Compare commits
2 Commits
renovate/u
...
tmp/secret
| Author | SHA1 | Date | |
|---|---|---|---|
| 7585a4657f | |||
| 60213a92d3 |
14
clusters/cl01tl/helm/argocd/templates/_helpers.tpl
Normal file
14
clusters/cl01tl/helm/argocd/templates/_helpers.tpl
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "argocd.labels" -}}
|
||||||
|
{{ include "argocd.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "argocd.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: argocd-oidc-authentik
|
name: argocd-oidc-authentik
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: argocd-oidc-authentik
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "argocd.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
@@ -28,9 +27,8 @@ metadata:
|
|||||||
name: argocd-notifications-ntfy
|
name: argocd-notifications-ntfy
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: argocd-notifications-ntfy
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "argocd.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
|
|||||||
27
clusters/cl01tl/helm/audiobookshelf/templates/_helpers.tpl
Normal file
27
clusters/cl01tl/helm/audiobookshelf/templates/_helpers.tpl
Normal file
@@ -0,0 +1,27 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "audiobookshelf.labels" -}}
|
||||||
|
{{ include "audiobookshelf.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "audiobookshelf.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
NFS names
|
||||||
|
*/}}
|
||||||
|
{{- define "audiobookshelf.booksNfsName" -}}
|
||||||
|
audiobookshelf-books-nfs-storage
|
||||||
|
{{- end -}}
|
||||||
|
{{- define "audiobookshelf.audiobooksNfsName" -}}
|
||||||
|
audiobookshelf-audiobooks-nfs-storage
|
||||||
|
{{- end -}}
|
||||||
|
{{- define "audiobookshelf.podcastsNfsName" -}}
|
||||||
|
audiobookshelf-podcasts-nfs-storage
|
||||||
|
{{- end -}}
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: audiobookshelf-config-apprise
|
name: audiobookshelf-config-apprise
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: audiobookshelf-config-apprise
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
|
|||||||
@@ -1,14 +1,13 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: audiobookshelf-books-nfs-storage
|
name: {{- include "audiobookshelf.booksNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "audiobookshelf.booksNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
volumeName: {{ .Template.Name }}
|
volumeName: {{- include "audiobookshelf.booksNfsName" . }}
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteMany
|
||||||
@@ -20,14 +19,13 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: audiobookshelf-audiobooks-nfs-storage
|
name: {{- include "audiobookshelf.audiobooksNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "audiobookshelf.audiobooksNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
volumeName: {{ .Template.Name }}
|
volumeName: {{- include "audiobookshelf.audiobooksNfsName" . }}
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteMany
|
||||||
@@ -39,14 +37,13 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: audiobookshelf-podcasts-nfs-storage
|
name: {{- include "audiobookshelf.podcastsNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "audiobookshelf.podcastsNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
volumeName: {{ .Template.Name }}
|
volumeName: {{- include "audiobookshelf.podcastsNfsName" . }}
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteMany
|
||||||
|
|||||||
@@ -1,12 +1,11 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
name: audiobookshelf-books-nfs-storage
|
name: {{- include "audiobookshelf.booksNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "audiobookshelf.booksNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
persistentVolumeReclaimPolicy: Retain
|
persistentVolumeReclaimPolicy: Retain
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
@@ -26,12 +25,11 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
name: audiobookshelf-audiobooks-nfs-storage
|
name: {{- include "audiobookshelf.audiobooksNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "audiobookshelf.audiobooksNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
