Skip to content

Commit ba8f7ab

Browse files
steledsteled
authored
Merge pull request #53 from steled/v0.10
moving helm values files to separate folder
2 parents 7cfc190 + fda55e3 commit ba8f7ab

16 files changed

+779
-7
lines changed

‎authentik.tf

+1
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@
1212
# authentik_bootstrap_password = var.authentik_bootstrap_password
1313
# authentik_bootstrap_token = var.authentik_bootstrap_token
1414
# authentik_bootstrap_email = var.authentik_bootstrap_email
15+
# values_yaml = "${path.root}/helm-values/authentik.yaml"
1516

1617
# depends_on = [module.cert_manager_cloudflare]
1718
# }

‎hashicorp-vault.tf

+1
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@
1111
# hashicorp_vault_domain = var.hashicorp_vault_domain
1212
# environment = var.hashicorp_vault_env
1313
# ip_address = var.hashicorp_vault_ip_address
14+
# values_yaml = "${path.root}/helm-values/hashicorp-vault.yaml"
1415

1516
# depends_on = [module.cert_manager_cloudflare]
1617
# }

‎helm-values/authentik.yaml

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
worker:
2+
envFrom:
3+
- secretRef:
4+
name: authentik-secret
5+
6+
authentik:
7+
secret_key: "${authentik_secret_key}"
8+
9+
postgresql:
10+
password: "${postgresql_password}"
11+
12+
server:
13+
ingress:
14+
enabled: true
15+
annotations:
16+
cert-manager.io/cluster-issuer: cloudflare-letsencrypt-${environment}
17+
ingress.cilium.io/loadbalancer-mode: shared
18+
ingressClassName: cilium
19+
hosts: ${authentik_domains}
20+
tls:
21+
- secretName: authentik-tls
22+
hosts: ${authentik_domains}
23+
https: false
24+
25+
postgresql:
26+
enabled: true
27+
auth:
28+
password: "${postgresql_password}"
29+
primary:
30+
persistence:
31+
enabled: true
32+
storageClass: longhorn
33+
34+
redis:
35+
enabled: true

‎helm-values/hasicorp-vault.yaml

+53
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
global:
2+
tlsDisable: false
3+
4+
server:
5+
# extraEnvironmentVars:
6+
# VAULT_CACERT: /vault/userconfig/vault-server-tls/ca.crt
7+
# VAULT_ADDR: http://127.0.0.1:8200
8+
# hostAliases:
9+
# - ip: 127.0.0.1
10+
# hostnames:
11+
# - ${hashicorp_vault_domain}
12+
ingress:
13+
enabled: true
14+
activeService: false
15+
annotations:
16+
cert-manager.io/cluster-issuer: cloudflare-letsencrypt-${environment}
17+
ingress.cilium.io/loadbalancer-mode: dedicated
18+
lbipam.cilium.io/ips: ${ip_address}
19+
hosts:
20+
- host: ${hashicorp_vault_domain}
21+
paths:
22+
- /
23+
ingressClassName: cilium
24+
tls:
25+
- secretName: hashicorp-vault-tls
26+
hosts:
27+
- ${hashicorp_vault_domain}
28+
# standalone:
29+
# config: |-
30+
# ui = true
31+
# listener "tcp" {
32+
# address = "[::]:8200"
33+
# cluster_address = "[::]:8201"
34+
# }
35+
# storage "file" {
36+
# path = "/vault/data"
37+
# }
38+
# volumes:
39+
# - name: userconfig-vault-server-tls
40+
# secret:
41+
# defaultMode: 420
42+
# secretName: hashicorp-vault-tls
43+
# # secretName: hashicorp-vault-server-tls
44+
# volumeMounts:
45+
# - mountPath: /vault/userconfig/vault-server-tls
46+
# name: userconfig-vault-server-tls
47+
# readOnly: true
48+
49+
ui:
50+
enabled: true
51+
# annotations:
52+
# "lbipam.cilium.io/ips": ${ip_address}
53+
# serviceType: "LoadBalancer"

‎helm-values/longhorn.yaml

+27
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
persistence:
2+
defaultClassReplicaCount: 1
3+
migratable: true
4+
5+
csi:
6+
attacherReplicaCount: 1
7+
provisionerReplicaCount: 1
8+
resizerReplicaCount: 1
9+
snapshotterReplicaCount: 1
10+
11+
defaultSettings:
12+
defaultReplicaCount: 1
13+
orphanAutoDeletion: true
14+
15+
longhornUI:
16+
replicas: 1
17+
18+
ingress:
19+
enabled: true
20+
ingressClassName: cilium
21+
host: ${domain}
22+
tls: true
23+
tlsSecret: longhorn-tls
24+
pathType: Prefix
25+
annotations:
26+
cert-manager.io/cluster-issuer: cloudflare-letsencrypt-${environment}
27+
ingress.cilium.io/loadbalancer-mode: shared

‎helm-values/minio.yaml

+50
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
mode: standalone
2+
existingSecret: minio-secret
3+
replicas: 1
4+
5+
tlsSecret:
6+
enabled: true
7+
certSecret: minio-tls
8+
publicCrt: tls.crt
9+
privateKey: tls.key
10+
11+
persistence:
12+
storageClass: longhorn
13+
size: 50Gi
14+
15+
ingress:
16+
enabled: true
17+
ingressClassName: cilium
18+
annotations:
19+
cert-manager.io/cluster-issuer: cloudflare-letsencrypt-${environment}
20+
ingress.cilium.io/loadbalancer-mode: shared
21+
hosts: ${ingress_domains}
22+
tls:
23+
- secretName: minio-tls
24+
hosts: ${ingress_domains}
25+
26+
consoleIngress:
27+
enabled: true
28+
ingressClassName: cilium
29+
annotations:
30+
cert-manager.io/cluster-issuer: cloudflare-letsencrypt-${environment}
31+
hosts: ${console_ingress_domains}
32+
tls:
33+
- secretName: minio-tls
34+
hosts: ${console_ingress_domains}
35+
36+
resources:
37+
requests:
38+
memory: 2Gi
39+
40+
users:
41+
- existingSecret: minio-secret
42+
accessKey: ${user1_name}
43+
existingSecretKey: user1_password
44+
policy: ${user1_policy}
45+
46+
svcaccts:
47+
- existingSecret: minio-secret
48+
user: ${user1_name}
49+
accessKey: ${user1_accessKey}
50+
existingSecretKey: user1_secretKey

0 commit comments

Comments
 (0)