Files
infrastructure/clusters/cl01tl/manifests/directus/Deployment-directus.yaml
gitea-bot 8af57edd5e Automated Manifest Update (#5156)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `schedule` by `@gitea-actions`
- **Commit**: `1d67ec7` (on `main`)
- **Charts Updated**: `site-profile`

### Update Details (2026-03-26 17:18 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `c72a7fb` (on `c72a7fbd05d715f36d646cdafd09dd8b51fe6c18`)
- **Charts Updated**: `medialyze`

### Update Details (2026-03-26 17:19 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `adef1fa` (on `adef1fa2ff6f3f60402535a000b309e91281a2e0`)
- **Charts Updated**: `headlamp`

### Update Details (2026-03-26 17:21 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `1882c58` (on `1882c586f5e3d9af26ee60fbd741d8bf3d61ea71`)
- **Charts Updated**: `gitea,jellyfin,karakeep`

### Update Details (2026-03-26 17:25 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `a9c7087` (on `a9c708726c1e17f2b61f520443ee5d1ec157ab1d`)
- **Charts Updated**: `directus`

Reviewed-on: #5156
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
2026-03-26 17:27:38 +00:00

174 lines
5.5 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: directus
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: directus
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: directus
helm.sh/chart: directus-4.6.2
namespace: directus
spec:
revisionHistoryLimit: 3
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app.kubernetes.io/controller: main
app.kubernetes.io/name: directus
app.kubernetes.io/instance: directus
template:
metadata:
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: directus
app.kubernetes.io/name: directus
spec:
enableServiceLinks: false
serviceAccountName: default
automountServiceAccountToken: true
hostIPC: false
hostNetwork: false
hostPID: false
dnsPolicy: ClusterFirst
containers:
- env:
- name: PUBLIC_URL
value: https://directus.alexlebens.net
- name: WEBSOCKETS_ENABLED
value: "true"
- name: ADMIN_EMAIL
valueFrom:
secretKeyRef:
key: admin-email
name: directus-config
- name: ADMIN_PASSWORD
valueFrom:
secretKeyRef:
key: admin-password
name: directus-config
- name: SECRET
valueFrom:
secretKeyRef:
key: secret
name: directus-config
- name: KEY
valueFrom:
secretKeyRef:
key: key
name: directus-config
- name: DB_CLIENT
value: postgres
- name: DB_HOST
valueFrom:
secretKeyRef:
key: host
name: directus-postgresql-18-cluster-app
- name: DB_DATABASE
valueFrom:
secretKeyRef:
key: dbname
name: directus-postgresql-18-cluster-app
- name: DB_PORT
valueFrom:
secretKeyRef:
key: port
name: directus-postgresql-18-cluster-app
- name: DB_USER
valueFrom:
secretKeyRef:
key: user
name: directus-postgresql-18-cluster-app
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
key: password
name: directus-postgresql-18-cluster-app
- name: SYNCHRONIZATION_STORE
value: redis
- name: CACHE_ENABLED
value: "true"
- name: CACHE_STORE
value: redis
- name: REDIS_ENABLED
value: "true"
- name: REDIS_HOST
value: directus-valkey
- name: REDIS_USERNAME
valueFrom:
secretKeyRef:
key: user
name: directus-valkey-config
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
key: password
name: directus-valkey-config
- name: STORAGE_LOCATIONS
value: s3
- name: STORAGE_S3_DRIVER
value: s3
- name: STORAGE_S3_KEY
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: directus-bucket-garage
- name: STORAGE_S3_SECRET
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: directus-bucket-garage
- name: STORAGE_S3_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: directus-bucket-garage
- name: STORAGE_S3_BUCKET
value: directus-assets
- name: STORAGE_S3_ENDPOINT
value: http://garage-main.garage:3900
- name: STORAGE_S3_FORCE_PATH_STYLE
value: "true"
- name: AUTH_PROVIDERS
value: AUTHENTIK
- name: AUTH_AUTHENTIK_DRIVER
value: openid
- name: AUTH_AUTHENTIK_CLIENT_ID
valueFrom:
secretKeyRef:
key: OIDC_CLIENT_ID
name: directus-oidc-secret
- name: AUTH_AUTHENTIK_CLIENT_SECRET
valueFrom:
secretKeyRef:
key: OIDC_CLIENT_SECRET
name: directus-oidc-secret
- name: AUTH_AUTHENTIK_SCOPE
value: openid profile email
- name: AUTH_AUTHENTIK_ISSUER_URL
value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
- name: AUTH_AUTHENTIK_IDENTIFIER_KEY
value: email
- name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION
value: "true"
- name: AUTH_AUTHENTIK_LABEL
value: Authentik
- name: TELEMETRY
value: "false"
- name: METRICS_ENABLED
value: "true"
- name: METRICS_TOKENS
valueFrom:
secretKeyRef:
key: metric-token
name: directus-metric-token
image: directus/directus:11.17.0
imagePullPolicy: IfNotPresent
name: main
resources:
requests:
cpu: 10m
memory: 256Mi