alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 5 Actions Activity

Compare commits

base: alexlebens:renovate/unified-cilium
Branches Tags
alexlebens:main alexlebens:tmp/rclone-3 alexlebens:renovate/major-unified-loki alexlebens:renovate/unified-stalwartlabs alexlebens:renovate/unified-gitea alexlebens:renovate/unified-cilium alexlebens:manifests
..
compare: alexlebens:tmp/rclone-3
Branches Tags
alexlebens:tmp/rclone-3 alexlebens:renovate/major-unified-loki alexlebens:renovate/unified-stalwartlabs alexlebens:renovate/unified-gitea alexlebens:renovate/unified-cilium alexlebens:manifests alexlebens:main

1 Commits
renovate/u ... tmp/rclone

Author SHA1 Message Date
Alex Lebens
098513db8a feat: move to chart and namespace
Some checks failed
lint-test-helm / lint-helm (pull_request) Successful in 28s
Details
lint-test-helm / validate-kubeconform (pull_request) Failing after 1m1s
Details
2026-04-25 21:00:32 -05:00
7 changed files with 147 additions and 118 deletions
Expand all files Collapse all files

6
clusters/cl01tl/helm/cilium/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies: dependencies:
- name: cilium - name: cilium
repository: https://helm.cilium.io/ repository: https://helm.cilium.io/
version: 1.19.3 version: 1.18.6
digest: sha256:0fb32249f6ab7d68568a1e44796a8ee1ee5da2294b29a9c720153db8f055888b digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
generated: "2026-04-26T01:06:49.763454148Z" generated: "2026-02-05T12:00:20.15778-06:00"

4
clusters/cl01tl/helm/cilium/Chart.yaml
View File

@@ -14,8 +14,8 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: cilium - name: cilium
version: 1.19.3 version: 1.18.6
repository: https://helm.cilium.io/ repository: https://helm.cilium.io/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
# renovate: datasource=github-releases depName=cilium/cilium # renovate: datasource=github-releases depName=cilium/cilium
appVersion: 1.19.3 appVersion: 1.18.6

7
clusters/cl01tl/helm/directus/Chart.lock
View File

@@ -8,5 +8,8 @@ dependencies:
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.6.1 version: 0.6.1
digest: sha256:e3d9d7bc069b79ec37769f77d691cda3b8bd92e37a9d1dd2ef8279dc6d2b6cde - name: rclone-bucket
generated: "2026-04-24T21:50:43.755575922Z" repository: oci://harbor.alexlebens.net/helm-charts
version: 0.2.0
digest: sha256:b95c228173eb2e4914c37d5c8b3753ad644a90dc9f7f4357dbc1cbf15004961b
generated: "2026-04-25T20:59:03.456994-05:00"

5
clusters/cl01tl/helm/directus/Chart.yaml
View File

@@ -12,6 +12,7 @@ sources:
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/rclone-bucket
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -27,6 +28,10 @@ dependencies:
alias: valkey alias: valkey
version: 0.6.1 version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: rclone-bucket
alias: rclone-directus-assets-remote
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.2.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
# renovate: datasource=github-releases depName=directus/directus # renovate: datasource=github-releases depName=directus/directus
appVersion: 11.17.3 appVersion: 11.17.3

21
clusters/cl01tl/helm/directus/values.yaml
View File

@@ -214,3 +214,24 @@ valkey:
# https://github.com/valkey-io/valkey-helm/issues/135 # https://github.com/valkey-io/valkey-helm/issues/135
metrics: metrics:
enabled: false enabled: false
rclone-directus-assets-remote:
cronJob:
suspend: false
schedule: 0 0 * * *
rclone:
source:
bucketName: directus-assets
destination:
bucketName: directus-assets
secret:
externalSecret:
source:
credentials:
path: /garage/home-infra/directus-assets
config:
path: /garage/config
destination:
credentials:
path: /garage/home-infra/directus-assets
config:
path: /garage/config

