infrastructure/clusters/cl01tl/manifests/ollama/ollama.yaml

---
# Source: ollama/charts/ollama/templates/common.yaml
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: ollama-server-1
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: ollama
spec:
  accessModes:
    - "ReadWriteOnce"
  resources:
    requests:
      storage: "40Gi"
  storageClassName: "ceph-block"
---
# Source: ollama/charts/ollama/templates/common.yaml
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: ollama-server-2
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: ollama
spec:
  accessModes:
    - "ReadWriteOnce"
  resources:
    requests:
      storage: "40Gi"
  storageClassName: "ceph-block"
---
# Source: ollama/charts/ollama/templates/common.yaml
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: ollama-server-3
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: ollama
spec:
  accessModes:
    - "ReadWriteOnce"
  resources:
    requests:
      storage: "40Gi"
  storageClassName: "ceph-block"
---
# Source: ollama/charts/ollama/templates/common.yaml
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: ollama-web-data
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: ollama
spec:
  accessModes:
    - "ReadWriteOnce"
  resources:
    requests:
      storage: "5Gi"
  storageClassName: "ceph-block"
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: v1
kind: Service
metadata:
  name: ollama-server-1
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    app.kubernetes.io/service: ollama-server-1
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  type: ClusterIP
  ports:
    - port: 11434
      targetPort: 11434
      protocol: TCP
      name: http
  selector:
    app.kubernetes.io/controller: server-1
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/name: ollama
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: v1
kind: Service
metadata:
  name: ollama-server-2
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    app.kubernetes.io/service: ollama-server-2
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  type: ClusterIP
  ports:
    - port: 11434
      targetPort: 11434
      protocol: TCP
      name: http
  selector:
    app.kubernetes.io/controller: server-2
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/name: ollama
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: v1
kind: Service
metadata:
  name: ollama-server-3
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    app.kubernetes.io/service: ollama-server-3
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  type: ClusterIP
  ports:
    - port: 11434
      targetPort: 11434
      protocol: TCP
      name: http
  selector:
    app.kubernetes.io/controller: server-3
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/name: ollama
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: v1
kind: Service
metadata:
  name: ollama-web
  labels:
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    app.kubernetes.io/service: ollama-web
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  type: ClusterIP
  ports:
    - port: 80
      targetPort: 8080
      protocol: TCP
      name: http
  selector:
    app.kubernetes.io/controller: web
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/name: ollama
---
# Source: ollama/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  name: ollama-pd05wd
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-pd05wd
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
  annotations:
    tailscale.com/tailnet-fqdn: ollama-pd05wd.boreal-beaufort.ts.net
spec:
  externalName: placeholder
  type: ExternalName
---
# Source: ollama/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  name: stable-diffusion-pd05wd
  namespace: ollama
  labels:
    app.kubernetes.io/name: stable-diffusion-pd05wd
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
  annotations:
    tailscale.com/tailnet-fqdn: stable-diffusion-pd05wd.boreal-beaufort.ts.net
spec:
  externalName: placeholder
  type: ExternalName
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ollama-server-1
  labels:
    app.kubernetes.io/controller: server-1
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  revisionHistoryLimit: 3
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/controller: server-1
      app.kubernetes.io/name: ollama
      app.kubernetes.io/instance: ollama
  template:
    metadata:
      labels: 
        app.kubernetes.io/controller: server-1
        app.kubernetes.io/instance: ollama
        app.kubernetes.io/name: ollama
        ollama-type: server
    spec: 
      enableServiceLinks: false
      serviceAccountName: default
      automountServiceAccountToken: true
      hostIPC: false
      hostNetwork: false
      hostPID: false
      dnsPolicy: ClusterFirst
      affinity:
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
          - labelSelector:
              matchExpressions:
              - key: ollama-type
                operator: In
                values:
                - server
            topologyKey: kubernetes.io/hostname
      containers: 
        - env:
          - name: OLLAMA_KEEP_ALIVE
            value: 24h
          - name: OLLAMA_HOST
            value: 0.0.0.0
          image: ollama/ollama:0.13.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
            limits:
              gpu.intel.com/i915: 1
            requests:
              cpu: 100m
              gpu.intel.com/i915: 1
              memory: 1Gi
          volumeMounts:
          - mountPath: /root/.ollama
            name: server-1
      volumes: 
        - name: server-1
          persistentVolumeClaim:
            claimName: ollama-server-1
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ollama-server-2
  labels:
    app.kubernetes.io/controller: server-2
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  revisionHistoryLimit: 3
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/controller: server-2
      app.kubernetes.io/name: ollama
      app.kubernetes.io/instance: ollama
  template:
    metadata:
      labels: 
        app.kubernetes.io/controller: server-2
        app.kubernetes.io/instance: ollama
        app.kubernetes.io/name: ollama
        ollama-type: server
    spec: 
      enableServiceLinks: false
