gitea-bot
5ac696fd05
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: #2155 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
154 lines
4.1 KiB
YAML
154 lines
4.1 KiB
YAML
---
|
|
# Source: site-profile/charts/site-profile/templates/common.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: site-profile
|
|
labels:
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/name: site-profile
|
|
app.kubernetes.io/service: site-profile
|
|
helm.sh/chart: site-profile-4.4.0
|
|
namespace: site-profile
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- port: 80
|
|
targetPort: 4321
|
|
protocol: TCP
|
|
name: http
|
|
selector:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/name: site-profile
|
|
---
|
|
# Source: site-profile/charts/cloudflared-site/templates/common.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: site-profile-cloudflared-site
|
|
labels:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/name: cloudflared-site
|
|
app.kubernetes.io/version: 2025.10.0
|
|
helm.sh/chart: cloudflared-site-1.23.0
|
|
namespace: site-profile
|
|
spec:
|
|
revisionHistoryLimit: 3
|
|
replicas: 1
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/name: cloudflared-site
|
|
app.kubernetes.io/instance: site-profile
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/name: cloudflared-site
|
|
spec:
|
|
enableServiceLinks: false
|
|
serviceAccountName: default
|
|
automountServiceAccountToken: true
|
|
hostIPC: false
|
|
hostNetwork: false
|
|
hostPID: false
|
|
dnsPolicy: ClusterFirst
|
|
containers:
|
|
- args:
|
|
- tunnel
|
|
- --protocol
|
|
- http2
|
|
- --no-autoupdate
|
|
- run
|
|
- --token
|
|
- $(CF_MANAGED_TUNNEL_TOKEN)
|
|
env:
|
|
- name: CF_MANAGED_TUNNEL_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: cf-tunnel-token
|
|
name: site-profile-cloudflared-api-secret
|
|
image: cloudflare/cloudflared:2025.11.1
|
|
imagePullPolicy: IfNotPresent
|
|
name: main
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
---
|
|
# Source: site-profile/charts/site-profile/templates/common.yaml
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: site-profile
|
|
labels:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/name: site-profile
|
|
helm.sh/chart: site-profile-4.4.0
|
|
namespace: site-profile
|
|
spec:
|
|
revisionHistoryLimit: 3
|
|
replicas: 3
|
|
strategy:
|
|
type: RollingUpdate
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/name: site-profile
|
|
app.kubernetes.io/instance: site-profile
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/controller: main
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/name: site-profile
|
|
spec:
|
|
enableServiceLinks: false
|
|
serviceAccountName: default
|
|
automountServiceAccountToken: true
|
|
hostIPC: false
|
|
hostNetwork: false
|
|
hostPID: false
|
|
dnsPolicy: ClusterFirst
|
|
containers:
|
|
- image: harbor.alexlebens.net/images/site-profile:2.1.0
|
|
imagePullPolicy: IfNotPresent
|
|
name: main
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
---
|
|
# Source: site-profile/templates/external-secret.yaml
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: site-profile-cloudflared-api-secret
|
|
namespace: site-profile
|
|
labels:
|
|
app.kubernetes.io/name: site-profile-cloudflared-api-secret
|
|
app.kubernetes.io/instance: site-profile
|
|
app.kubernetes.io/part-of: site-profile
|
|
spec:
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: vault
|
|
data:
|
|
- secretKey: cf-tunnel-token
|
|
remoteRef:
|
|
conversionStrategy: Default
|
|
decodingStrategy: None
|
|
key: /cloudflare/tunnels/site-profile
|
|
metadataPolicy: None
|
|
property: token
|