From e7323c6de3f34606b3de51b3ba2cf4eb30b92c32 Mon Sep 17 00:00:00 2001 From: alexlebens Date: Thu, 19 Sep 2024 00:07:42 -0500 Subject: [PATCH] add plane --- .../cl01tl/applications/homepage/values.yaml | 6 + clusters/cl01tl/applications/plane/Chart.yaml | 45 ++ .../plane/templates/external-secret.yaml | 169 +++++ .../cl01tl/applications/plane/values.yaml | 705 ++++++++++++++++++ 4 files changed, 925 insertions(+) create mode 100644 clusters/cl01tl/applications/plane/Chart.yaml create mode 100644 clusters/cl01tl/applications/plane/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/plane/values.yaml diff --git a/clusters/cl01tl/applications/homepage/values.yaml b/clusters/cl01tl/applications/homepage/values.yaml index 7a7a1d5b2..2406a2235 100644 --- a/clusters/cl01tl/applications/homepage/values.yaml +++ b/clusters/cl01tl/applications/homepage/values.yaml @@ -239,6 +239,12 @@ homepage: href: https://mail-cl01tl.boreal-beaufort.ts.net siteMonitor: http://roundcube.roundcube:80 statusStyle: dot + - Project Planning: + icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plane.png + description: Plane + href: https://plane-cl01tl.boreal-beaufort.ts.net + siteMonitor: http://plane-web.plane:3000 + statusStyle: dot - Web Design: icon: https://raw.githubusercontent.com/penpot/penpot/362d4ea47f06d169dd6e0a34cb9d141200e646e6/frontend/resources/images/icons/penpot-logo-icon.svg description: Penpot diff --git a/clusters/cl01tl/applications/plane/Chart.yaml b/clusters/cl01tl/applications/plane/Chart.yaml new file mode 100644 index 000000000..56b764379 --- /dev/null +++ b/clusters/cl01tl/applications/plane/Chart.yaml @@ -0,0 +1,45 @@ +apiVersion: v2 +name: plane +version: 1.0.0 +description: Plane +keywords: + - plane + - organization + - project + - kanban +home: https://wiki.alexlebens.dev/doc/plane-WxrGIShjmv +sources: + - https://github.com/makeplane/plane + - https://github.com/minio/operator + - https://github.com/rabbitmq/rabbitmq-server + - https://github.com/valkey-io/valkey + - https://github.com/cloudnative-pg/cloudnative-pg + - https://hub.docker.com/u/makeplane + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/minio/operator/tree/master/helm/tenant + - https://github.com/bitnami/charts/tree/main/bitnami/rabbitmq + - https://github.com/bitnami/charts/tree/main/bitnami/valkey + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: plane + repository: https://bjw-s.github.io/helm-charts/ + version: 3.4.0 + - name: tenant + alias: minio + version: 6.0.3 + repository: https://operator.min.io/ + - name: rabbitmq + version: 14.7.0 + repository: https://charts.bitnami.com/bitnami + - name: valkey + version: 0.3.15 + repository: https://charts.bitnami.com/bitnami + - name: postgres-cluster + alias: postgres-16-cluster + version: 3.9.0 + repository: http://alexlebens.github.io/helm-charts +icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plane.png +appVersion: v0.22-dev diff --git a/clusters/cl01tl/applications/plane/templates/external-secret.yaml b/clusters/cl01tl/applications/plane/templates/external-secret.yaml new file mode 100644 index 000000000..045a1720f --- /dev/null +++ b/clusters/cl01tl/applications/plane/templates/external-secret.yaml @@ -0,0 +1,169 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: plane-key-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: plane-key-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: secret-key + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/key + metadataPolicy: None + property: secret-key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: plane-rabbitmq-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: plane-rabbitmq-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: rabbitmq + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: password + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/rabbitmq + metadataPolicy: None + property: password + - secretKey: erlang + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/rabbitmq + metadataPolicy: None + property: erlang + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: plane-minio-user-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: plane-minio-user-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/minio/auth + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/minio/auth + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: plane-minio-root-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: plane-minio-root-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: config.env + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/minio/config + metadataPolicy: None + property: root-config.env + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: plane-minio-config-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: plane-minio-config-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: config.env + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/plane/minio/config + metadataPolicy: None + property: config.env + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: plane-postgresql-16-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: plane-postgresql-16-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-backup-postgresql + metadataPolicy: None + property: access_key + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-backup-postgresql + metadataPolicy: None + property: secret_key diff --git a/clusters/cl01tl/applications/plane/values.yaml b/clusters/cl01tl/applications/plane/values.yaml new file mode 100644 index 000000000..500bf3289 --- /dev/null +++ b/clusters/cl01tl/applications/plane/values.yaml @@ -0,0 +1,705 @@ +plane: + controllers: + api: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + initContainers: + migrator: + image: + repository: makeplane/plane-backend + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - ./bin/docker-entrypoint-migrator.sh + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: DEBUG + value: 0 + - name: CORS_ALLOWED_ORIGINS + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: WEB_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: GUNICORN_WORKERS + value: 2 + - name: SENTRY_DSN + value: "" + - name: SENTRY_ENVIRONMENT + value: development + - name: POSTGRES_USER + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: user + - name: POSTGRES_PASSWORD + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: password + - name: POSTGRES_HOST + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: host + - name: POSTGRES_DB + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: dbname + - name: POSTGRES_PORT + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: port + - name: DATABASE_URL + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: uri + - name: REDIS_HOST + value: plane-valkey-master + - name: REDIS_PORT + value: 6379 + - name: REDIS_URL + value: redis://plane-valkey-master:6379/ + - name: RABBITMQ_HOST + value: plane-rabbitmq + - name: RABBITMQ_PORT + value: 5672 + - name: RABBITMQ_VHOST + value: plane + - name: RABBITMQ_DEFAULT_USER + value: plane + - name: RABBITMQ_DEFAULT_PASS + valueFrom: + secretKeyRef: + name: plane-rabbitmq-secret + key: password + - name: USE_MINIO + value: 1 + value: us-east-1 + - name: AWS_REGION + value: us-east-1 + - name: AWS_S3_ENDPOINT_URL + value: http://minio.plane:9000 + - name: AWS_S3_BUCKET_NAME + value: uploads + - name: FILE_SIZE_LIMIT + value: 5242880 + - name: AWS_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_ACCESS_KEY_ID + - name: AWS_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_SECRET_ACCESS_KEY + resources: + requests: + cpu: 100m + memory: 128Mi + containers: + main: + image: + repository: makeplane/plane-backend + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - ./bin/docker-entrypoint-api.sh + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: DEBUG + value: 0 + - name: CORS_ALLOWED_ORIGINS + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: WEB_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: GUNICORN_WORKERS + value: 2 + - name: SENTRY_DSN + value: "" + - name: SENTRY_ENVIRONMENT + value: development + - name: POSTGRES_USER + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: user + - name: POSTGRES_PASSWORD + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: password + - name: POSTGRES_HOST + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: host + - name: POSTGRES_DB + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: dbname + - name: POSTGRES_PORT + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: port + - name: DATABASE_URL + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: uri + - name: REDIS_HOST + value: plane-valkey-master + - name: REDIS_PORT + value: 6379 + - name: REDIS_URL + value: redis://plane-valkey-master:6379/ + - name: RABBITMQ_HOST + value: plane-rabbitmq + - name: RABBITMQ_PORT + value: 5672 + - name: RABBITMQ_VHOST + value: plane + - name: RABBITMQ_DEFAULT_USER + value: plane + - name: RABBITMQ_DEFAULT_PASS + valueFrom: + secretKeyRef: + name: plane-rabbitmq-secret + key: password + - name: USE_MINIO + value: 1 + value: us-east-1 + - name: AWS_REGION + value: us-east-1 + - name: AWS_S3_ENDPOINT_URL + value: http://minio.plane:9000 + - name: AWS_S3_BUCKET_NAME + value: uploads + - name: FILE_SIZE_LIMIT + value: 