This commit is contained in:
Morten Olsen
2025-12-03 23:23:06 +01:00
parent a8e86c3e74
commit 1851a6a506
34 changed files with 90 additions and 56 deletions

View File

@@ -1,24 +1,25 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: '{{ .Release.Name }}' name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
template: template:
metadata: metadata:
labels: labels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
spec: spec:
serviceAccountName: '{{ .Release.Name }}-serviceaccount' serviceAccountName: "{{ .Release.Name }}-serviceaccount"
containers: containers:
- name: '{{ .Release.Name }}' - name: "{{ .Release.Name }}"
image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}' image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
imagePullPolicy: '{{ .Values.image.pullPolicy }}' imagePullPolicy: "{{ .Values.image.pullPolicy }}"
ports: ports:
- name: http - name: http
containerPort: 7080 containerPort: 7080
@@ -34,7 +35,7 @@ spec:
name: data name: data
env: env:
- name: CODER_HTTP_ADDRESS - name: CODER_HTTP_ADDRESS
value: '0.0.0.0:7080' value: "0.0.0.0:7080"
- name: CODER_OIDC_ALLOWED_GROUPS - name: CODER_OIDC_ALLOWED_GROUPS
value: admin value: admin
- name: CODER_OIDC_GROUP_FIELD - name: CODER_OIDC_GROUP_FIELD
@@ -44,30 +45,30 @@ spec:
- name: CODER_OIDC_ICON_URL - name: CODER_OIDC_ICON_URL
value: https://authentik.olsen.cloud/static/dist/assets/icons/icon.png value: https://authentik.olsen.cloud/static/dist/assets/icons/icon.png
- name: CODER_DISABLE_PASSWORD_AUTH - name: CODER_DISABLE_PASSWORD_AUTH
value: 'true' value: "true"
- name: CODER_OAUTH2_GITHUB_ALLOW_SIGNUPS - name: CODER_OAUTH2_GITHUB_ALLOW_SIGNUPS
value: 'false' value: "false"
- name: CODER_OIDC_SIGN_IN_TEXT - name: CODER_OIDC_SIGN_IN_TEXT
value: 'Sign in with OIDC' value: "Sign in with OIDC"
- name: CODER_OIDC_SCOPES - name: CODER_OIDC_SCOPES
value: openid,profile,email,offline_access value: openid,profile,email,offline_access
- name: CODER_OIDC_ISSUER_URL - name: CODER_OIDC_ISSUER_URL
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: '{{ .Release.Name }}-client' name: "{{ .Release.Name }}-client"
key: configurationIssuer key: configurationIssuer
- name: CODER_OIDC_CLIENT_ID - name: CODER_OIDC_CLIENT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: '{{ .Release.Name }}-client' name: "{{ .Release.Name }}-client"
key: clientId key: clientId
- name: CODER_OIDC_CLIENT_SECRET - name: CODER_OIDC_CLIENT_SECRET
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: '{{ .Release.Name }}-client' name: "{{ .Release.Name }}-client"
key: clientSecret key: clientSecret
volumes: volumes:
- name: data - name: data
persistentVolumeClaim: persistentVolumeClaim:
claimName: '{{ .Release.Name }}-data' claimName: "{{ .Release.Name }}-data"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -4,8 +4,9 @@ metadata:
name: "{{ .Release.Name }}" name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -1,23 +1,24 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: '{{ .Release.Name }}' name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
template: template:
metadata: metadata:
labels: labels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
spec: spec:
containers: containers:
- name: '{{ .Release.Name }}' - name: "{{ .Release.Name }}"
image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}' image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
imagePullPolicy: '{{ .Values.image.pullPolicy }}' imagePullPolicy: "{{ .Values.image.pullPolicy }}"
ports: ports:
- name: http - name: http
containerPort: 8096 containerPort: 8096
@@ -42,7 +43,7 @@ spec:
volumes: volumes:
- name: config - name: config
persistentVolumeClaim: persistentVolumeClaim:
claimName: '{{ .Release.Name }}-config' claimName: "{{ .Release.Name }}-config"
- name: movies - name: movies
persistentVolumeClaim: persistentVolumeClaim:
claimName: movies claimName: movies

View File

@@ -6,6 +6,7 @@ metadata:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
spec: spec:
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ metadata:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
spec: spec:
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ metadata:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
spec: spec:
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
@@ -21,7 +22,6 @@ spec:
- containerPort: 3000 - containerPort: 3000
name: http name: http
env: env:
- name: MB_DB_TYPE - name: MB_DB_TYPE
value: postgres value: postgres
- name: MB_DB_DBNAME - name: MB_DB_DBNAME

View File

@@ -4,8 +4,9 @@ metadata:
name: "{{ .Release.Name }}" name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -4,8 +4,9 @@ metadata:
name: "{{ .Release.Name }}" name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
@@ -71,7 +72,7 @@ spec:
- name: MOLLY_HOST - name: MOLLY_HOST
value: 0.0.0.0 value: 0.0.0.0
- name: MOLLY_PORT - name: MOLLY_PORT
value: '8020' value: "8020"
- name: MOLLY_VAPID_KEY_FILE - name: MOLLY_VAPID_KEY_FILE
value: /data/vapid/private_key.txt value: /data/vapid/private_key.txt
- name: MOLLY_ALLOWED_ENDPOINTS - name: MOLLY_ALLOWED_ENDPOINTS