persistentVolumeReclaimPolicy: Retain
|
persistentVolumeReclaimPolicy: Retain
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
@@ -51,12 +49,11 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
name: audiobookshelf-podcasts-nfs-storage
|
name: {{- include "audiobookshelf.podcastsNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "audiobookshelf.podcastsNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "audiobookshelf.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
persistentVolumeReclaimPolicy: Retain
|
persistentVolumeReclaimPolicy: Retain
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
|
|||||||
14
clusters/cl01tl/helm/authentik/templates/_helpers.tpl
Normal file
14
clusters/cl01tl/helm/authentik/templates/_helpers.tpl
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "authentik.labels" -}}
|
||||||
|
{{ include "authentik.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "authentik.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: authentik-key
|
name: authentik-key
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: authentik-key
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "authentik.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
|
|||||||
@@ -1,13 +1,12 @@
|
|||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
name: authentik-tailscale
|
name: {{ .Release.Name }}-tailscale
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{ .Release.Name }}-tailscale
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
tailscale.com/proxy-class: no-metrics
|
tailscale.com/proxy-class: no-metrics
|
||||||
|
{{- include "authentik.labels" . | nindent 4 }}
|
||||||
annotations:
|
annotations:
|
||||||
tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"
|
tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: allow-outpost-cross-namespace-access
|
name: allow-outpost-cross-namespace-access
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: allow-outpost-cross-namespace-access
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "authentik.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
from:
|
from:
|
||||||
- group: gateway.networking.k8s.io
|
- group: gateway.networking.k8s.io
|
||||||
|
|||||||
24
clusters/cl01tl/helm/backrest/templates/_helpers.tpl
Normal file
24
clusters/cl01tl/helm/backrest/templates/_helpers.tpl
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "backrest.labels" -}}
|
||||||
|
{{ include "backrest.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "backrest.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
NFS names
|
||||||
|
*/}}
|
||||||
|
{{- define "backrest.storageNfsName" -}}
|
||||||
|
backrest-nfs-storage
|
||||||
|
{{- end -}}
|
||||||
|
{{- define "backrest.shareNfsName" -}}
|
||||||
|
backrest-nfs-share
|
||||||
|
{{- end -}}
|
||||||
@@ -1,14 +1,13 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: backrest-nfs-storage
|
name: {{- include "backrest.storageNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "backrest.storageNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "backrest.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
volumeName: {{ .Template.Name }}
|
volumeName: {{- include "backrest.storageNfsName" . }}
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteMany
|
||||||
@@ -20,14 +19,13 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: backrest-nfs-share
|
name: {{- include "backrest.shareNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "backrest.shareNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "backrest.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
volumeName: {{ .Template.Name }}
|
volumeName: {{- include "backrest.shareNfsName" . }}
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteMany
|
||||||
|
|||||||
@@ -1,12 +1,11 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
name: backrest-nfs-storage
|
name: {{- include "backrest.storageNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "backrest.storageNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "backrest.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
persistentVolumeReclaimPolicy: Retain
|
persistentVolumeReclaimPolicy: Retain
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