      serviceAccountName: default
      automountServiceAccountToken: true
      hostIPC: false
      hostNetwork: false
      hostPID: false
      dnsPolicy: ClusterFirst
      affinity:
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
          - labelSelector:
              matchExpressions:
              - key: ollama-type
                operator: In
                values:
                - server
            topologyKey: kubernetes.io/hostname
      containers: 
        - env:
          - name: OLLAMA_KEEP_ALIVE
            value: 24h
          - name: OLLAMA_HOST
            value: 0.0.0.0
          image: ollama/ollama:0.13.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
            limits:
              gpu.intel.com/i915: 1
            requests:
              cpu: 100m
              gpu.intel.com/i915: 1
              memory: 1Gi
          volumeMounts:
          - mountPath: /root/.ollama
            name: server-2
      volumes: 
        - name: server-2
          persistentVolumeClaim:
            claimName: ollama-server-2
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ollama-server-3
  labels:
    app.kubernetes.io/controller: server-3
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  revisionHistoryLimit: 3
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/controller: server-3
      app.kubernetes.io/name: ollama
      app.kubernetes.io/instance: ollama
  template:
    metadata:
      labels: 
        app.kubernetes.io/controller: server-3
        app.kubernetes.io/instance: ollama
        app.kubernetes.io/name: ollama
        ollama-type: server
    spec: 
      enableServiceLinks: false
      serviceAccountName: default
      automountServiceAccountToken: true
      hostIPC: false
      hostNetwork: false
      hostPID: false
      dnsPolicy: ClusterFirst
      affinity:
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
          - labelSelector:
              matchExpressions:
              - key: ollama-type
                operator: In
                values:
                - server
            topologyKey: kubernetes.io/hostname
      containers: 
        - env:
          - name: OLLAMA_KEEP_ALIVE
            value: 24h
          - name: OLLAMA_HOST
            value: 0.0.0.0
          image: ollama/ollama:0.13.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
            limits:
              gpu.intel.com/i915: 1
            requests:
              cpu: 100m
              gpu.intel.com/i915: 1
              memory: 1Gi
          volumeMounts:
          - mountPath: /root/.ollama
            name: server-3
      volumes: 
        - name: server-3
          persistentVolumeClaim:
            claimName: ollama-server-3
---
# Source: ollama/charts/ollama/templates/common.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ollama-web
  labels:
    app.kubernetes.io/controller: web
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: ollama
    helm.sh/chart: ollama-4.4.0
  namespace: ollama
spec:
  revisionHistoryLimit: 3
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/controller: web
      app.kubernetes.io/name: ollama
      app.kubernetes.io/instance: ollama
  template:
    metadata:
      labels: 
        app.kubernetes.io/controller: web
        app.kubernetes.io/instance: ollama
        app.kubernetes.io/name: ollama
    spec: 
      enableServiceLinks: false
      serviceAccountName: default
      automountServiceAccountToken: true
      hostIPC: false
      hostNetwork: false
      hostPID: false
      dnsPolicy: ClusterFirst
      containers: 
        - env:
          - name: ENV
            value: prod
          - name: WEBUI_AUTH
            value: "true"
          - name: WEBUI_NAME
            value: Ollama
          - name: WEBUI_URL
            value: http://ollama.alexlebens.net
          - name: ENABLE_LOGIN_FORM
            value: "false"
          - name: DEFAULT_USER_ROLE
            value: admin
          - name: WEBUI_SECRET_KEY
            valueFrom:
              secretKeyRef:
                key: key
                name: ollama-key-secret
          - name: DATABASE_URL
            valueFrom:
              secretKeyRef:
                key: uri
                name: ollama-web-postgresql-17-cluster-app
          - name: OLLAMA_BASE_URL
            value: http://ollama-server-1.ollama:11434
          - name: ENABLE_OAUTH_SIGNUP
            value: "true"
          - name: OAUTH_USERNAME_CLAIM
            value: preferred_username
          - name: OAUTH_CLIENT_SECRET
            valueFrom:
              secretKeyRef:
                key: secret
                name: ollama-oidc-secret
          - name: OAUTH_CLIENT_ID
            valueFrom:
              secretKeyRef:
                key: client
                name: ollama-oidc-secret
          - name: OAUTH_PROVIDER_NAME
            value: Authentik
          - name: OPENID_PROVIDER_URL
            value: https://authentik.alexlebens.net/application/o/ollama/.well-known/openid-configuration
          image: ghcr.io/open-webui/open-webui:v0.6.37
          imagePullPolicy: IfNotPresent
          name: main
          resources:
            requests:
              cpu: 10m
              memory: 1Gi
          volumeMounts:
          - mountPath: /app/backend/data
            name: web-data
      volumes: 
        - name: web-data
          persistentVolumeClaim:
            claimName: ollama-web-data
---
# Source: ollama/charts/postgres-17-cluster/templates/cluster.yaml
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: ollama-web-postgresql-17-cluster
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  instances: 3
  imageName: "ghcr.io/cloudnative-pg/postgresql:17.7-standard-trixie"
  imagePullPolicy: IfNotPresent
  postgresUID: 26
  postgresGID: 26
  plugins:
    - name: barman-cloud.cloudnative-pg.io
      enabled: true
      isWALArchiver: false
      parameters:
        barmanObjectName: "ollama-web-postgresql-17-external-backup"
        serverName: "ollama-web-postgresql-17-backup-1"
    - name: barman-cloud.cloudnative-pg.io
      enabled: true
      isWALArchiver: true
      parameters:
        barmanObjectName: "ollama-web-postgresql-17-garage-local-backup"
        serverName: "ollama-web-postgresql-17-backup-1"
  
