Files
auricom-home-cluster/kubernetes/apps/default/lldap/app/helmrelease.yaml
2023-07-18 21:55:56 +02:00

90 lines
2.2 KiB
YAML

---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: &app lldap
namespace: default
spec:
interval: 30m
chart:
spec:
chart: app-template
version: 1.5.1
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
maxHistory: 2
install:
createNamespace: true
remediation:
retries: 3
upgrade:
cleanupOnFail: true
remediation:
retries: 3
uninstall:
keepHistory: false
values:
initContainers:
01-init-db:
image: ghcr.io/onedr0p/postgres-init:14.8
imagePullPolicy: IfNotPresent
envFrom: &envFrom
- secretRef:
name: lldap-secret
controller:
replicas: 2
strategy: RollingUpdate
annotations:
reloader.stakater.com/auto: "true"
image:
repository: ghcr.io/lldap/lldap
# TODO: Switch to release tag on next release
tag: latest-alpine@sha256:241a8f0dace1e0a7db7efceb85b9842115551142a0ecc74a881f917726a08df1
env:
TZ: ${TIMEZONE}
LLDAP_HTTP_PORT: &port 8080
LLDAP_HTTP_URL: https://lldap.${SECRET_CLUSTER_DOMAIN}
LLDAP_LDAP_PORT: &ldapPort 5389
LLDAP_LDAP_BASE_DN: dc=home,dc=arpa
envFrom: *envFrom
service:
main:
ports:
http:
port: *port
ldap:
enabled: true
port: *ldapPort
ingress:
main:
enabled: true
ingressClassName: nginx
hosts:
- host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- *host
persistence:
data:
enabled: true
type: emptyDir
topologySpreadConstraints:
- maxSkew: 1
topologyKey: kubernetes.io/hostname
whenUnsatisfiable: DoNotSchedule
labelSelector:
matchLabels:
app.kubernetes.io/name: *app
resources:
requests:
cpu: 100m
memory: 100Mi
limits:
memory: 500Mi