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -4,8 +4,9 @@ metadata:
name: "{{ .Release.Name }}" name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ metadata:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
spec: spec:
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
@@ -43,15 +44,15 @@ spec:
- name: NTFY_AUTH_DEFAULT_ACCESS - name: NTFY_AUTH_DEFAULT_ACCESS
value: deny-all value: deny-all
- name: NTFY_BEHIND_PROXY - name: NTFY_BEHIND_PROXY
value: 'true' value: "true"
- name: NTFY_CACHE_FILE - name: NTFY_CACHE_FILE
value: /var/lib/ntfy/cache.db value: /var/lib/ntfy/cache.db
- name: NTFY_ATTACHMENT_CACHE_DIR - name: NTFY_ATTACHMENT_CACHE_DIR
value: /var/lib/ntfy/attachments value: /var/lib/ntfy/attachments
- name: NTFY_ENABLE_LOGIN - name: NTFY_ENABLE_LOGIN
value: 'true' value: "true"
- name: NTFY_REQUIRE_LOGIN - name: NTFY_REQUIRE_LOGIN
value: 'true' value: "true"
volumeMounts: volumeMounts:
- mountPath: /var/lib/ntfy - mountPath: /var/lib/ntfy
name: data name: data

View File

@@ -1,23 +1,24 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: '{{ .Release.Name }}' name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
template: template:
metadata: metadata:
labels: labels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
spec: spec:
containers: containers:
- name: '{{ .Release.Name }}' - name: "{{ .Release.Name }}"
image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}' image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
imagePullPolicy: '{{ .Values.image.pullPolicy }}' imagePullPolicy: "{{ .Values.image.pullPolicy }}"
ports: ports:
- name: http - name: http
containerPort: 11434 containerPort: 11434
@@ -35,4 +36,4 @@ spec:
volumes: volumes:
- name: data - name: data
persistentVolumeClaim: persistentVolumeClaim:
claimName: '{{ .Release.Name }}-data' claimName: "{{ .Release.Name }}-data"

View File

@@ -1,23 +1,24 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: '{{ .Release.Name }}' name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
template: template:
metadata: metadata:
labels: labels:
app: '{{ .Release.Name }}' app: "{{ .Release.Name }}"
spec: spec:
containers: containers:
- name: '{{ .Release.Name }}' - name: "{{ .Release.Name }}"
image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}' image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
imagePullPolicy: '{{ .Values.image.pullPolicy }}' imagePullPolicy: "{{ .Values.image.pullPolicy }}"
ports: ports:
- name: http - name: http
containerPort: 8080 containerPort: 8080
@@ -33,38 +34,38 @@ spec:
name: data name: data
env: env:
- name: ENABLE_SIGNUP - name: ENABLE_SIGNUP
value: 'false' value: "false"
- name: WEBUI_URL # TODO: remove - name: WEBUI_URL # TODO: remove
value: https://openwebui.olsen.cloud value: https://openwebui.olsen.cloud
- name: ENABLE_OAUTH_PERSISTENT_CONFIG - name: ENABLE_OAUTH_PERSISTENT_CONFIG
value: 'false' value: "false"
- name: ENABLE_OAUTH_SIGNUP - name: ENABLE_OAUTH_SIGNUP
value: 'true' value: "true"
- name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
value: 'true' value: "true"
- name: OAUTH_PROVIDER_NAME - name: OAUTH_PROVIDER_NAME
value: authentik value: authentik
- name: OPENID_PROVIDER_URL - name: OPENID_PROVIDER_URL
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: '{{ .Release.Name }}-client' name: "{{ .Release.Name }}-client"
key: configuration key: configuration
- name: OAUTH_CLIENT_ID - name: OAUTH_CLIENT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: '{{ .Release.Name }}-client' name: "{{ .Release.Name }}-client"
key: clientId key: clientId
- name: OAUTH_CLIENT_SECRET - name: OAUTH_CLIENT_SECRET
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: '{{ .Release.Name }}-client' name: "{{ .Release.Name }}-client"
key: clientSecret key: clientSecret
- name: ENABLE_LOGIN_FORM - name: ENABLE_LOGIN_FORM
value: 'false' value: "false"
- name: OPENID_REDIRECT - name: OPENID_REDIRECT
value: https://openwebui.olsen.cloud/oauth/oidc/callback value: https://openwebui.olsen.cloud/oauth/oidc/callback
volumes: volumes:
- name: data - name: data
persistentVolumeClaim: persistentVolumeClaim:
claimName: '{{ .Release.Name }}-data' claimName: "{{ .Release.Name }}-data"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}-frontend" app: "{{ .Release.Name }}-frontend"
@@ -50,6 +51,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}-valkey" app: "{{ .Release.Name }}-valkey"
@@ -76,6 +78,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}-backend" app: "{{ .Release.Name }}-backend"
@@ -158,6 +161,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}-exporter" app: "{{ .Release.Name }}-exporter"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,9 @@ metadata:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
spec: spec:
replicas: 1 replicas: 1
revisionHistoryLimit: 0
strategy:
type: Recreate
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -4,8 +4,9 @@ metadata:
name: "{{ .Release.Name }}" name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -4,8 +4,9 @@ metadata:
name: "{{ .Release.Name }}" name: "{{ .Release.Name }}"
spec: spec:
strategy: strategy:
type: Recreate type: RollingUpdate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ spec:
strategy: strategy:
type: Recreate type: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0
selector: selector:
matchLabels: matchLabels:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"

View File

@@ -6,6 +6,7 @@ metadata:
app: "{{ .Release.Name }}" app: "{{ .Release.Name }}"
spec: spec:
replicas: 1 replicas: 1
revisionHistoryLimit: 0
strategy: strategy:
type: Recreate type: Recreate
selector: selector: