root-at-skic
e2adb79e2d
A Copier template for deploying Archify Sync with Argo CD: an app-of-apps, the server's Helm chart and its values, optional secrets through External Secrets and an optional static NFS volume for PostgreSQL.
58 lines
2.2 KiB
YAML
58 lines
2.2 KiB
YAML
# An example environment. Copy to your environment repository's
|
|
# cluster/copier-answers.yml on the first render (task render:first), then
|
|
# change values there and run `task render` (copier update).
|
|
argocd:
|
|
namespace: argocd
|
|
project: default
|
|
destination_server: https://kubernetes.default.svc
|
|
# The environment repository Argo CD reads (this template renders into it).
|
|
repo_url: https://git.example.com/you/archify-sync-gitops.git
|
|
target_revision: HEAD
|
|
|
|
archify_sync:
|
|
is_enabled: true
|
|
namespace: archify-sync
|
|
# The Helm chart lives in the server repository.
|
|
chart_repo: https://gitea.lego-cloud.eu/vscode-extensions/archify-vscode-ext-sync.git
|
|
chart_path: charts/archify-sync
|
|
chart_revision: main
|
|
image:
|
|
# Built from the server repository's Dockerfile and pushed to your registry.
|
|
repository: registry.example.com/archify-sync
|
|
tag: "0.1.4"
|
|
# For a private registry: the name of an image pull Secret in the namespace.
|
|
# pull_secret: archify-sync-image-pull
|
|
host: archify.example.com
|
|
ingress_class: nginx
|
|
database:
|
|
size: 8Gi
|
|
# The cluster's default storage class when unset. It must keep file owners:
|
|
# PostgreSQL refuses a data directory that maps every user to root.
|
|
# storage_class: standard
|
|
# Or a static NFS volume, an export owned by uid 70, mode 0700:
|
|
# nfs_server: 10.0.0.10
|
|
# nfs_path: /exports/archify-sync-database
|
|
oidc:
|
|
is_enabled: true
|
|
issuer: https://sso.example.com/realms/home
|
|
client_id: archify-sync
|
|
label: Keycloak
|
|
allowed_groups: [archify-users]
|
|
admin_groups: [archify-admins]
|
|
members_can_invite: false
|
|
metrics:
|
|
is_enabled: true
|
|
service_monitor: false
|
|
# Without external_secrets, create Secret archify-sync-secrets yourself (see
|
|
# README). With External Secrets installed, name the store and its entries:
|
|
# external_secrets:
|
|
# store: vault
|
|
# store_kind: ClusterSecretStore
|
|
# postgres_password_key: archify-sync-postgres-password
|
|
# oidc_client_secret_key: archify-sync-oidc-client-secret
|
|
# # And the image pull secret for a private registry (needs image.pull_secret):
|
|
# image_pull:
|
|
# registry: registry.example.com
|
|
# username: archify-pull
|
|
# password_key: archify-sync-registry-password
|