5242880 + - name: AWS_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_ACCESS_KEY_ID + - name: AWS_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_SECRET_ACCESS_KEY + resources: + requests: + cpu: 100m + memory: 128Mi + web: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: makeplane/plane-frontend + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - node web/server.js web + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: NEXT_PUBLIC_API_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_ADMIN_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_ADMIN_BASE_PATH + value: /god-mode + - name: NEXT_PUBLIC_SPACE_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_SPACE_BASE_PATH + value: /spaces + - name: NEXT_PUBLIC_LIVE_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_LIVE_BASE_PATH + value: /live + resources: + requests: + cpu: 100m + memory: 512Mi + space: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: makeplane/plane-space + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - node space/server.js space + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: NEXT_PUBLIC_API_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_ADMIN_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_ADMIN_BASE_PATH + value: /god-mode + - name: NEXT_PUBLIC_SPACE_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_SPACE_BASE_PATH + value: /spaces + - name: NEXT_PUBLIC_LIVE_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_LIVE_BASE_PATH + value: /live + resources: + requests: + cpu: 100m + memory: 512Mi + admin: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: makeplane/plane-admin + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - node admin/server.js admin + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: NEXT_PUBLIC_API_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_ADMIN_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_ADMIN_BASE_PATH + value: /god-mode + - name: NEXT_PUBLIC_SPACE_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_SPACE_BASE_PATH + value: /spaces + - name: NEXT_PUBLIC_LIVE_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: NEXT_PUBLIC_LIVE_BASE_PATH + value: /live + resources: + requests: + cpu: 100m + memory: 512Mi + live: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: makeplane/plane-live + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - node live/dist/server.js live + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: API_BASE_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: LIVE_BASE_PATH + value: /live + - name: REDIS_HOST + value: plane-valkey-master + - name: REDIS_PORT + value: 6379 + - name: REDIS_URL + value: redis://plane-valkey-master:6379/ + resources: + requests: + cpu: 100m + memory: 512Mi + worker: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: makeplane/plane-backend + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - ./bin/docker-entrypoint-worker.sh + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: DEBUG + value: 0 + - name: CORS_ALLOWED_ORIGINS + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: WEB_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: GUNICORN_WORKERS + value: 2 + - name: SENTRY_DSN + value: "" + - name: SENTRY_ENVIRONMENT + value: development + - name: POSTGRES_USER + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: user + - name: POSTGRES_PASSWORD + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: password + - name: POSTGRES_HOST + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: host + - name: POSTGRES_DB + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: dbname + - name: POSTGRES_PORT + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: port + - name: DATABASE_URL + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: uri + - name: REDIS_HOST + value: plane-valkey-master + - name: REDIS_PORT + value: 6379 + - name: REDIS_URL + value: redis://plane-valkey-master:6379/ + - name: RABBITMQ_HOST + value: plane-rabbitmq + - name: RABBITMQ_PORT + value: 5672 + - name: RABBITMQ_VHOST + value: plane + - name: RABBITMQ_DEFAULT_USER + value: plane + - name: RABBITMQ_DEFAULT_PASS + valueFrom: + secretKeyRef: + name: plane-rabbitmq-secret + key: password + - name: USE_MINIO + value: 1 + value: us-east-1 + - name: AWS_REGION + value: us-east-1 + - name: AWS_S3_ENDPOINT_URL + value: http://minio.plane:9000 + - name: AWS_S3_BUCKET_NAME + value: uploads + - name: FILE_SIZE_LIMIT + value: 5242880 + - name: AWS_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_ACCESS_KEY_ID + - name: AWS_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_SECRET_ACCESS_KEY + resources: + requests: + cpu: 100m + memory: 128Mi + beat-worker: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: makeplane/plane-backend + tag: v0.22-dev + pullPolicy: IfNotPresent + args: + - ./bin/docker-entrypoint-beat.sh + env: + - name: SECRET_KEY + valueFrom: + secretKeyRef: + name: plane-key-secret + key: secret-key + - name: DEBUG + value: 0 + - name: CORS_ALLOWED_ORIGINS + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: WEB_URL + value: https://plane-cl01tl.boreal-beaufort.ts.net + - name: GUNICORN_WORKERS + value: 2 + - name: SENTRY_DSN + value: "" + - name: SENTRY_ENVIRONMENT + value: development + - name: POSTGRES_USER + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: user + - name: POSTGRES_PASSWORD + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: password + - name: POSTGRES_HOST + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: host + - name: POSTGRES_DB + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: dbname + - name: POSTGRES_PORT + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: port + - name: DATABASE_URL + valueFrom: + secretKeyRef: + name: plane-postgresql-16-cluster-app + key: uri + - name: REDIS_HOST + value: plane-valkey-master + - name: REDIS_PORT + value: 6379 + - name: REDIS_URL + value: redis://plane-valkey-master:6379/ + - name: RABBITMQ_HOST + value: plane-rabbitmq + - name: RABBITMQ_PORT + value: 5672 + - name: RABBITMQ_VHOST + value: plane + - name: RABBITMQ_DEFAULT_USER + value: plane + - name: RABBITMQ_DEFAULT_PASS + valueFrom: + secretKeyRef: + name: plane-rabbitmq-secret + key: password + - name: USE_MINIO + value: 1 + value: us-east-1 + - name: AWS_REGION + value: us-east-1 + - name: AWS_S3_ENDPOINT_URL + value: http://minio.plane:9000 + - name: AWS_S3_BUCKET_NAME + value: uploads + - name: FILE_SIZE_LIMIT + value: 5242880 + - name: AWS_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_ACCESS_KEY_ID + - name: AWS_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: plane-minio-user-secret + key: AWS_SECRET_ACCESS_KEY + resources: + requests: + cpu: 100m + memory: 128Mi + serviceAccount: + create: true + service: + web: + controller: web + ports: + http: + port: 3000 + targetPort: 3000 + protocol: HTTP + space: + controller: space + ports: + http: + port: 3000 + targetPort: 3000 + protocol: HTTP + admin: + controller: admin + ports: + http: + port: 3000 + targetPort: 3000 + protocol: HTTP + api: + controller: api + ports: + http: + port: 8000 + targetPort: 8000 + protocol: HTTP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: plane-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: plane-web + port: 3000 + - path: /spaces/ + pathType: Prefix + service: + name: plane-space + port: 3000 + - path: /god-mode/ + pathType: Prefix + service: + name: plane-admin + port: 3000 + - path: /api/ + pathType: Prefix + service: + name: plane-api + port: 8000 + - path: /auth/ + pathType: Prefix + service: + name: plane-api + port: 8000 + tls: + - hosts: + - plane-cl01tl +minio: + existingSecret: + name: plane-minio-root-secret + tenant: + name: minio-plane + configuration: + name: plane-minio-config-secret + pools: + - servers: 3 + name: pool + volumesPerServer: 2 + size: 10Gi + storageClassName: ceph-block + mountPath: /export + subPath: /data + metrics: + enabled: true + port: 9000 + protocol: http + certificate: + requestAutoCert: false + ingress: + api: + enabled: true + ingressClassName: tailscale + annotations: + tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true" + tls: + - secretName: minio-api-plane-cl01tl + hosts: + - plane-cl01tl + host: plane-cl01tl + path: /uploads/ + pathType: Prefix + console: + enabled: true + ingressClassName: tailscale + tls: + - secretName: minio-plane-cl01tl + hosts: + - minio-plane-cl01tl + host: minio-plane-cl01tl + path: / + pathType: Prefix +rabbitmq: + auth: + username: plane + existingPasswordSecret: plane-rabbitmq-secret + existingSecretPasswordKey: password + existingErlangSecret: plane-rabbitmq-secret + existingSecretErlangKey: erlang + extraConfiguration: |- + default_vhost = plane + default_permissions.configure = .* + default_permissions.read = .* + default_permissions.write = .* +valkey: + architecture: standalone + auth: + enabled: false +postgres-16-cluster: + mode: standalone + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + prometheusRule: + enabled: false + backup: + enabled: true + endpointURL: https://s3.us-east-2.amazonaws.com + destinationPath: s3://cl01tl-postgresql-backups/plane + endpointCredentials: plane-postgresql-16-cluster-backup-secret + backupIndex: 1 + retentionPolicy: 14d