Stage Argo apps for next five services

2026-10-19 08:43:11 +02:00
parent f6f85fd213
commit 7a46ee8d0b
11 changed files with 205 additions and 0 deletions
@@ -0,0 +1,13 @@
+origin: https://30.brunner.ninja
+trustAuthentik: true
+secrets:
+  invitation: 30-birthday-invitation
+
+persistence:
+  existingClaim: 30-birthday-data
+
+ingress:
+  enabled: true
+  host: 30.brunner.ninja
+  ingressClassName: traefik
+  tlsSecretName: brunner-ninja-tls
@@ -0,0 +1 @@
+kubeletInsecureTls: true
@@ -0,0 +1,6 @@
+existingConfigSecret: mktxp-credentials
+
+serviceMonitor:
+  enabled: true
+  labels:
+    release: prometheus
@@ -0,0 +1,22 @@
+ingress:
+  enabled: true
+  host: phppgadmin.brunner.ninja
+  ingressClassName: traefik
+  entrypoints: websecure
+
+servers:
+  - description: arschrock
+    host: arschrock
+    port: 5432
+    sslmode: allow
+    defaultdb: template1
+  - description: nextcloud-postgresql.nextcloud.svc.cluster.local
+    host: nextcloud-postgresql.nextcloud.svc.cluster.local
+  - description: postgresql.default.svc.cluster.local
+    host: postgresql.default.svc.cluster.local
+  - description: postgresql.authentik.svc.cluster.local
+    host: postgresql.authentik.svc.cluster.local
+  - description: postgresql.gramps.svc.cluster.local
+    host: postgresql.gramps.svc.cluster.local
+  - description: postgresql.matrix.svc.cluster.local
+    host: postgresql.matrix.svc.cluster.local
@@ -0,0 +1,29 @@
+fullnameOverride: traefik-error-pages
+
+branding:
+  reverseProxyName: brunner.ninja Reverse Proxy
+  authenticationName: brunner.ninja Auth
+  clusterReachedText: The request reached the basement cluster
+
+auth:
+  enabled: true
+  marker: authentik
+  contextMiddlewareName: authentik-error-context
+  forwardMiddlewareName: authentik-forward
+  checkedMiddlewareName: authentik-error-checked
+  chainMiddlewareName: authentik
+  forwardAddress: http://authentik-server.authentik.svc.cluster.local/outpost.goauthentik.io/auth/traefik
+  trustForwardHeader: true
+  responseHeaders:
+    - X-authentik-username
+    - X-authentik-groups
+    - X-authentik-entitlements
+    - X-authentik-email
+    - X-authentik-name
+    - X-authentik-uid
+    - X-authentik-jwt
+    - X-authentik-meta-jwks
+    - X-authentik-meta-outpost
+    - X-authentik-meta-provider
+    - X-authentik-meta-app
+    - X-authentik-meta-version
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: 30-birthday
+  namespace: argocd
+spec:
+  project: homelab
+  sources:
+  - repoURL: https://brunner.ninja/charts
+    chart: 30-birthday
+    targetRevision: 0.0.0
+    helm:
+      releaseName: 30-birthday
+      valueFiles:
+      - $values/apps/30-birthday/values.yaml
+  - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: metrics-server
+  namespace: argocd
+spec:
+  description: Metrics Server and the aggregated metrics API
+  sourceRepos:
+  - https://brunner.ninja/charts
+  - https://code.brunner.ninja/feedc0de/homelab-gitops.git
+  destinations:
+  - namespace: kube-system
+    server: https://kubernetes.default.svc
+  clusterResourceWhitelist:
+  - group: apiregistration.k8s.io
+    kind: APIService
+  - group: rbac.authorization.k8s.io
+    kind: ClusterRole
+  - group: rbac.authorization.k8s.io
+    kind: ClusterRoleBinding
+  namespaceResourceWhitelist:
+  - group: ""
+    kind: Service
+  - group: ""
+    kind: ServiceAccount
+  - group: apps
+    kind: Deployment
+  - group: rbac.authorization.k8s.io
+    kind: RoleBinding
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: metrics-server
+  namespace: argocd
+spec:
+  project: metrics-server
+  sources:
+  - repoURL: https://brunner.ninja/charts
+    chart: metrics-server
+    targetRevision: 0.0.0
+    helm:
+      releaseName: metrics-server
+      valueFiles:
+      - $values/apps/metrics-server/values.yaml
+  - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: kube-system
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: mktxp
+  namespace: argocd
+spec:
+  project: homelab
+  sources:
+  - repoURL: https://brunner.ninja/charts
+    chart: mktxp
+    targetRevision: 0.0.0
+    helm:
+      releaseName: mktxp
+      valueFiles:
+      - $values/apps/mktxp/values.yaml
+  - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: phppgadmin
+  namespace: argocd
+spec:
+  project: homelab
+  sources:
+  - repoURL: https://brunner.ninja/charts
+    chart: phppgadmin
+    targetRevision: 0.0.0
+    helm:
+      releaseName: phppgadmin
+      valueFiles:
+      - $values/apps/phppgadmin/values.yaml
+  - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: traefik-error-pages
+  namespace: argocd
+spec:
+  project: homelab
+  sources:
+  - repoURL: https://brunner.ninja/charts
+    chart: traefik-error-pages
+    targetRevision: 0.0.0
+    helm:
+      releaseName: traefik-error-pages
+      valueFiles:
+      - $values/apps/traefik-error-pages/values.yaml
+  - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default