convert to use app-template
This commit is contained in:
@@ -1,17 +1,33 @@
|
|||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
name: taiga
|
name: taiga
|
||||||
version: 1.0.0
|
version: 1.0.0
|
||||||
|
description: Taiga
|
||||||
|
keywords:
|
||||||
|
- kanban
|
||||||
|
- project management
|
||||||
sources:
|
sources:
|
||||||
- https://github.com/taigaio
|
- https://github.com/taigaio
|
||||||
- https://github.com/rabbitmq/rabbitmq-server
|
- https://github.com/rabbitmq/rabbitmq-server
|
||||||
- https://github.com/alexlebens/helm-charts/charts/taiga
|
- https://github.com/bitnami/charts/tree/main/bitnami/rabbitmq
|
||||||
- https://github.com/alexlebens/helm-charts/charts/postgres-cluster
|
- https://github.com/alexlebens/helm-charts/charts/postgres-cluster
|
||||||
|
maintainers:
|
||||||
|
- name: alexlebens
|
||||||
dependencies:
|
dependencies:
|
||||||
- name: taiga
|
- name: app-template
|
||||||
version: 0.2.3
|
alias: taiga
|
||||||
repository: http://alexlebens.github.io/helm-charts
|
repository: https://bjw-s.github.io/helm-charts/
|
||||||
|
version: 3.2.1
|
||||||
|
- name: rabbitmq
|
||||||
|
version: 14.1.5
|
||||||
|
repository: https://charts.bitnami.com/bitnami
|
||||||
|
alias: async-rabbitmq
|
||||||
|
- name: rabbitmq
|
||||||
|
version: 14.1.5
|
||||||
|
repository: https://charts.bitnami.com/bitnami
|
||||||
|
alias: events-rabbitmq
|
||||||
- name: postgres-cluster
|
- name: postgres-cluster
|
||||||
alias: postgres-16-cluster
|
alias: postgres-16-cluster
|
||||||
version: 3.1.0
|
version: 3.1.0
|
||||||
repository: http://alexlebens.github.io/helm-charts
|
repository: http://alexlebens.github.io/helm-charts
|
||||||
|
icon: https://avatars.githubusercontent.com/u/6905422?s=200&v=4
|
||||||
appVersion: 6.7.7
|
appVersion: 6.7.7
|
||||||
|
|||||||
@@ -18,7 +18,7 @@ spec:
|
|||||||
remoteRef:
|
remoteRef:
|
||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
key: /taiga/key
|
key: /cl01tl/taiga/key
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: key
|
property: key
|
||||||
|
|
||||||
@@ -32,7 +32,7 @@ metadata:
|
|||||||
app.kubernetes.io/name: taiga-oidc-secret
|
app.kubernetes.io/name: taiga-oidc-secret
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||||
app.kubernetes.io/component: web
|
app.kubernetes.io/component: auth
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
@@ -53,55 +53,6 @@ spec:
|
|||||||
key: /authentik/oidc/taiga
|
key: /authentik/oidc/taiga
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: secret
|
property: secret
|
||||||
- secretKey: scopes
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: scopes
|
|
||||||
- secretKey: signatureAlgorithm
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: signatureAlgorithm
|
|
||||||
- secretKey: baseUrl
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: baseUrl
|
|
||||||
- secretKey: jwksEndpoint
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: jwksEndpoint
|
|
||||||
- secretKey: authorizationEndpoint
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: authorizationEndpoint
|
|
||||||
- secretKey: tokenEndpoint
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: tokenEndpoint
|
|
||||||
- secretKey: userEndpoint
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /authentik/oidc/taiga
|
|
||||||
metadataPolicy: None
|
|
||||||
property: userEndpoint
|
|
||||||
|
|
||||||
---
|
---
|
||||||
apiVersion: external-secrets.io/v1beta1
|
apiVersion: external-secrets.io/v1beta1
|
||||||
@@ -124,14 +75,14 @@ spec:
|
|||||||
remoteRef:
|
remoteRef:
|
||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
key: /taiga/rabbitmq/async
|
key: /cl01tl/taiga/rabbitmq/async
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: password
|
property: password
|
||||||
- secretKey: erlang
|
- secretKey: erlang
|
||||||
remoteRef:
|
remoteRef:
|
||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
key: /taiga/rabbitmq/async
|
key: /cl01tl/taiga/rabbitmq/async
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: erlang
|
property: erlang
|
||||||
|
|
||||||
