migration to next

clusters/cl01tl/management/argo-workflows/Chart.yaml

@@ -1,31 +0,0 @@
-apiVersion: v2
-name: argo-workflows
-version: 1.0.0
-description: Argo Workflows
-keywords:
-  - argo-workflows
-  - argo-events
-  - workflows
-  - events
-home: https://wiki.alexlebens.dev/doc/argo-workflows-bRGiuUyLgj
-sources:
-  - https://github.com/argoproj/argo-workflows
-  - https://github.com/argoproj/argo-events
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://github.com/argoproj/argo-helm/tree/main/charts
-  - https://github.com/alexlebens/helm-charts/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: argo-workflows
-    version: 0.45.8
-    repository: https://argoproj.github.io/argo-helm
-  - name: argo-events
-    version: 2.4.13
-    repository: https://argoproj.github.io/argo-helm
-  - name: postgres-cluster
-    alias: postgres-17-cluster
-    version: 4.2.0
-    repository: http://alexlebens.github.io/helm-charts
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/argocd.png
-appVersion: v3.6.2

clusters/cl01tl/management/argo-workflows/templates/external-secret.yaml

@@ -1,62 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: argo-workflows-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: argo-workflows-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/argo-workflows
-        metadataPolicy: None
-        property: secret
-    - secretKey: client
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/argo-workflows
-        metadataPolicy: None
-        property: client
-
----
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: argo-workflows-postgresql-17-cluster-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: argo-workflows-postgresql-17-cluster-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: database
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/management/argo-workflows/values.yaml

@@ -1,113 +0,0 @@
-argo-workflows:
-  controller:
-    metricsConfig:
-      enabled: true
-    persistence:
-      connectionPool:
-        maxIdleConns: 100
-        maxOpenConns: 0
-      nodeStatusOffLoad: true
-      archive: true
-      postgresql:
-        host: argo-workflows-postgresql-17-cluster-rw
-        port: 5432
-        database: app
-        tableName: app
-        userNameSecret:
-          name: argo-workflows-postgresql-17-cluster-app
-          key: username
-        passwordSecret:
-          name: argo-workflows-postgresql-17-cluster-app
-          key: password
-        ssl: false
-        sslMode: disable
-    workflowWorkers: 2
-    workflowTTLWorkers: 1
-    podCleanupWorkers: 1
-    cronWorkflowWorkers: 1
-    resources:
-      requests:
-        cpu: 10m
-        memory: 128Mi
-    serviceMonitor:
-      enabled: true
-    name: workflow-controller
-    workflowNamespaces:
-      - argo-cd
-      - argo-workflows
-  server:
-    authModes:
-      - sso
-    ingress:
-      enabled: true
-      ingressClassName: tailscale
-      hosts:
-        - argo-workflows-cl01tl
-      tls:
-        - secretName: argo-workflows-cl01tl
-          hosts:
-            - argo-workflows-cl01tl
-    sso:
-      enabled: true
-      issuer: https://auth-cl01tl.boreal-beaufort.ts.net/application/o/argo-workflows/
-      clientId:
-        name: argo-workflows-oidc-secret
-        key: client
-      clientSecret:
-        name: argo-workflows-oidc-secret
-        key: secret
-      redirectUrl: https://argo-workflows-cl01tl.boreal-beaufort.ts.net/oauth2/callback
-      rbac:
-        enabled: false
-      scopes:
-        - openid
-        - email
-        - profile
-  useStaticCredentials: true
-  artifactRepository:
-    archiveLogs: false
-    s3: {}
-      # accessKeySecret:
-      #   name: "{{ .Release.Name }}-minio"
-      #   key: accesskey
-      # secretKeySecret:
-      #   name: "{{ .Release.Name }}-minio"
-      #   key: secretkey
-      # insecure: true
-      # bucket:
-      # endpoint:
-      # region:
-      # encryptionOptions:
-      #   enableEncryption: true
-
-argo-events:
-  controller:
-    resources:
-      requests:
-        cpu: 10m
-        memory: 128Mi
-    metrics:
-      enabled: true
-      serviceMonitor:
-        enabled: true
-  webhook:
-    enabled: true
-    resources:
-      requests:
-        cpu: 10m
-        memory: 128Mi
-postgres-17-cluster:
-  mode: standalone
-  cluster:
-    walStorage:
-      storageClass: local-path
-    storage:
-      storageClass: local-path
-    monitoring:
-      enabled: true
-  backup:
-    enabled: true
-    endpointURL: https://nyc3.digitaloceanspaces.com
-    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
-    endpointCredentials: argo-workflows-postgresql-17-cluster-backup-secret
-    backupIndex: 1