66
clusters/cl01tl/helm/rclone/templates/external-secret.yaml
View File

@@ -1,36 +1,36 @@
apiVersion: external-secrets.io/v1 # apiVersion: external-secrets.io/v1
kind: ExternalSecret # kind: ExternalSecret
metadata: # metadata:
name: garage-directus-secret # name: garage-directus-secret
namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
labels: # labels:
app.kubernetes.io/name: garage-directus-secret # app.kubernetes.io/name: garage-directus-secret
{{- include "custom.labels" . | nindent 4 }} # {{- include "custom.labels" . | nindent 4 }}
spec: # spec:
secretStoreRef: # secretStoreRef:
kind: ClusterSecretStore # kind: ClusterSecretStore
name: openbao # name: openbao
data: # data:
- secretKey: ACCESS_KEY_ID # - secretKey: ACCESS_KEY_ID
remoteRef: # remoteRef:
key: /garage/home-infra/directus-assets # key: /garage/home-infra/directus-assets
property: ACCESS_KEY_ID # property: ACCESS_KEY_ID
- secretKey: ACCESS_REGION # - secretKey: ACCESS_REGION
remoteRef: # remoteRef:
key: /garage/home-infra/directus-assets # key: /garage/home-infra/directus-assets
property: ACCESS_REGION # property: ACCESS_REGION
- secretKey: ACCESS_SECRET_KEY # - secretKey: ACCESS_SECRET_KEY
remoteRef: # remoteRef:
key: /garage/home-infra/directus-assets # key: /garage/home-infra/directus-assets
property: ACCESS_SECRET_KEY # property: ACCESS_SECRET_KEY
- secretKey: SRC_ENDPOINT # - secretKey: SRC_ENDPOINT
remoteRef: # remoteRef:
key: /garage/config # key: /garage/config
property: ENDPOINT_LOCAL # property: ENDPOINT_LOCAL
- secretKey: DEST_ENDPOINT # - secretKey: DEST_ENDPOINT
remoteRef: # remoteRef:
key: /garage/config # key: /garage/config
property: ENDPOINT_REMOTE # property: ENDPOINT_REMOTE
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1

156
clusters/cl01tl/helm/rclone/values.yaml
View File

@@ -1,83 +1,83 @@
rclone: rclone:
controllers: controllers:
directus-assets: # directus-assets:
type: cronjob # type: cronjob
cronjob: # cronjob:
suspend: false # suspend: false
timeZone: America/Chicago # timeZone: America/Chicago
schedule: 0 0 * * * # schedule: 0 0 * * *
backoffLimit: 3 # backoffLimit: 3
parallelism: 1 # parallelism: 1
containers: # containers:
sync: # sync:
image: # image:
repository: rclone/rclone # repository: rclone/rclone
tag: 1.73.5@sha256:1619a625f845e169c34b952cf40c483c0392965b821c5155cde8cbfd35254a96 # tag: 1.73.5@sha256:1619a625f845e169c34b952cf40c483c0392965b821c5155cde8cbfd35254a96
args: # args:
- sync # - sync
- src:directus-assets # - src:directus-assets
- dest:directus-assets # - dest:directus-assets
- --s3-no-check-bucket # - --s3-no-check-bucket
- --verbose # - --verbose
env: # env:
- name: RCLONE_S3_PROVIDER # - name: RCLONE_S3_PROVIDER
value: Other # value: Other
- name: RCLONE_CONFIG_SRC_TYPE # - name: RCLONE_CONFIG_SRC_TYPE
value: s3 # value: s3
- name: RCLONE_CONFIG_SRC_PROVIDER # - name: RCLONE_CONFIG_SRC_PROVIDER
value: Other # value: Other
- name: RCLONE_CONFIG_SRC_ENV_AUTH # - name: RCLONE_CONFIG_SRC_ENV_AUTH
value: false # value: false
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID # - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: ACCESS_KEY_ID # key: ACCESS_KEY_ID
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY # - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: ACCESS_SECRET_KEY # key: ACCESS_SECRET_KEY
- name: RCLONE_CONFIG_SRC_REGION # - name: RCLONE_CONFIG_SRC_REGION
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: ACCESS_REGION # key: ACCESS_REGION
- name: RCLONE_CONFIG_SRC_ENDPOINT # - name: RCLONE_CONFIG_SRC_ENDPOINT
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: SRC_ENDPOINT # key: SRC_ENDPOINT
- name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE # - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
value: true # value: true
- name: RCLONE_CONFIG_DEST_TYPE # - name: RCLONE_CONFIG_DEST_TYPE
value: s3 # value: s3
- name: RCLONE_CONFIG_DEST_PROVIDER # - name: RCLONE_CONFIG_DEST_PROVIDER
value: Other # value: Other
- name: RCLONE_CONFIG_DEST_ENV_AUTH # - name: RCLONE_CONFIG_DEST_ENV_AUTH
value: false # value: false
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID # - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: ACCESS_KEY_ID # key: ACCESS_KEY_ID
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY # - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: ACCESS_SECRET_KEY # key: ACCESS_SECRET_KEY
- name: RCLONE_CONFIG_DEST_REGION # - name: RCLONE_CONFIG_DEST_REGION
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: ACCESS_REGION # key: ACCESS_REGION
- name: RCLONE_CONFIG_DEST_ENDPOINT # - name: RCLONE_CONFIG_DEST_ENDPOINT
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: garage-directus-secret # name: garage-directus-secret
key: DEST_ENDPOINT # key: DEST_ENDPOINT
- name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE # - name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
value: true # value: true
karakeep-assets: karakeep-assets:
type: cronjob type: cronjob
cronjob: cronjob: