113 lines
2.8 KiB
YAML
113 lines
2.8 KiB
YAML
# The upstream chart has not kept up with Ghostfolio releases. This tag-only
|
|
# override selects the current application release while retaining the latest
|
|
# chart package; remove it once a newer chart appVersion catches up.
|
|
image:
|
|
repository: ghostfolio/ghostfolio
|
|
tag: 3.89.0
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 25m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: "1"
|
|
memory: 1Gi
|
|
|
|
startupProbe:
|
|
httpGet:
|
|
path: /api/v1/health
|
|
port: http
|
|
failureThreshold: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 3
|
|
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /api/v1/health
|
|
port: http
|
|
failureThreshold: 3
|
|
periodSeconds: 10
|
|
timeoutSeconds: 3
|
|
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /api/v1/health
|
|
port: http
|
|
failureThreshold: 3
|
|
periodSeconds: 30
|
|
timeoutSeconds: 3
|
|
|
|
serviceAccount:
|
|
automount: false
|
|
|
|
ghostfolio:
|
|
# These stable placeholders only satisfy the chart-generated Secret. The
|
|
# Deployment explicitly overrides both env vars from ghostfolio-auth below.
|
|
ACCESS_TOKEN_SALT: managed-by-sealed-secrets
|
|
JWT_SECRET_KEY: managed-by-sealed-secrets
|
|
BASE_CURRENCY: EUR
|
|
existingSecret: ghostfolio-auth
|
|
existingSecretAccessTokenSaltKey: ACCESS_TOKEN_SALT
|
|
existingSecretJwtSecretKeyKey: JWT_SECRET_KEY
|
|
|
|
postgresql:
|
|
enabled: false
|
|
|
|
externalPostgresql:
|
|
host: ghostfolio-postgresql.ghostfolio.svc.cluster.local
|
|
port: 5432
|
|
auth:
|
|
username: ghostfolio
|
|
database: ghostfolio
|
|
existingSecret: ghostfolio-postgres
|
|
secretKeys:
|
|
userPasswordKey: password
|
|
options: connect_timeout=300&sslmode=disable
|
|
|
|
redis:
|
|
enabled: false
|
|
|
|
externalRedis:
|
|
host: ghostfolio-valkey.ghostfolio.svc.cluster.local
|
|
port: 6379
|
|
auth:
|
|
enabled: true
|
|
existingSecret: ghostfolio-valkey
|
|
existingSecretPasswordKey: password
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: traefik
|
|
hosts:
|
|
- host: ghostfolio.brunner.ninja
|
|
paths:
|
|
- path: /
|
|
pathType: ImplementationSpecific
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
|
|
extraManifests:
|
|
- apiVersion: monitoring.coreos.com/v1
|
|
kind: PrometheusRule
|
|
metadata:
|
|
name: ghostfolio
|
|
labels:
|
|
release: prometheus
|
|
spec:
|
|
groups:
|
|
- name: ghostfolio
|
|
rules:
|
|
- alert: GhostfolioUnavailable
|
|
expr: kube_deployment_status_replicas_available{namespace="ghostfolio", deployment="ghostfolio"} < 1
|
|
for: 5m
|
|
labels:
|
|
severity: critical
|
|
annotations:
|
|
summary: Ghostfolio has no available replicas
|
|
- alert: GhostfolioContainerRestarting
|
|
expr: increase(kube_pod_container_status_restarts_total{namespace="ghostfolio", container="ghostfolio"}[15m]) > 2
|
|
labels:
|
|
severity: warning
|
|
annotations:
|
|
summary: Ghostfolio is repeatedly restarting
|