@@ -156,14 +107,14 @@ spec:
|
|||||||
remoteRef:
|
remoteRef:
|
||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
key: /taiga/rabbitmq/events
|
key: /cl01tl/taiga/rabbitmq/events
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: password
|
property: password
|
||||||
- secretKey: erlang
|
- secretKey: erlang
|
||||||
remoteRef:
|
remoteRef:
|
||||||
conversionStrategy: Default
|
conversionStrategy: Default
|
||||||
decodingStrategy: None
|
decodingStrategy: None
|
||||||
key: /taiga/rabbitmq/events
|
key: /cl01tl/taiga/rabbitmq/events
|
||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
property: erlang
|
property: erlang
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,40 @@
|
|||||||
|
kind: PersistentVolumeClaim
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: taiga-static
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: taiga-static
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/component: storage
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
spec:
|
||||||
|
volumeMode: Filesystem
|
||||||
|
storageClassName: nfs-client
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 1Gi
|
||||||
|
|
||||||
|
---
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: taiga-media
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: taiga-media
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/component: storage
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
spec:
|
||||||
|
volumeMode: Filesystem
|
||||||
|
storageClassName: nfs-client
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 1Gi
|
||||||
@@ -1,139 +1,417 @@
|
|||||||
taiga:
|
taiga:
|
||||||
|
controllers:
|
||||||
|
front:
|
||||||
|
type: deployment
|
||||||
|
replicas: 1
|
||||||
|
strategy: Recreate
|
||||||
|
revisionHistoryLimit: 3
|
||||||
|
containers:
|
||||||
|
front:
|
||||||
|
image:
|
||||||
|
repository: ghcr.io/alexlebens/taiga-front-docker-oidc
|
||||||
|
tag: 6.7.7
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
env:
|
||||||
|
- name: TAIGA_URL
|
||||||
|
value: https://taiga.alexlebens.net
|
||||||
|
- name: PUBLIC_REGISTER_ENABLED
|
||||||
|
value: false
|
||||||
|
- name: ENABLE_GITHUB_AUTH
|
||||||
|
value: false
|
||||||
|
- name: ENABLE_GITLAB_AUTH
|
||||||
|
value: false
|
||||||
|
- name: ENABLE_OIDC
|
||||||
|
value: true
|
||||||
|
- name: ENABLE_SLACK
|
||||||
|
value: false
|
||||||
|
- name: ENABLE_GITHUB_IMPORTER
|
||||||
|
value: false
|
||||||
|
- name: ENABLE_JIRA_IMPORTER
|
||||||
|
value: false
|
||||||
|
- name: ENABLE_TRELLO_IMPORTER
|
||||||
|
value: false
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
back:
|
||||||
|
type: deployment
|
||||||
|
replicas: 1
|
||||||
|
strategy: Recreate
|
||||||
|
revisionHistoryLimit: 3
|
||||||
|
containers:
|
||||||
|
back:
|
||||||
|
image:
|
||||||
|
repository: ghcr.io/alexlebens/taiga-back-docker-oidc
|
||||||
|
tag: 6.7.3
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
env:
|
||||||
|
- name: TAIGA_SECRET_KEY
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-key-secret
|
||||||
|
key: key
|
||||||
|
- name: ENABLE_TELEMETRY
|
||||||
|
value: false
|
||||||
|
- name: PUBLIC_REGISTER_ENABLED
|
||||||
|
value: false
|
||||||
|
- name: POSTGRES_USER
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: username
|
||||||
|
- name: POSTGRES_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: password
|
||||||
|
- name: POSTGRES_DB
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: dbname
|
||||||
|
- name: POSTGRES_HOST
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: host
|
||||||
|
- name: OIDC_ENABLED
|
||||||
|
value: "True"
|
||||||
|
- name: OIDC_CLIENT_ID
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-oidc-secret
|
||||||
|
key: client
|
||||||
|
- name: OIDC_CLIENT_SECRET
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-oidc-secret
|
||||||
|
key: secret
|
||||||
|
- name: OIDC_SCOPES
|
||||||
|
value: openid profile email
|
||||||
|
- name: OIDC_SIGN_ALGO
|
||||||
|
value: RS256
|
||||||
|
- name: OIDC_BASE_URL
|
||||||
|
value: https://authentik.alexlebens.net/application/o/
