tegwick
e9ee577d03
Adopt live Core Hub resources, align prod ConfigMap naming, default production image registry to gitea, and install Helm release core-hub rev 1 (smoke passed). Add apps-pg-backup and check-backup-lane-auth targets; document OIDC login requirement now that OpenBao is unsealed.
64 lines
No EOL
1.1 KiB
YAML
64 lines
No EOL
1.1 KiB
YAML
nameOverride: core-hub-api
|
|
|
|
image:
|
|
repository: forgejo.coulomb.social/coulomb/core-hub
|
|
tag: ""
|
|
pullPolicy: IfNotPresent
|
|
|
|
replicaCount: 1
|
|
|
|
runtime:
|
|
coreHubEnv: production
|
|
autoCreateTables: "0"
|
|
configMapName: ""
|
|
|
|
envSecretName: core-hub-prod-env
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8010
|
|
targetPort: 8010
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
|
|
probes:
|
|
liveness:
|
|
path: /healthz
|
|
initialDelaySeconds: 15
|
|
periodSeconds: 20
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
readiness:
|
|
path: /readyz
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
|
|
migration:
|
|
enabled: false
|
|
jobName: core-hub-migrate
|
|
backoffLimit: 1
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: traefik
|
|
host: hub.coulomb.social
|
|
tls: true
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
|
|
podSecurityContext: {}
|
|
securityContext: {}
|
|
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
affinity: {} |