@@ -26,12 +25,11 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
name: backrest-nfs-share
|
name: {{- include "backrest.shareNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "backrest.shareNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "backrest.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
persistentVolumeReclaimPolicy: Retain
|
persistentVolumeReclaimPolicy: Retain
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
|
|||||||
21
clusters/cl01tl/helm/bazarr/templates/_helpers.tpl
Normal file
21
clusters/cl01tl/helm/bazarr/templates/_helpers.tpl
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "bazarr.labels" -}}
|
||||||
|
{{ include "bazarr.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "bazarr.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
NFS names
|
||||||
|
*/}}
|
||||||
|
{{- define "bazarr.storageNfsName" -}}
|
||||||
|
bazarr-nfs-storage
|
||||||
|
{{- end -}}
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: bazarr-key
|
name: bazarr-key
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: bazarr-key
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "bazarr.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
|
|||||||
@@ -1,12 +1,11 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: bazarr-nfs-storage
|
name: {{- include "bazarr.storageNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "bazarr.storageNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "bazarr.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
volumeName: {{ .Template.Name }}
|
volumeName: {{ .Template.Name }}
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
|
|||||||
@@ -1,12 +1,11 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolume
|
kind: PersistentVolume
|
||||||
metadata:
|
metadata:
|
||||||
name: bazarr-nfs-storage
|
name: {{- include "bazarr.storageNfsName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "bazarr.storageNfsName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "bazarr.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
persistentVolumeReclaimPolicy: Retain
|
persistentVolumeReclaimPolicy: Retain
|
||||||
storageClassName: nfs-client
|
storageClassName: nfs-client
|
||||||
|
|||||||
24
clusters/cl01tl/helm/cert-manager/templates/_helpers.tpl
Normal file
24
clusters/cl01tl/helm/cert-manager/templates/_helpers.tpl
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "cert-manager.labels" -}}
|
||||||
|
{{ include "cert-manager.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "cert-manager.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
NFS names
|
||||||
|
*/}}
|
||||||
|
{{- define "cert-manager.cloudflareSecretName" -}}
|
||||||
|
cert-manager-cloudflare-api-token
|
||||||
|
{{- end -}}
|
||||||
|
{{- define "cert-manager.cloudflareSecretKey" -}}
|
||||||
|
api-token
|
||||||
|
{{- end -}}
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: letsencrypt-issuer
|
name: letsencrypt-issuer
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: letsencrypt-issuer
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "cert-manager.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
acme:
|
acme:
|
||||||
email: alexanderlebens@gmail.com
|
email: alexanderlebens@gmail.com
|
||||||
@@ -22,5 +21,5 @@ spec:
|
|||||||
cloudflare:
|
cloudflare:
|
||||||
email: alexanderlebens@gmail.com
|
email: alexanderlebens@gmail.com
|
||||||
apiTokenSecretRef:
|
apiTokenSecretRef:
|
||||||
name: cloudflare-api-token
|
name: {{- include "cert-manager.cloudflareSecretName" . }}
|
||||||
key: api-token
|
key: {{- include "cert-manager.cloudflareSecretKey" . }}
|
||||||
|
|||||||
@@ -1,18 +1,17 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
apiVersion: external-secrets.io/v1
|
||||||
kind: ExternalSecret
|
kind: ExternalSecret
|
||||||
metadata:
|
metadata:
|
||||||
name: cloudflare-api-token
|
name: {{- include "cert-manager.cloudflareSecretName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: {{- include "cert-manager.cloudflareSecretName" . }}
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "cert-manager.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
name: openbao
|
name: openbao
|
||||||
data:
|
data:
|
||||||
