alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions 1 Activity

Automated Manifest Update (#5173)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `c3e134f` (on `c3e134ffba591e2752db6fe0a1721ea0de524b87`)
- **Charts Updated**: `eraser,excalidraw,external-dns,external-secrets`

### Update Details (2026-03-27 00:30 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `f09911d` (on `f09911d84f8bf423991c1d2d52318926b66eef76`)
- **Charts Updated**: `external-dns`

Reviewed-on: #5173
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #5173.
This commit is contained in:
Gitea
2026-03-27 00:31:38 +00:00
committed by Alex Lebens
parent 6c6f69ca49
commit 9163bdf6ca
11 changed files with 83 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-cert-controller.yaml
View File

@@ -40,7 +40,7 @@ spec:
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
image: ghcr.io/external-secrets/external-secrets:v2.2.0
image: ghcr.io/external-secrets/external-secrets:v2.2.0@sha256:876e627dbee5b0edd12da49b035469d12418cd6c3c4be5e383ae6a82e8bd4565
imagePullPolicy: IfNotPresent
args:
- certcontroller
@@ -54,6 +54,7 @@ spec:
- --loglevel=info
- --zap-time-encoding=epoch
- --enable-partial-cache=true
- --enable-leader-election=true
ports:
- containerPort: 8080
protocol: TCP
@@ -67,3 +68,7 @@ spec:
path: /readyz
initialDelaySeconds: 20
periodSeconds: 5
resources:
requests:
cpu: 1m
memory: 60Mi

6
clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-webhook.yaml
View File

@@ -40,7 +40,7 @@ spec:
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
image: ghcr.io/external-secrets/external-secrets:v2.2.0
image: ghcr.io/external-secrets/external-secrets:v2.2.0@sha256:876e627dbee5b0edd12da49b035469d12418cd6c3c4be5e383ae6a82e8bd4565
imagePullPolicy: IfNotPresent
args:
- webhook
@@ -68,6 +68,10 @@ spec:
path: /readyz
initialDelaySeconds: 20
periodSeconds: 5
resources:
requests:
cpu: 1m
memory: 30Mi
volumeMounts:
- name: certs
mountPath: /tmp/certs

30
clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets.yaml
View File

@@ -40,15 +40,43 @@ spec:
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
image: ghcr.io/external-secrets/external-secrets:v2.2.0
image: ghcr.io/external-secrets/external-secrets:v2.2.0@sha256:876e627dbee5b0edd12da49b035469d12418cd6c3c4be5e383ae6a82e8bd4565
imagePullPolicy: IfNotPresent
args:
- --enable-leader-election=true
- --enable-extended-metric-labels=true
- --concurrent=1
- --metrics-addr=:8080
- --loglevel=info
- --zap-time-encoding=epoch
- --live-addr=:8082
ports:
- containerPort: 8080
protocol: TCP
name: metrics
- name: live
protocol: TCP
containerPort: 8082
livenessProbe:
failureThreshold: 5
httpGet:
path: /healthz
port: live
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
readinessProbe:
failureThreshold: 3
httpGet:
path: /readyz
port: live
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
resources:
requests:
cpu: 5m
memory: 50Mi
dnsPolicy: ClusterFirst

17
clusters/cl01tl/manifests/external-secrets/PodDisruptionBudget-external-secrets-pdb.yaml Normal file
View File

@@ -0,0 +1,17 @@
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
name: "external-secrets-pdb"
namespace: external-secrets
labels:
helm.sh/chart: external-secrets-2.2.0
app.kubernetes.io/name: external-secrets
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/version: "v2.2.0"
app.kubernetes.io/managed-by: Helm
spec:
minAvailable: 1
selector:
matchLabels:
app.kubernetes.io/name: external-secrets
app.kubernetes.io/instance: external-secrets