139 lines
3.8 KiB
YAML
139 lines
3.8 KiB
YAML
argo-workflows:
|
|
controller:
|
|
metricsConfig:
|
|
enabled: true
|
|
persistence:
|
|
connectionPool:
|
|
maxIdleConns: 100
|
|
maxOpenConns: 0
|
|
nodeStatusOffLoad: true
|
|
archive: true
|
|
postgresql:
|
|
host: argo-workflows-postgresql-18-cluster-rw
|
|
port: 5432
|
|
database: app
|
|
tableName: app
|
|
userNameSecret:
|
|
name: argo-workflows-postgresql-18-cluster-app
|
|
key: username
|
|
passwordSecret:
|
|
name: argo-workflows-postgresql-18-cluster-app
|
|
key: password
|
|
ssl: false
|
|
sslMode: disable
|
|
workflowWorkers: 2
|
|
workflowTTLWorkers: 1
|
|
podCleanupWorkers: 1
|
|
cronWorkflowWorkers: 1
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
serviceMonitor:
|
|
enabled: true
|
|
name: workflow-controller
|
|
workflowNamespaces:
|
|
- argocd
|
|
- argo-workflows
|
|
server:
|
|
authModes:
|
|
- sso
|
|
ingress:
|
|
enabled: false
|
|
sso:
|
|
enabled: true
|
|
issuer: https://authentik.alexlebens.net/application/o/argo-workflows/
|
|
clientId:
|
|
name: argo-workflows-oidc-secret
|
|
key: client
|
|
clientSecret:
|
|
name: argo-workflows-oidc-secret
|
|
key: secret
|
|
redirectUrl: https://argo-workflows.alexlebens.net/oauth2/callback
|
|
rbac:
|
|
enabled: false
|
|
scopes:
|
|
- openid
|
|
- email
|
|
- profile
|
|
useStaticCredentials: true
|
|
artifactRepository:
|
|
archiveLogs: false
|
|
argo-events:
|
|
controller:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
metrics:
|
|
enabled: true
|
|
serviceMonitor:
|
|
enabled: true
|
|
webhook:
|
|
enabled: true
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
postgres-18-cluster:
|
|
mode: recovery
|
|
cluster:
|
|
image:
|
|
repository: ghcr.io/cloudnative-pg/postgresql
|
|
tag: 18.1-standard-trixie
|
|
storage:
|
|
storageClass: local-path
|
|
walStorage:
|
|
storageClass: local-path
|
|
monitoring:
|
|
enabled: true
|
|
prometheusRule:
|
|
enabled: true
|
|
recovery:
|
|
method: objectStore
|
|
objectStore:
|
|
destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-18-cluster
|
|
endpointURL: http://garage-main.garage:3900
|
|
index: 1
|
|
endpointCredentials: argo-workflows-postgresql-18-cluster-backup-secret-garage
|
|
backup:
|
|
objectStore:
|
|
- name: external
|
|
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/argo-workflows/argo-workflows-postgresql-18-cluster
|
|
index: 1
|
|
retentionPolicy: "30d"
|
|
isWALArchiver: false
|
|
- name: garage-local
|
|
destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-18-cluster
|
|
index: 1
|
|
endpointURL: http://garage-main.garage:3900
|
|
endpointCredentials: argo-workflows-postgresql-18-cluster-backup-secret-garage
|
|
endpointCredentialsIncludeRegion: true
|
|
retentionPolicy: "3d"
|
|
isWALArchiver: true
|
|
# - name: garage-remote
|
|
# destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-18-cluster
|
|
# index: 1
|
|
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
|
|
# endpointCredentials: argo-workflows-postgresql-18-cluster-backup-secret-garage
|
|
# endpointCredentialsIncludeRegion: true
|
|
# retentionPolicy: "30d"
|
|
# data:
|
|
# compression: bzip2
|
|
scheduledBackups:
|
|
- name: daily-backup
|
|
suspend: false
|
|
immediate: true
|
|
schedule: "0 0 0 * * *"
|
|
backupName: external
|
|
- name: live-backup
|
|
suspend: false
|
|
immediate: true
|
|
schedule: "0 0 0 * * *"
|
|
backupName: garage-local
|
|
# - name: weekly-backup
|
|
# suspend: true
|
|
# immediate: true
|
|
# schedule: "0 0 4 * * SAT"
|
|
# backupName: garage-remote
|