mirror of https://github.com/nold360/heqet.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
119 lines
2.8 KiB
119 lines
2.8 KiB
# Install Custom Ressource Definitions? |
|
installCRDs: false |
|
|
|
# Default values that are used for creating ArgoCD `Application` definitions |
|
defaults: |
|
project: "default" |
|
repoURL: https://github.com/nold360/heqet |
|
targetRevision: k3s |
|
server: https://kubernetes.default.svc |
|
automated: |
|
prune: true |
|
selfHeal: false |
|
domain: k3s |
|
|
|
# Heqet Functions / Injectors: |
|
generators: |
|
# Ingress & Cert Manager TLS Injector |
|
ingress: |
|
enabled: true |
|
|
|
# ACME / Letsencrypt Injector |
|
acme: |
|
enabled: false |
|
|
|
## Default: https://acme-staging-v02.api.letsencrypt.org/directory |
|
## Change to 'https://acme-v02.api.letsencrypt.org/directory' for real/trusted LE Certs |
|
#server: https://acme-v02.api.letsencrypt.org/directory |
|
email: [email protected] |
|
|
|
# Vault Secret Injector |
|
vault: true |
|
|
|
# App Definitions that will be managed in ArgoCD |
|
apps: |
|
# Heqet |
|
- name: heqet |
|
path: . |
|
syncWave: "-1" |
|
noValues: true |
|
targetRevision: k3s |
|
vhost: hqt.k3s |
|
|
|
# ArgoCD - Continous Deployment from Git |
|
- name: argocd |
|
repoURL: https://argoproj.github.io/argo-helm |
|
chart: argo-cd |
|
targetRevision: 3.1.1 |
|
vhost: argocd.k3s |
|
ingress: server |
|
syncWave: "0" |
|
secrets: |
|
- name: argocd-secret |
|
keys: |
|
- admin.password |
|
- server.secretkey |
|
|
|
# Vault |
|
- name: vault |
|
repoURL: https://helm.releases.hashicorp.com |
|
chart: vault |
|
targetRevision: 0.10.0 |
|
vhost: vault.k3s |
|
ingressHostsKeymap: true |
|
ingress: server |
|
syncWave: "-3" |
|
parameters: |
|
- name: ui.enabled |
|
value: true |
|
- name: global.psp.enabled |
|
value: true |
|
- name: server.networkPolicy.enabled |
|
value: true |
|
- name: server.dev.enabled |
|
value: true |
|
|
|
# Vault Secret Operator for automatic Secret injection |
|
- name: vault-secrets-operator |
|
repoURL: https://ricoberger.github.io/helm-charts |
|
chart: vault-secrets-operator |
|
targetRevision: 1.14.2 |
|
syncWave: "-2" |
|
|
|
# Loki / Grafana / Promtail Stack for Logging & Metrics |
|
- name: loki-stack |
|
disabled: false |
|
repoURL: https://grafana.github.io/helm-charts |
|
chart: loki-stack |
|
targetRevision: 2.3.1 |
|
vhost: grafana.k3s |
|
ingress: grafana |
|
|
|
# PiHole |
|
- name: pihole |
|
repoURL: https://mojo2600.github.io/pihole-kubernetes |
|
chart: pihole |
|
targetRevision: 1.8.34 |
|
|
|
- name: folding |
|
repoURL: https://pcktdmp.github.io/charts |
|
chart: fahclient |
|
targetRevision: 2.5.5 |
|
parameters: |
|
- name: fahClient.user |
|
value: nold |
|
- name: fahClient.team |
|
value: 236833 |
|
- name: ingress.hosts0.host |
|
value: folding.k3s |
|
- name: ingess.enabled |
|
value: true |
|
|
|
# Polaris - Scan cluster for stuff |
|
- name: polaris |
|
repoURL: https://charts.fairwinds.com/stable |
|
chart: polaris |
|
targetRevision: 3.1.1 |
|
ingress: dashboard |
|
namespace: polaris |
|
vhost: polaris.k3s
|
|
|