  externalClusters:
    - name: recovery
      plugin:
        name: barman-cloud.cloudnative-pg.io
        parameters:
          barmanObjectName: "ollama-web-postgresql-17-recovery"
          serverName: ollama-web-postgresql-17-backup-1
  
  storage:
    size: 10Gi
    storageClass: local-path
  walStorage:
    size: 2Gi
    storageClass: local-path
  resources:
    limits:
      hugepages-2Mi: 256Mi
    requests:
      cpu: 100m
      memory: 256Mi
  
  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname

  primaryUpdateMethod: switchover
  primaryUpdateStrategy: unsupervised
  logLevel: info
  enableSuperuserAccess: false
  enablePDB: true

  postgresql:
    parameters:
      hot_standby_feedback: "on"
      max_slot_wal_keep_size: 2000MB
      shared_buffers: 128MB

  monitoring:
    enablePodMonitor: true
    disableDefaultQueries: false

  
  bootstrap:
    recovery:
      
      database: app
      
      source: ollama-web-postgresql-17-backup-1
  
  externalClusters:
    - name: ollama-web-postgresql-17-backup-1
      plugin:
        name: barman-cloud.cloudnative-pg.io
        enabled: true
        isWALArchiver: false
        parameters:
          barmanObjectName: "ollama-web-postgresql-17-recovery"
          serverName: ollama-web-postgresql-17-backup-1
---
# Source: ollama/templates/external-secret.yaml
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: ollama-key-secret
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-key-secret
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: key
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/ollama/key
        metadataPolicy: None
        property: key
---
# Source: ollama/templates/external-secret.yaml
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: ollama-oidc-secret
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-oidc-secret
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: client
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /authentik/oidc/ollama
        metadataPolicy: None
        property: client
    - secretKey: secret
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /authentik/oidc/ollama
        metadataPolicy: None
        property: secret
---
# Source: ollama/templates/external-secret.yaml
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: ollama-web-data-backup-secret
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-web-data-backup-secret
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  target:
    template:
      mergePolicy: Merge
      engineVersion: v2
      data:
        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ollama/ollama-web"
  data:
    - secretKey: BUCKET_ENDPOINT
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/volsync/restic/config
        metadataPolicy: None
        property: S3_BUCKET_ENDPOINT
    - secretKey: RESTIC_PASSWORD
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/volsync/restic/config
        metadataPolicy: None
        property: RESTIC_PASSWORD
    - secretKey: AWS_DEFAULT_REGION
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/volsync/restic/config
        metadataPolicy: None
        property: AWS_DEFAULT_REGION
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/volsync-backups
        metadataPolicy: None
        property: access_key
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/volsync-backups
        metadataPolicy: None
        property: secret_key
---
# Source: ollama/templates/external-secret.yaml
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: ollama-web-postgresql-17-cluster-backup-secret
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-web-postgresql-17-cluster-backup-secret
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: access
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
---
# Source: ollama/templates/external-secret.yaml
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: ollama-web-postgresql-17-cluster-backup-secret-garage
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-web-postgresql-17-cluster-backup-secret-garage
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /garage/home-infra/postgres-backups
        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /garage/home-infra/postgres-backups
        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: ACCESS_REGION
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /garage/home-infra/postgres-backups
        metadataPolicy: None
        property: ACCESS_REGION
---
# Source: ollama/templates/http-route.yaml
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: http-route-ollama
  namespace: ollama
  labels:
    app.kubernetes.io/name: http-route-ollama
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: traefik-gateway
      namespace: traefik
  hostnames:
    - ollama.alexlebens.net
  rules:
    - matches:
      - path:
          type: PathPrefix
          value: /
      backendRefs:
        - group: ''
          kind: Service
          name: ollama-web
          port: 80
          weight: 100
---
# Source: ollama/charts/postgres-17-cluster/templates/object-store.yaml
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
  name: "ollama-web-postgresql-17-external-backup"
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  retentionPolicy: 30d
  configuration:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/ollama/ollama-web-postgresql-17-cluster
    endpointURL: https://nyc3.digitaloceanspaces.com
    s3Credentials:
      accessKeyId:
        name: ollama-web-postgresql-17-cluster-backup-secret
        key: ACCESS_KEY_ID
      secretAccessKey:
        name: ollama-web-postgresql-17-cluster-backup-secret
        key: ACCESS_SECRET_KEY
---
# Source: ollama/charts/postgres-17-cluster/templates/object-store.yaml
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
  name: "ollama-web-postgresql-17-garage-local-backup"
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  retentionPolicy: 3d
  configuration:
    destinationPath: s3://postgres-backups/cl01tl/ollama/ollama-web-postgresql-17-cluster
    endpointURL: http://garage-main.garage:3900
    s3Credentials:
      accessKeyId:
        name: ollama-web-postgresql-17-cluster-backup-secret-garage
        key: ACCESS_KEY_ID
      secretAccessKey:
        name: ollama-web-postgresql-17-cluster-backup-secret-garage
        key: ACCESS_SECRET_KEY
      region:
        name: ollama-web-postgresql-17-cluster-backup-secret-garage
        key: ACCESS_REGION
---
# Source: ollama/charts/postgres-17-cluster/templates/object-store.yaml
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
  name: "ollama-web-postgresql-17-recovery"
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  configuration:
    destinationPath: s3://postgres-backups/cl01tl/ollama/ollama-web-postgresql-17-cluster
    endpointURL: http://garage-main.garage:3900
    wal:
      compression: snappy
      maxParallel: 1
    data:
      compression: snappy
      jobs: 1
    s3Credentials:
      accessKeyId:
        name: ollama-web-postgresql-17-cluster-backup-secret-garage
        key: ACCESS_KEY_ID
      secretAccessKey:
        name: ollama-web-postgresql-17-cluster-backup-secret-garage
        key: ACCESS_SECRET_KEY
---
# Source: ollama/charts/postgres-17-cluster/templates/prometheus-rule.yaml
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
  name: ollama-web-postgresql-17-alert-rules
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  groups:
    - name: cloudnative-pg/ollama-web-postgresql-17
      rules:
        - alert: CNPGClusterBackendsWaitingWarning
          annotations:
            summary: CNPG Cluster a backend is waiting for longer than 5 minutes.
            description: |-
              Pod {{ $labels.pod }}
              has been waiting for longer than 5 minutes
          expr: |
            cnpg_backends_waiting_total > 300
          for: 1m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterDatabaseDeadlockConflictsWarning
          annotations:
            summary: CNPG Cluster has over 10 deadlock conflicts.
            description: |-
              There are over 10 deadlock conflicts in
              {{ $labels.pod }}
          expr: |
            cnpg_pg_stat_database_deadlocks > 10
          for: 1m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterHACritical
          annotations:
            summary: CNPG Cluster has no standby replicas!
            description: |-
              CloudNativePG Cluster "{{`{{`}} $labels.job {{`}}`}}" has no ready standby replicas. Your cluster at a severe
              risk of data loss and downtime if the primary instance fails.
          
              The primary instance is still online and able to serve queries, although connections to the `-ro` endpoint
              will fail. The `-r` endpoint os operating at reduced capacity and all traffic is being served by the main.
          
              This can happen during a normal fail-over or automated minor version upgrades in a cluster with 2 or less
              instances. The replaced instance may need some time to catch-up with the cluster primary instance.
          
              This alarm will be always trigger if your cluster is configured to run with only 1 instance. In this
              case you may want to silence it.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterHACritical.md
          expr: |
            max by (job) (cnpg_pg_replication_streaming_replicas{namespace="ollama"} - cnpg_pg_replication_is_wal_receiver_up{namespace="ollama"}) < 1
          for: 5m
          labels:
            severity: critical
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterHAWarning
          annotations:
            summary: CNPG Cluster less than 2 standby replicas.
            description: |-
              CloudNativePG Cluster "{{`{{`}} $labels.job {{`}}`}}" has only {{`{{`}} $value {{`}}`}} standby replicas, putting
              your cluster at risk if another instance fails. The cluster is still able to operate normally, although
              the `-ro` and `-r` endpoints operate at reduced capacity.
          
              This can happen during a normal fail-over or automated minor version upgrades. The replaced instance may
              need some time to catch-up with the cluster primary instance.
          
              This alarm will be constantly triggered if your cluster is configured to run with less than 3 instances.
              In this case you may want to silence it.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterHAWarning.md
          expr: |
            max by (job) (cnpg_pg_replication_streaming_replicas{namespace="ollama"} - cnpg_pg_replication_is_wal_receiver_up{namespace="ollama"}) < 2
          for: 5m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterHighConnectionsCritical
          annotations:
            summary: CNPG Instance maximum number of connections critical!
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" instance {{`{{`}} $labels.pod {{`}}`}} is using {{`{{`}} $value {{`}}`}}% of
              the maximum number of connections.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterHighConnectionsCritical.md
          expr: |
            sum by (pod) (cnpg_backends_total{namespace="ollama", pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) / max by (pod) (cnpg_pg_settings_setting{name="max_connections", namespace="ollama", pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) * 100 > 95
          for: 5m
          labels:
            severity: critical
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterHighConnectionsWarning
          annotations:
            summary: CNPG Instance is approaching the maximum number of connections.
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" instance {{`{{`}} $labels.pod {{`}}`}} is using {{`{{`}} $value {{`}}`}}% of
              the maximum number of connections.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterHighConnectionsWarning.md
          expr: |
            sum by (pod) (cnpg_backends_total{namespace="ollama", pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) / max by (pod) (cnpg_pg_settings_setting{name="max_connections", namespace="ollama", pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) * 100 > 80
          for: 5m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterHighReplicationLag
          annotations:
            summary: CNPG Cluster high replication lag
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" is experiencing a high replication lag of
              {{`{{`}} $value {{`}}`}}ms.
          
