedfs
syncPolicy:
managedNamespaceMetadata:
labels:
pod-security.kubernetes.io/enforce: "privileged"
automated:
selfHeal: true
prune: true
syncOptions:
- CreateNamespace=true
- RespectIgnoreDifferences=true