feat: add calibre, portainer, egress-gateway, trivy-system, kyverno, olallalab
This commit is contained in:
@@ -0,0 +1,12 @@
|
||||
image:
|
||||
tag: 0.6.24
|
||||
|
||||
persistence:
|
||||
books:
|
||||
enabled: true
|
||||
accessMode: ReadWriteOnce
|
||||
size: 2Gi
|
||||
config:
|
||||
enabled: true
|
||||
accessMode: ReadWriteOnce
|
||||
size: 1Gi
|
||||
@@ -0,0 +1,85 @@
|
||||
replicaCount: 2
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 128Mi
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 32Mi
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: http
|
||||
port: 80
|
||||
targetPort: 8080
|
||||
- name: https
|
||||
port: 443
|
||||
targetPort: 8443
|
||||
- name: smtp-submission
|
||||
port: 587
|
||||
targetPort: 5870
|
||||
- name: smtps
|
||||
port: 465
|
||||
targetPort: 4650
|
||||
|
||||
networkPolicy:
|
||||
enabled: true
|
||||
allowExternal: true
|
||||
extraIngress:
|
||||
- ports:
|
||||
- port: 8443
|
||||
protocol: TCP
|
||||
- port: 5870
|
||||
protocol: TCP
|
||||
- port: 4650
|
||||
protocol: TCP
|
||||
|
||||
configuration: |
|
||||
global
|
||||
log stdout format raw local0 info
|
||||
maxconn 4096
|
||||
|
||||
defaults
|
||||
log global
|
||||
mode tcp
|
||||
option tcplog
|
||||
option dontlognull
|
||||
timeout connect 10s
|
||||
timeout client 1m
|
||||
timeout server 1m
|
||||
|
||||
# ── HTTP → NPM (192.168.1.10) ──────────────────────────────────────
|
||||
frontend fe_http
|
||||
bind *:8080
|
||||
default_backend be_npm_http
|
||||
|
||||
backend be_npm_http
|
||||
server npm 192.168.1.10:80 check
|
||||
|
||||
# ── HTTPS → NPM con SNI passthrough ────────────────────────────────
|
||||
frontend fe_https
|
||||
bind *:8443
|
||||
tcp-request inspect-delay 5s
|
||||
tcp-request content accept if { req_ssl_hello_type 1 }
|
||||
default_backend be_npm_https
|
||||
|
||||
backend be_npm_https
|
||||
server npm 192.168.1.10:443 check
|
||||
|
||||
# ── SMTP submission (587) → Mailcow ────────────────────────────────
|
||||
frontend fe_smtp_587
|
||||
bind *:5870
|
||||
default_backend be_mailcow_587
|
||||
|
||||
backend be_mailcow_587
|
||||
server mailcow 192.168.1.30:587 check
|
||||
|
||||
# ── SMTPS (465) → Mailcow ──────────────────────────────────────────
|
||||
frontend fe_smtps
|
||||
bind *:4650
|
||||
default_backend be_mailcow_465
|
||||
|
||||
backend be_mailcow_465
|
||||
server mailcow 192.168.1.30:465 check
|
||||
@@ -0,0 +1,45 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: oligo-tools
|
||||
namespace: olallalab
|
||||
labels:
|
||||
app: oligo-tools
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: oligo-tools
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: oligo-tools
|
||||
spec:
|
||||
containers:
|
||||
- name: oligo-tools
|
||||
image: alexandrev/oligo-tools:20231223
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
name: http
|
||||
resources:
|
||||
limits:
|
||||
cpu: 1000m
|
||||
memory: 512Mi
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 8080
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 20
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
startupProbe:
|
||||
tcpSocket:
|
||||
port: 8080
|
||||
failureThreshold: 1
|
||||
periodSeconds: 240
|
||||
timeoutSeconds: 240
|
||||
@@ -0,0 +1,42 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: oligo-tools-ingress
|
||||
namespace: olallalab
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
spec:
|
||||
ingressClassName: public
|
||||
rules:
|
||||
- host: oligo-tools.alexandre-vazquez.cloud
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: oligo-tools
|
||||
port:
|
||||
number: 80
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: oligo-tools-ingress-internal
|
||||
namespace: olallalab
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
external-dns.alpha.kubernetes.io/hostname: oligo-tools.alexandre-vazquez.internal
|
||||
spec:
|
||||
ingressClassName: public
|
||||
rules:
|
||||
- host: oligo-tools.alexandre-vazquez.internal
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: oligo-tools
|
||||
port:
|
||||
number: 80
|
||||
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: olallalab
|
||||
@@ -0,0 +1,13 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: oligo-tools
|
||||
namespace: olallalab
|
||||
labels:
|
||||
app: oligo-tools
|
||||
spec:
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 8080
|
||||
selector:
|
||||
app: oligo-tools
|
||||
@@ -0,0 +1,25 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: calibre
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
sources:
|
||||
- repoURL: https://k8s-home-lab.github.io/helm-charts/
|
||||
chart: calibre-web
|
||||
targetRevision: 9.0.2
|
||||
helm:
|
||||
releaseName: calibre-web
|
||||
valueFiles:
|
||||
- $values/apps/calibre/values.yaml
|
||||
- repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
|
||||
targetRevision: HEAD
|
||||
ref: values
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: calibre
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
@@ -0,0 +1,25 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: egress-gateway
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
sources:
|
||||
- repoURL: https://charts.bitnami.com/bitnami
|
||||
chart: haproxy
|
||||
targetRevision: 3.4.12
|
||||
helm:
|
||||
releaseName: egress-gateway
|
||||
valueFiles:
|
||||
- $values/apps/egress-gateway/values.yaml
|
||||
- repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
|
||||
targetRevision: HEAD
|
||||
ref: values
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: egress-gateway
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
@@ -0,0 +1,20 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: kyverno
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://kyverno.github.io/kyverno/
|
||||
chart: kyverno
|
||||
targetRevision: 3.x
|
||||
helm:
|
||||
releaseName: kyverno
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: kyverno
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
@@ -0,0 +1,18 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: olallalab
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
|
||||
targetRevision: HEAD
|
||||
path: apps/olallalab
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: olallalab
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
@@ -0,0 +1,20 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: portainer
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://portainer.github.io/k8s/
|
||||
chart: portainer
|
||||
targetRevision: 1.0.51
|
||||
helm:
|
||||
releaseName: portainer
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: portainer
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
@@ -0,0 +1,20 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: trivy-system
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://aquasecurity.github.io/helm-charts/
|
||||
chart: trivy-operator
|
||||
targetRevision: 0.18.4
|
||||
helm:
|
||||
releaseName: trivy-operator
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: trivy-system
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
Reference in New Issue
Block a user