              High replication lag indicates network issues, busy instances, slow queries or suboptimal configuration.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterHighReplicationLag.md
          expr: |
            max(cnpg_pg_replication_lag{namespace="ollama",pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) * 1000 > 1000
          for: 5m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterInstancesOnSameNode
          annotations:
            summary: CNPG Cluster instances are located on the same node.
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" has {{`{{`}} $value {{`}}`}}
              instances on the same node {{`{{`}} $labels.node {{`}}`}}.
          
              A failure or scheduled downtime of a single node will lead to a potential service disruption and/or data loss.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterInstancesOnSameNode.md
          expr: |
            count by (node) (kube_pod_info{namespace="ollama", pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) > 1
          for: 5m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterLongRunningTransactionWarning
          annotations:
            summary: CNPG Cluster query is taking longer than 5 minutes.
            description: |-
              CloudNativePG Cluster Pod {{ $labels.pod }}
              is taking more than 5 minutes (300 seconds) for a query.
          expr: |-
            cnpg_backends_max_tx_duration_seconds > 300
          for: 1m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterLowDiskSpaceCritical
          annotations:
            summary: CNPG Instance is running out of disk space!
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" is running extremely low on disk space. Check attached PVCs!
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterLowDiskSpaceCritical.md
          expr: |
            max(max by(persistentvolumeclaim) (1 - kubelet_volume_stats_available_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"} / kubelet_volume_stats_capacity_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"})) > 0.9 OR
            max(max by(persistentvolumeclaim) (1 - kubelet_volume_stats_available_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-wal"} / kubelet_volume_stats_capacity_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-wal"})) > 0.9 OR
            max(sum by (namespace,persistentvolumeclaim) (kubelet_volume_stats_used_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-tbs.*"})
                /
                sum by (namespace,persistentvolumeclaim) (kubelet_volume_stats_capacity_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-tbs.*"})
                *
                on(namespace, persistentvolumeclaim) group_left(volume)
                kube_pod_spec_volumes_persistentvolumeclaims_info{pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}
            ) > 0.9
          for: 5m
          labels:
            severity: critical
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterLowDiskSpaceWarning
          annotations:
            summary: CNPG Instance is running out of disk space.
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" is running low on disk space. Check attached PVCs.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterLowDiskSpaceWarning.md
          expr: |
            max(max by(persistentvolumeclaim) (1 - kubelet_volume_stats_available_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"} / kubelet_volume_stats_capacity_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"})) > 0.7 OR
            max(max by(persistentvolumeclaim) (1 - kubelet_volume_stats_available_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-wal"} / kubelet_volume_stats_capacity_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-wal"})) > 0.7 OR
            max(sum by (namespace,persistentvolumeclaim) (kubelet_volume_stats_used_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-tbs.*"})
                /
                sum by (namespace,persistentvolumeclaim) (kubelet_volume_stats_capacity_bytes{namespace="ollama", persistentvolumeclaim=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$-tbs.*"})
                *
                on(namespace, persistentvolumeclaim) group_left(volume)
                kube_pod_spec_volumes_persistentvolumeclaims_info{pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}
            ) > 0.7
          for: 5m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterOffline
          annotations:
            summary: CNPG Cluster has no running instances!
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" has no ready instances.
          
