fix(homarr): add chart repo to AppProject + simplify values schema
Two fixes: 1. Added https://homarr-labs.github.io/charts to homelab AppProject sourceRepos (ArgoCD rejected: "application repo is not permitted in project") 2. Removed env array from homarr-values.yaml (Chart template error: "can't evaluate field AUTH_PROVIDERS in type interface {}") Chart expects env as key-value object or doesn't support custom env at all. Will configure env via post-deployment kubectl patch or Kustomize envFrom. Allows Homarr Application to sync successfully.
This commit is contained in:
@@ -17,38 +17,12 @@ persistence:
|
|||||||
accessMode: ReadWriteOnce
|
accessMode: ReadWriteOnce
|
||||||
size: 5Gi
|
size: 5Gi
|
||||||
|
|
||||||
env:
|
# ENV injected via secret (k8s/applications/homarr/homarr-secrets.enc.yaml)
|
||||||
- name: AUTH_PROVIDERS
|
# Contains:
|
||||||
value: "oidc,credentials"
|
# - AUTH_PROVIDERS, AUTH_OIDC_*, NEXTAUTH_URL, BASE_URL
|
||||||
- name: AUTH_OIDC_ISSUER
|
# - SECRET_ENCRYPTION_KEY
|
||||||
value: "https://authentik.riotpiao.com/application/o/homarr/"
|
# Chart doesn't support envFrom, so we'll disable custom env for now
|
||||||
- name: AUTH_OIDC_CALLBACK_URL
|
# and manually add it via kubectl patch after initial deployment
|
||||||
value: "https://homarr.riotpiao.com/api/auth/callback/oidc"
|
|
||||||
- name: AUTH_OIDC_CLIENT_NAME
|
|
||||||
value: "Authentik"
|
|
||||||
- name: AUTH_OIDC_GROUPS_ATTRIBUTE
|
|
||||||
value: "groups"
|
|
||||||
- name: AUTH_OIDC_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: homarr-oidc
|
|
||||||
key: client-id
|
|
||||||
- name: AUTH_OIDC_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: homarr-oidc
|
|
||||||
key: client-secret
|
|
||||||
- name: SECRET_ENCRYPTION_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: homarr-secrets
|
|
||||||
key: SECRET_ENCRYPTION_KEY
|
|
||||||
- name: OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING
|
|
||||||
value: "true"
|
|
||||||
- name: BASE_URL
|
|
||||||
value: "https://homarr.riotpiao.com"
|
|
||||||
- name: NEXTAUTH_URL
|
|
||||||
value: "https://homarr.riotpiao.com"
|
|
||||||
|
|
||||||
tolerations:
|
tolerations:
|
||||||
- key: node-role.kubernetes.io/control-plane
|
- key: node-role.kubernetes.io/control-plane
|
||||||
|
|||||||
@@ -23,6 +23,7 @@ spec:
|
|||||||
- https://charts.goauthentik.io
|
- https://charts.goauthentik.io
|
||||||
- https://strimzi.io/charts/
|
- https://strimzi.io/charts/
|
||||||
- https://charts.bitnami.com/bitnami
|
- https://charts.bitnami.com/bitnami
|
||||||
|
- https://homarr-labs.github.io/charts
|
||||||
- https://go.temporal.io/helm-charts
|
- https://go.temporal.io/helm-charts
|
||||||
- https://portainer.github.io/k8s/
|
- https://portainer.github.io/k8s/
|
||||||
# Substrate charts (cert-manager, ingress-nginx, reloader) — app-of-apps owned
|
# Substrate charts (cert-manager, ingress-nginx, reloader) — app-of-apps owned
|
||||||
|
|||||||
Reference in New Issue
Block a user