clusters/cl01tl/management/headlamp/Chart.yaml

@@ -1,20 +0,0 @@
-apiVersion: v2
-name: headlamp
-version: 1.0.0
-description: Headlamp
-keywords:
-  - headlamp
-  - dashboard
-  - kubernetes
-home: https://wiki.alexlebens.dev/doc/headlamp-Zp3NTU0KE8
-sources:
-  - https://github.com/headlamp-k8s/headlamp
-  - https://github.com/headlamp-k8s/headlamp/tree/main/charts/headlamp
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: headlamp
-    version: 0.29.1
-    repository: https://headlamp-k8s.github.io/headlamp/
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/kubernetes-dashboard.png
-appVersion: 0.27.0

clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml

@@ -1,19 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: cluster-admin-oidc
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-roleRef:
-  kind: ClusterRole
-  name: cluster-admin
-  apiGroup: rbac.authorization.k8s.io
-subjects:
-  - kind: User
-    name: alexanderlebens@gmail.com
-    apiGroup: rbac.authorization.k8s.io

clusters/cl01tl/management/headlamp/templates/external-secret.yaml

@@ -1,103 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: headlamp-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: headlamp-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: OIDC_CLIENT_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/headlamp
-        metadataPolicy: None
-        property: client
-    - secretKey: OIDC_CLIENT_SECRET
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/headlamp
-        metadataPolicy: None
-        property: secret
-    - secretKey: OIDC_ISSUER_URL
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/headlamp
-        metadataPolicy: None
-        property: issuer
-    - secretKey: OIDC_SCOPES
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/headlamp
-        metadataPolicy: None
-        property: scopes
-
-# ---
-# apiVersion: external-secrets.io/v1beta1
-# kind: ExternalSecret
-# metadata:
-#   name: headlamp-backup-secret
-#   namespace: {{ .Release.Namespace }}
-#   labels:
-#     app.kubernetes.io/name: headlamp-backup-secret
-#     app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/version: {{ .Chart.AppVersion }}
-#     app.kubernetes.io/component: backup
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
-# spec:
-#   secretStoreRef:
-#     kind: ClusterSecretStore
-#     name: vault
-#   target:
-#     template:
-#       mergePolicy: Merge
-#       engineVersion: v2
-#       data:
-#         RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/headlamp/headlamp"
-#   data:
-#     - secretKey: BUCKET_ENDPOINT
-#       remoteRef:
-#         conversionStrategy: Default
-#         decodingStrategy: None
-#         key: /cl01tl/volsync/restic/config
-#         metadataPolicy: None
-#         property: S3_BUCKET_ENDPOINT
-#     - secretKey: RESTIC_PASSWORD
-#       remoteRef:
-#         conversionStrategy: Default
-#         decodingStrategy: None
-#         key: /cl01tl/volsync/restic/config
-#         metadataPolicy: None
-#         property: RESTIC_PASSWORD
-#     - secretKey: AWS_DEFAULT_REGION
-#       remoteRef:
-#         conversionStrategy: Default
-#         decodingStrategy: None
-#         key: /cl01tl/volsync/restic/config
-#         metadataPolicy: None
-#         property: AWS_DEFAULT_REGION
-#     - secretKey: AWS_ACCESS_KEY_ID
-#       remoteRef:
-#         conversionStrategy: Default
-#         decodingStrategy: None
-#         key: /digital-ocean/home-infra/volsync-backups
-#         metadataPolicy: None
-#         property: access_key
-#     - secretKey: AWS_SECRET_ACCESS_KEY
-#       remoteRef:
-#         conversionStrategy: Default
-#         decodingStrategy: None
-#         key: /digital-ocean/home-infra/volsync-backups
-#         metadataPolicy: None
-#         property: secret_key

clusters/cl01tl/management/headlamp/templates/http-route.yaml

@@ -1,30 +0,0 @@
-# apiVersion: gateway.networking.k8s.io/v1
-# kind: HTTPRoute
-# metadata:
-#   name: https-route-headlamp
-#   namespace: {{ .Release.Namespace }}
-#   labels:
-#     app.kubernetes.io/name: https-route-headlamp
-#     app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/version: {{ .Chart.AppVersion }}
-#     app.kubernetes.io/component: web
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
-# spec:
-#   parentRefs:
-#     - group: gateway.networking.k8s.io
-#       kind: Gateway
-#       name: https-gateway
-#       namespace: kube-system
-#   hostnames:
-#     - headlamp.alexlebens.net
-#   rules:
-#     - matches:
-#       - path:
-#           type: PathPrefix
-#           value: /
-#       backendRefs:
-#         - group: ''
-#           kind: Service
-#           name: headlamp
-#           port: 80
-#           weight: 100

clusters/cl01tl/management/headlamp/templates/ingress.yaml

@@ -1,32 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: headlamp-local
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: headlamp-local
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    cert-manager.io/cluster-issuer: letsencrypt-issuer
-spec:
-  ingressClassName: traefik
-  tls:
-    - hosts:
-        - headlamp.alexlebens.net
-      secretName: headlamp-tls-secret
-  rules:
-    - host: headlamp-cl01tl
-      http:
-        paths:
-          - path: /
-            pathType: ImplementationSpecific
-            backend:
-              service:
-                name: headlamp
-                port:
-                  number: 80

clusters/cl01tl/management/headlamp/templates/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: headlamp
-  labels:
-    https-gateway-access: "true"

clusters/cl01tl/management/headlamp/templates/replication-source.yaml

@@ -1,27 +0,0 @@
-# apiVersion: volsync.backube/v1alpha1
-# kind: ReplicationSource
-# metadata:
-#   name: headlamp-backup-source
-#   namespace: {{ .Release.Namespace }}
-#   labels:
-#     app.kubernetes.io/name: headlamp-backup-source
-#     app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/version: {{ .Chart.AppVersion }}
-#     app.kubernetes.io/component: backup
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
-# spec:
-#   sourcePVC: headlamp
-#   trigger:
-#     schedule: 0 0 */3 * *
-#   restic:
-#     pruneIntervalDays: 14
-#     repository: headlamp-backup-secret
-#     retain:
-#       hourly: 1
-#       daily: 1
-#       weekly: 1
-#       monthly: 2
-#       yearly: 4
-#     copyMethod: Snapshot
-#     storageClassName: ceph-block
-#     volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/management/headlamp/values.yaml

@@ -1,24 +0,0 @@
-headlamp:
-  config:
-    oidc:
-      secret:
-        create: false
-      externalSecret:
-        enabled: true
-        name: headlamp-oidc-secret
-  ingress:
-    enabled: true
-    ingressClassName: tailscale
-    hosts:
-      - host: headlamp-cl01tl
-        paths:
-          - path: /
-            type: ImplementationSpecific
-    tls:
-      - secretName: headlamp-cl01tl
-        hosts:
-          - headlamp-cl01tl
-  resources:
-    requests:
-      cpu: 10m
-      memory: 128Mi

clusters/cl01tl/management/komodo/Chart.yaml

@@ -1,27 +0,0 @@
-apiVersion: v2
-name: komodo
-version: 1.0.0
-description: Komodo
-keywords:
-  - komodo
-  - deployment
-  - dashboard
-  - docker-compose
-home: https://wiki.alexlebens.dev/doc/komodo-j032vhVXlX
-sources:
-  - https://github.com/mbecker20/komodo
-  - https://github.com/mbecker20/komodo/pkgs/container/komodo
-  - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: komodo
-    repository: https://bjw-s.github.io/helm-charts/
-    version: 3.7.1
-  - name: postgres-cluster
-    alias: postgres-17-cluster
-    version: 4.2.0
-    repository: http://alexlebens.github.io/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/komodo.webp
-appVersion: v1.16.12

clusters/cl01tl/management/komodo/templates/external-secret.yaml

@@ -1,83 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: komodo-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: komodo-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: passkey
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/config
-        metadataPolicy: None
-        property: passkey
-    - secretKey: jwt
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/config
-        metadataPolicy: None
-        property: jwt
-    - secretKey: webhook
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/config
-        metadataPolicy: None
-        property: webhook
-    - secretKey: oidc-client-id
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/komodo
-        metadataPolicy: None
-        property: client
-    - secretKey: oidc-client-secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/komodo
-        metadataPolicy: None
-        property: secret
-
----
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: komodo-postgresql-17-cluster-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: komodo-postgresql-17-cluster-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: database
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/management/komodo/templates/service.yaml