              Having an offline cluster means your applications will not be able to access the database, leading to
              potential service disruption and/or data loss.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterOffline.md
          expr: |
            (count(cnpg_collector_up{namespace="ollama",pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"}) OR on() vector(0)) == 0
          for: 5m
          labels:
            severity: critical
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterPGDatabaseXidAgeWarning
          annotations:
            summary: CNPG Cluster has a number of transactions from the frozen XID to the current one.
            description: |-
              Over 300,000,000 transactions from frozen xid
              on pod {{ $labels.pod }}
          expr: |
            cnpg_pg_database_xid_age > 300000000
          for: 1m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterPGReplicationWarning
          annotations:
            summary: CNPG Cluster standby is lagging behind the primary.
            description: |-
              Standby is lagging behind by over 300 seconds (5 minutes)
          expr: |
            cnpg_pg_replication_lag > 300
          for: 1m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterReplicaFailingReplicationWarning
          annotations:
            summary: CNPG Cluster has a replica is failing to replicate.
            description: |-
              Replica {{ $labels.pod }}
              is failing to replicate
          expr: |
            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
          for: 1m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
        - alert: CNPGClusterZoneSpreadWarning
          annotations:
            summary: CNPG Cluster instances in the same zone.
            description: |-
              CloudNativePG Cluster "ollama/ollama-web-postgresql-17-cluster" has instances in the same availability zone.
          
              A disaster in one availability zone will lead to a potential service disruption and/or data loss.
            runbook_url: https://github.com/cloudnative-pg/charts/blob/main/charts/cluster/docs/runbooks/CNPGClusterZoneSpreadWarning.md
          expr: |
            3 > count(count by (label_topology_kubernetes_io_zone) (kube_pod_info{namespace="ollama", pod=~"ollama-web-postgresql-17-cluster-([1-9][0-9]*)$"} * on(node,instance) group_left(label_topology_kubernetes_io_zone) kube_node_labels)) < 3
          for: 5m
          labels:
            severity: warning
            namespace: ollama
            cnpg_cluster: ollama-web-postgresql-17-cluster
---
# Source: ollama/templates/replication-source.yaml
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
  name: ollama-web-data-backup-source
  namespace: ollama
  labels:
    app.kubernetes.io/name: ollama-web-data-backup-source
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
spec:
  sourcePVC: ollama-web-data
  trigger:
    schedule: 0 4 * * *
  restic:
    pruneIntervalDays: 7
    repository: ollama-web-data-backup-secret
    retain:
      hourly: 1
      daily: 3
      weekly: 2
      monthly: 2
      yearly: 4
    moverSecurityContext:
      runAsUser: 1337
      runAsGroup: 1337
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot
---
# Source: ollama/charts/postgres-17-cluster/templates/scheduled-backup.yaml
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
  name: "ollama-web-postgresql-17-daily-backup-scheduled-backup"
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  immediate: false
  suspend: false
  schedule: "0 0 0 * * *"
  backupOwnerReference: self
  cluster:
    name: ollama-web-postgresql-17-cluster
  method: plugin
  pluginConfiguration:
    name: barman-cloud.cloudnative-pg.io
    parameters:
      barmanObjectName: "ollama-web-postgresql-17-external-backup"
---
# Source: ollama/charts/postgres-17-cluster/templates/scheduled-backup.yaml
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
  name: "ollama-web-postgresql-17-live-backup-scheduled-backup"
  namespace: ollama
  labels:
    helm.sh/chart: postgres-17-cluster-6.16.0
    app.kubernetes.io/name: ollama-web-postgresql-17
    app.kubernetes.io/instance: ollama
    app.kubernetes.io/part-of: ollama
    app.kubernetes.io/version: "6.16.0"
    app.kubernetes.io/managed-by: Helm
spec:
  immediate: true
  suspend: false
  schedule: "0 0 0 * * *"
  backupOwnerReference: self
  cluster:
    name: ollama-web-postgresql-17-cluster
  method: plugin
  pluginConfiguration:
    name: barman-cloud.cloudnative-pg.io
    parameters:
      barmanObjectName: "ollama-web-postgresql-17-garage-local-backup"