|
||||||
|
- name: OIDC_JWKS_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/taiga/jwks/
|
||||||
|
- name: OIDC_AUTHORIZATION_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/authorize/
|
||||||
|
- name: OIDC_TOKEN_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/token/
|
||||||
|
- name: OIDC_USER_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/userinfo/
|
||||||
|
- name: ENABLE_GITHUB_AUTH
|
||||||
|
value: "false"
|
||||||
|
- name: ENABLE_GITLAB_AUTH
|
||||||
|
value: "false"
|
||||||
|
- name: ENABLE_SLACK
|
||||||
|
value: "false"
|
||||||
|
- name: ENABLE_GITHUB_IMPORTER
|
||||||
|
value: "False"
|
||||||
|
- name: ENABLE_JIRA_IMPORTER
|
||||||
|
value: "False"
|
||||||
|
- name: ENABLE_JIRA_IMPORTER
|
||||||
|
value: "False"
|
||||||
|
- name: RABBITMQ_USER
|
||||||
|
value: taiga
|
||||||
|
- name: RABBITMQ_PASS
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-async-rabbitmq-secret
|
||||||
|
key: password
|
||||||
|
- name: TAIGA_SITES_DOMAIN
|
||||||
|
value: taiga.alexlebens.net
|
||||||
|
- name: TAIGA_SITES_SCHEME
|
||||||
|
value: https
|
||||||
|
- name: SESSION_COOKIE_SECURE
|
||||||
|
value: "True"
|
||||||
|
- name: CSRF_COOKIE_SECURE
|
||||||
|
value: "True"
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
async:
|
||||||
|
image:
|
||||||
|
repository: ghcr.io/alexlebens/taiga-back-docker-oidc
|
||||||
|
tag: 6.7.3
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
command:
|
||||||
|
- /taiga-back/docker/async_entrypoint.sh
|
||||||
|
env:
|
||||||
|
- name: TAIGA_SECRET_KEY
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-key-secret
|
||||||
|
key: key
|
||||||
|
- name: ENABLE_TELEMETRY
|
||||||
|
value: false
|
||||||
|
- name: PUBLIC_REGISTER_ENABLED
|
||||||
|
value: false
|
||||||
|
- name: POSTGRES_USER
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: username
|
||||||
|
- name: POSTGRES_PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: password
|
||||||
|
- name: POSTGRES_DB
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: dbname
|
||||||
|
- name: POSTGRES_HOST
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-postgresql-16-cluster-app
|
||||||
|
key: host
|
||||||
|
- name: OIDC_ENABLED
|
||||||
|
value: "True"
|
||||||
|
- name: OIDC_CLIENT_ID
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-oidc-secret
|
||||||
|
key: client
|
||||||
|
- name: OIDC_CLIENT_SECRET
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-oidc-secret
|
||||||
|
key: secret
|
||||||
|
- name: OIDC_SCOPES
|
||||||
|
value: openid profile email
|
||||||
|
- name: OIDC_SIGN_ALGO
|
||||||
|
value: RS256
|
||||||
|
- name: OIDC_BASE_URL
|
||||||
|
value: https://authentik.alexlebens.net/application/o/
|
||||||
|
- name: OIDC_JWKS_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/taiga/jwks/
|
||||||
|
- name: OIDC_AUTHORIZATION_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/authorize/
|
||||||
|
- name: OIDC_TOKEN_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/token/
|
||||||
|
- name: OIDC_USER_ENDPOINT
|
||||||
|
value: https://authentik.alexlebens.net/application/o/userinfo/
|
||||||
|
- name: ENABLE_GITHUB_AUTH
|
||||||
|
value: "false"
|
||||||
|
- name: ENABLE_GITLAB_AUTH
|
||||||
|
value: "false"
|
||||||
|
- name: ENABLE_SLACK
|
||||||
|
value: "false"
|
||||||
|
- name: ENABLE_GITHUB_IMPORTER
|
||||||
|
value: "False"
|
||||||
|
- name: ENABLE_JIRA_IMPORTER
|
||||||
|
value: "False"
|
||||||
|
- name: ENABLE_JIRA_IMPORTER
|
||||||
|
value: "False"
|
||||||
|
- name: RABBITMQ_USER
|
||||||
|
value: taiga
|
||||||
|
- name: RABBITMQ_PASS
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-async-rabbitmq-secret
|
||||||
|
key: password
|
||||||
|
- name: TAIGA_SITES_DOMAIN
|
||||||
|
value: taiga.alexlebens.net
|
||||||
|
- name: TAIGA_SITES_SCHEME
|
||||||
|
value: https
|
||||||
|
- name: SESSION_COOKIE_SECURE
|
||||||
|
value: "True"
|
||||||
|
- name: CSRF_COOKIE_SECURE
|
||||||
|
value: "True"
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
events:
|
||||||
|
type: deployment