@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: komodo-periphery-ps10rp
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: komodo-periphery-ps10rp
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: network
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    tailscale.com/tailnet-fqdn: komodo-periphery-ps10rp.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName

clusters/cl01tl/management/komodo/values.yaml

@@ -1,164 +0,0 @@
-komodo:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/mbecker20/komodo
-            tag: 1.16.12
-            pullPolicy: IfNotPresent
-          env:
-            - name: COMPOSE_KOMODO_IMAGE_TAG
-              value: 1.16.12
-            - name: COMPOSE_LOGGING_DRIVER
-              value: local
-            - name: KOMODO_HOST
-              value: https://komodo-cl01tl.boreal-beaufort.ts.net
-            - name: KOMODO_TITLE
-              value: Komodo
-            - name: PASSKEY
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-secret
-                  key: passkey
-            - name: KOMODO_MONITORING_INTERVAL
-              value: 15-sec
-            - name: KOMODO_RESOURCE_POLL_INTERVAL
-              value: 5-min
-            - name: KOMODO_PASSKEY
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-secret
-                  key: passkey
-            - name: KOMODO_WEBHOOK_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-secret
-                  key: webhook
-            - name: KOMODO_JWT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-secret
-                  key: jwt
-            - name: KOMODO_LOCAL_AUTH
-              value: true
-            - name: KOMODO_ENABLE_NEW_USERS
-              value: true
-            - name: KOMODO_DISABLE_NON_ADMIN_CREATE
-              value: true
-            - name: KOMODO_TRANSPARENT_MODE
-              value: false
-            - name: DB_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-postgresql-17-cluster-app
-                  key: user
-            - name: DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-postgresql-17-cluster-app
-                  key: password
-            - name: KOMODO_DATABASE_URI
-              value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@localhost:27017/komodo?authMechanism=PLAIN
-            - name: KOMODO_OIDC_ENABLED
-              value: true
-            - name: KOMODO_OIDC_PROVIDER
-              value: http://authentik-server.authentik/application/o/komodo/
-            - name: KOMODO_OIDC_REDIRECT_HOST
-              value: https://auth-cl01tl.boreal-beaufort.ts.net
-            - name: KOMODO_OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-secret
-                  key: oidc-client-id
-            - name: KOMODO_OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-secret
-                  key: oidc-client-secret
-            - name: KOMODO_OIDC_USE_FULL_EMAIL
-              value: true
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-        ferretdb:
-          image:
-            repository: ghcr.io/ferretdb/ferretdb
-            tag: 1.24.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: FERRETDB_POSTGRESQL_URL
-              valueFrom:
-                secretKeyRef:
-                  name: komodo-postgresql-17-cluster-app
-                  key: uri
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  serviceAccount:
-    create: true
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 9120
-          protocol: HTTP
-  ingress:
-    tailscale:
-      enabled: true
-      className: tailscale
-      hosts:
-        - host: komodo-cl01tl
-          paths:
-            - path: /
-              pathType: Prefix
-              service:
-                name: komodo
-                port: 80
-      tls:
-        - hosts:
-            - komodo-cl01tl
-  persistence:
-    cache:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /repo-cache
-              readOnly: false
-    syncs:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /syncs
-              readOnly: false
-postgres-17-cluster:
-  mode: standalone
-  cluster:
-    walStorage:
-      storageClass: local-path
-    storage:
-      storageClass: local-path
-    monitoring:
-      enabled: true
-  backup:
-    enabled: true
-    endpointURL: https://nyc3.digitaloceanspaces.com
-    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/komodo/komodo-postgresql-17-cluster
-    endpointCredentials: komodo-postgresql-17-cluster-backup-secret
-    backupIndex: 1