- secretKey: api-token
|
- secretKey: {{- include "cert-manager.cloudflareSecretKey" . }}
|
||||||
remoteRef:
|
remoteRef:
|
||||||
key: /cloudflare/alexlebens.net/cl01tl-issuer-certificate
|
key: /cloudflare/alexlebens.net/cl01tl-issuer-certificate
|
||||||
property: token
|
property: token
|
||||||
|
|||||||
14
clusters/cl01tl/helm/cilium/templates/_helpers.tpl
Normal file
14
clusters/cl01tl/helm/cilium/templates/_helpers.tpl
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "cilium.labels" -}}
|
||||||
|
{{ include "cilium.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "cilium.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
@@ -1,19 +0,0 @@
|
|||||||
# apiVersion: cilium.io/v2
|
|
||||||
# kind: CiliumBGPAdvertisement
|
|
||||||
# metadata:
|
|
||||||
# name: cilium-bgp-advertisements
|
|
||||||
# namespace: {{ .Release.Namespace }}
|
|
||||||
# labels:
|
|
||||||
# app.kubernetes.io/name: {{ .Template.Name }}
|
|
||||||
# app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
# app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
# spec:
|
|
||||||
# advertisements:
|
|
||||||
# - advertisementType: "Service"
|
|
||||||
# service:
|
|
||||||
# addresses:
|
|
||||||
# - ExternalIP
|
|
||||||
# - LoadBalancerIP
|
|
||||||
# selector:
|
|
||||||
# matchExpressions:
|
|
||||||
# - {key: somekey, operator: NotIn, values: ['never-used-value']}
|
|
||||||
@@ -1,22 +0,0 @@
|
|||||||
# apiVersion: cilium.io/v2
|
|
||||||
# kind: CiliumBGPClusterConfig
|
|
||||||
# metadata:
|
|
||||||
# name: cilium-bgp
|
|
||||||
# namespace: {{ .Release.Namespace }}
|
|
||||||
# labels:
|
|
||||||
# app.kubernetes.io/name: {{ .Template.Name }}
|
|
||||||
# app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
# app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
# spec:
|
|
||||||
# nodeSelector:
|
|
||||||
# matchLabels:
|
|
||||||
# node-role.kubernetes.io/bgp: "65020"
|
|
||||||
# bgpInstances:
|
|
||||||
# - name: "65020"
|
|
||||||
# localASN: 65020
|
|
||||||
# peers:
|
|
||||||
# - name: "udm-65000"
|
|
||||||
# peerASN: 65000
|
|
||||||
# peerAddress: 192.168.1.1
|
|
||||||
# peerConfigRef:
|
|
||||||
# name: "cilium-peer"
|
|
||||||
@@ -1,23 +0,0 @@
|
|||||||
# apiVersion: cilium.io/v2
|
|
||||||
# kind: CiliumBGPPeerConfig
|
|
||||||
# metadata:
|
|
||||||
# name: cilium-peer
|
|
||||||
# namespace: {{ .Release.Namespace }}
|
|
||||||
# labels:
|
|
||||||
# app.kubernetes.io/name: {{ .Template.Name }}
|
|
||||||
# app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
# app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
# spec:
|
|
||||||
# timers:
|
|
||||||
# holdTimeSeconds: 9
|
|
||||||
# keepAliveTimeSeconds: 3
|
|
||||||
# ebgpMultihop: 4
|
|
||||||
# gracefulRestart:
|
|
||||||
# enabled: true
|
|
||||||
# restartTimeSeconds: 15
|
|
||||||
# families:
|
|
||||||
# - afi: ipv4
|
|
||||||
# safi: unicast
|
|
||||||
# advertisements:
|
|
||||||
# matchLabels:
|
|
||||||
# app.kubernetes.io/name: cilium-bgp-advertisements
|
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: default-ip-pool
|
name: default-ip-pool
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: default-ip-pool
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "cilium.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
blocks:
|
blocks:
|
||||||
- start: "10.232.1.21"
|
- start: "10.232.1.21"
|
||||||
@@ -19,9 +18,8 @@ metadata:
|
|||||||
name: bgp-ip-pool
|
name: bgp-ip-pool
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: bgp-ip-pool
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "cilium.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
blocks:
|
blocks:
|
||||||
- start: "10.232.2.100"
|
- start: "10.232.2.100"
|
||||||
|
|||||||
@@ -1,45 +0,0 @@
|
|||||||
# apiVersion: gateway.networking.k8s.io/v1
|
|
||||||
# kind: Gateway
|
|
||||||
# metadata:
|
|
||||||
# name: cilium-tls-gateway
|
|
||||||
# namespace: {{ .Release.Namespace }}
|
|
||||||
# labels:
|
|
||||||
# app.kubernetes.io/name: {{ .Template.Name }}
|
|
||||||
# app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
# app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
# annotations:
|
|
||||||
# cert-manager.io/cluster-issuer: letsencrypt-issuer
|