|
||||||
|
replicas: 1
|
||||||
|
strategy: Recreate
|
||||||
|
revisionHistoryLimit: 3
|
||||||
|
containers:
|
||||||
|
events:
|
||||||
|
image:
|
||||||
|
repository: taigaio/taiga-events
|
||||||
|
tag: 6.7.0
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
env:
|
||||||
|
- name: TAIGA_SECRET_KEY
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-key-secret
|
||||||
|
key: key
|
||||||
|
- name: RABBITMQ_USER
|
||||||
|
value: taiga
|
||||||
|
- name: RABBITMQ_PASS
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-events-rabbitmq-secret
|
||||||
|
key: password
|
||||||
|
- name: APP_PORT
|
||||||
|
value: 3023
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
protected:
|
||||||
|
type: deployment
|
||||||
|
replicas: 1
|
||||||
|
strategy: Recreate
|
||||||
|
revisionHistoryLimit: 3
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
image:
|
||||||
|
repository: taigaio/taiga-protected
|
||||||
|
tag: 6.7.0
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
env:
|
||||||
|
- name: SECRET_KEY
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: taiga-key-secret
|
||||||
|
key: key
|
||||||
|
- name: MAX_AGE
|
||||||
|
value: 360
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
serviceAccount:
|
serviceAccount:
|
||||||
create: true
|
create: true
|
||||||
secretKey:
|
service:
|
||||||
existingSecretName: taiga-key-secret
|
front:
|
||||||
existingSecretKey: key
|
controller: front
|
||||||
createInitialUser: false
|
ports:
|
||||||
enableTelemetry: false
|
front:
|
||||||
publicRegisterEnabled: false
|
port: 80
|
||||||
postgresql:
|
targetPort: 80
|
||||||
existingSecretName: taiga-postgresql-16-cluster-app
|
protocol: HTTP
|
||||||
usernameKey: username
|
back:
|
||||||
passwordKey: password
|
controller: back
|
||||||
databaseNameKey: dbname
|
ports:
|
||||||
hostKey: host
|
back:
|
||||||
portKey: port
|
port: 8000
|
||||||
oidc:
|
targetPort: 8000
|
||||||
enabled: true
|
protocol: HTTP
|
||||||
existingSecretName: taiga-oidc-secret
|
events:
|
||||||
scopesKey: scopes
|
controller: events
|
||||||
signatureAlgorithmKey: signatureAlgorithm
|
ports:
|
||||||
clientIdKey: client
|
events:
|
||||||
clientSecretKey: secret
|
port: 8888
|
||||||
baseUrlKey: baseUrl
|
targetPort: 8888
|
||||||
jwksEndpointKey: jwksEndpoint
|
protocol: HTTP
|
||||||
authorizationEndpointKey: authorizationEndpoint
|
app:
|
||||||
tokenEndpointKey: tokenEndpoint
|
port: 3023
|
||||||
userEndpointKey: userEndpoint
|
targetPort: 3023
|
||||||
back:
|
protocol: HTTP
|
||||||
image:
|
protected:
|
||||||
repository: ghcr.io/alexlebens/taiga-back-docker-oidc
|
controller: protected
|
||||||
tag: latest
|
ports:
|
||||||
pullPolicy: Always
|
protected:
|
||||||
resources:
|
port: 8003
|
||||||
requests:
|
targetPort: 8003
|
||||||
cpu: 100m
|
protocol: HTTP
|
||||||
memory: 256Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 1Gi
|
|
||||||
livenessProbe:
|
|
||||||
enabled: true
|
|
||||||
readinessProbe:
|
|
||||||
enabled: true
|
|
||||||
async:
|
|
||||||
image:
|
|
||||||
repository: ghcr.io/alexlebens/taiga-back-docker-oidc
|
|
||||||
tag: latest
|
|
||||||
pullPolicy: Always
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 1Gi
|
|
||||||
livenessProbe:
|
|
||||||
enabled: true
|
|
||||||
readinessProbe:
|
|
||||||
enabled: true
|
|
||||||
async-rabbitmq:
|
|
||||||
auth:
|
|
||||||
username: taiga
|
|
||||||
existingPasswordSecret: taiga-async-rabbitmq-secret
|
|
||||||
existingSecretPasswordKey: password
|
|
||||||
existingErlangSecret: taiga-async-rabbitmq-secret
|
|
||||||
existingSecretErlangKey: erlang
|
|
||||||
events:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 1Gi
|
|
||||||
livenessProbe:
|
|
||||||
enabled: false
|
|
||||||
readinessProbe:
|
|
||||||
enabled: false
|
|
||||||
events-rabbitmq:
|
|
||||||
auth:
|
|
||||||
username: taiga
|
|
||||||
existingPasswordSecret: taiga-events-rabbitmq-secret
|
|
||||||
existingSecretPasswordKey: password
|
|
||||||
existingErlangSecret: taiga-events-rabbitmq-secret
|
|
||||||
existingSecretErlangKey: erlang
|
|
||||||
protected:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 1Gi
|
|
||||||
livenessProbe:
|
|
||||||
enabled: false
|
|
||||||
readinessProbe:
|
|
||||||
enabled: false
|
|
||||||
front:
|
|
||||||
image:
|
|
||||||
repository: ghcr.io/alexlebens/taiga-front-docker-oidc
|
|
||||||
tag: latest
|
|
||||||
pullPolicy: Always
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 1Gi
|
|
||||||
livenessProbe:
|
|
||||||
enabled: true
|
|
||||||
readinessProbe:
|
|
||||||
enabled: true
|
|
||||||
ingress:
|
ingress:
|
||||||
enabled: true
|
main:
|
||||||
annotations:
|
className: traefik
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
annotations:
|
||||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||||
cert-manager.io/cluster-issuer: letsencrypt-issuer
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||||
className: traefik
|
cert-manager.io/cluster-issuer: letsencrypt-issuer
|
||||||
host: taiga.alexlebens.net
|
hosts:
|
||||||
|
- host: taiga.alexlebens.net
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
name: taiga-front
|
||||||
|
port: 80
|
||||||
|
- path: /api
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
name: taiga-back
|
||||||
|
port: 8000
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
- path: /admin
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
name: taiga-back
|
||||||
|
port: 8000
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
- path: /oidc
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
name: taiga-back
|
||||||
|
port: 8000
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
- path: /events
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
name: taiga-events
|
||||||
|
port: 8888
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
- path: /media
|
||||||
|
pathType: Prefix
|
||||||
|
service:
|
||||||
|
name: taiga-protected
|
||||||
|
port: 8003
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
tls:
|
||||||
|
- secretName: taiga-secret-tls
|
||||||
|
hosts:
|
||||||
|
- taiga.alexlebens.net
|
||||||
persistence:
|
persistence:
|
||||||
static:
|
static:
|
||||||
enabled: true
|
existingClaim: taiga-static
|
||||||
storageClass: nfs-client
|
advancedMounts:
|
||||||
accessMode: ReadWriteMany
|
back:
|
||||||
size: 1Gi
|
back:
|
||||||
|
- path: /taiga-back/static
|
||||||
|
readOnly: false
|
||||||
|
back:
|
||||||
|
async:
|
||||||
|
- path: /taiga-back/static
|
||||||
|
readOnly: false
|
||||||
media:
|
media:
|
||||||
enabled: true
|
existingClaim: taiga-media
|
||||||
storageClass: nfs-client
|
advancedMounts:
|
||||||
accessMode: ReadWriteMany
|
back:
|
||||||
size: 1Gi
|
back:
|
||||||
|
- path: /taiga-back/media
|
||||||
|
readOnly: false
|
||||||
|
back:
|
||||||
|
async:
|
||||||
|
- path: /taiga-back/media
|
||||||
|
readOnly: false
|
||||||
|
async-rabbitmq:
|
||||||
|
auth:
|
||||||
|
username: taiga
|
||||||
|
existingPasswordSecret: taiga-async-rabbitmq-secret
|
||||||
|
existingSecretPasswordKey: password
|
||||||
|
existingErlangSecret: taiga-async-rabbitmq-secret
|
||||||
|
existingSecretErlangKey: erlang
|
||||||
|
extraConfiguration: |-
|
||||||
|
default_vhost = taiga
|
||||||
|
default_permissions.configure = .*
|
||||||
|
default_permissions.read = .*
|
||||||
|
default_permissions.write = .*
|
||||||
|
events-rabbitmq:
|
||||||
|
auth:
|
||||||
|
username: taiga
|
||||||
|
existingPasswordSecret: taiga-events-rabbitmq-secret
|
||||||
|
existingSecretPasswordKey: password
|
||||||
|
existingErlangSecret: taiga-events-rabbitmq-secret
|
||||||
|
existingSecretErlangKey: erlang
|
||||||
|
extraConfiguration: |-
|
||||||
|
default_vhost = taiga
|
||||||
|
default_permissions.configure = .*
|
||||||
|
default_permissions.read = .*
|
||||||
|
default_permissions.write = .*
|
||||||
postgres-16-cluster:
|
postgres-16-cluster:
|
||||||
mode: standalone
|
mode: standalone
|
||||||
kubernetesClusterName: cl01tl
|
|
||||||
cluster:
|
cluster:
|
||||||
walStorage:
|
walStorage:
|
||||||
storageClass: local-path
|
storageClass: local-path
|
||||||
|
|||||||
Reference in New Issue
Block a user