|
||||||
# spec:
|
|
||||||
# addresses:
|
|
||||||
# - type: IPAddress
|
|
||||||
# value: 10.232.1.23
|
|
||||||
# gatewayClassName: cilium
|
|
||||||
# listeners:
|
|
||||||
# - allowedRoutes:
|
|
||||||
# namespaces:
|
|
||||||
# from: All
|
|
||||||
# hostname: '*.alexlebens.net'
|
|
||||||
# name: https
|
|
||||||
# port: 443
|
|
||||||
# protocol: HTTPS
|
|
||||||
# tls:
|
|
||||||
# certificateRefs:
|
|
||||||
# - group: ''
|
|
||||||
# kind: Secret
|
|
||||||
# name: https-gateway-cert
|
|
||||||
# namespace: kube-system
|
|
||||||
# mode: Terminate
|
|
||||||
# - allowedRoutes:
|
|
||||||
# namespaces:
|
|
||||||
# from: All
|
|
||||||
# hostname: 'alexlebens.net'
|
|
||||||
# name: https-domain
|
|
||||||
# port: 443
|
|
||||||
# protocol: HTTPS
|
|
||||||
# tls:
|
|
||||||
# certificateRefs:
|
|
||||||
# - group: ''
|
|
||||||
# kind: Secret
|
|
||||||
# name: https-gateway-cert
|
|
||||||
# namespace: kube-system
|
|
||||||
# mode: Terminate
|
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: hubble
|
name: hubble
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: hubble
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "cilium.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
parentRefs:
|
parentRefs:
|
||||||
- group: gateway.networking.k8s.io
|
- group: gateway.networking.k8s.io
|
||||||
|
|||||||
14
clusters/cl01tl/helm/dawarich/templates/_helpers.tpl
Normal file
14
clusters/cl01tl/helm/dawarich/templates/_helpers.tpl
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "dawarich.labels" -}}
|
||||||
|
{{ include "dawarich.selectorLabels" $ }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "dawarich.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
@@ -4,9 +4,8 @@ metadata:
|
|||||||
name: dawarich-key
|
name: dawarich-key
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: dawarich-key
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "dawarich.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
@@ -24,9 +23,8 @@ metadata:
|
|||||||
name: dawarich-oidc-authentik
|
name: dawarich-oidc-authentik
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: {{ .Template.Name }}
|
app.kubernetes.io/name: dawarich-oidc-authentik
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
{{- include "dawarich.labels" . | nindent 4 }}
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
spec:
|
spec:
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
|
|||||||
@@ -24,4 +24,4 @@ dependencies:
|
|||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
|
icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
|
||||||
# renovate: datasource=github-releases depName=frederikemmer/MediaLyze
|
# renovate: datasource=github-releases depName=frederikemmer/MediaLyze
|
||||||
appVersion: 0.8.0
|
appVersion: 0.7.1
|
||||||
|
|||||||
@@ -12,7 +12,7 @@ medialyze:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/frederikemmer/medialyze
|
repository: ghcr.io/frederikemmer/medialyze
|
||||||
tag: 0.8.0@sha256:80aa5ce70d8644ce8321f97856a1c0ede5dfeaaba305c514ceefebf89c8985ef
|
tag: 0.7.1@sha256:c28cfd5cafe2b34136efaba5ba825440a2160cda3116ecb266454eac07a37e49
|
||||||
env:
|
env:
|
||||||
- name: HOST_PORT
|
- name: HOST_PORT
|
||||||
value: 8080
|
value: 8080
|
||||||
|
|||||||
@@ -12,7 +12,7 @@ tdarr:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/haveagitgat/tdarr
|
repository: ghcr.io/haveagitgat/tdarr
|
||||||
tag: 2.70.01@sha256:4d48a46fb984b29e07cf4fd66cf7d3c8bd7c2c8dd662d09b4e20e11ae93e52fc
|
tag: 2.69.01@sha256:29995d5fd044fd3e1493942970c42c6fdf9be0ded36ec3a527b2493f39a8c6df
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
value: America/Chicago
|
value: America/Chicago
|
||||||
@@ -68,7 +68,7 @@ tdarr:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/haveagitgat/tdarr_node
|
repository: ghcr.io/haveagitgat/tdarr_node
|
||||||
tag: 2.70.01@sha256:60176a6ffc7584edde5420b7e1816f60227aa166f159b58a721d34564075c6e4
|
tag: 2.69.01@sha256:ab37d6a90a7f4654c6543117b923f3930e258e40e73f127ba34634082c722e8c
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
value: America/Chicago
|
value: America/Chicago
|
||||||
|
|||||||
Reference in New Issue
Block a user