Story Crater Bot
8d63db9f3b
- Fix ArgoCD Application schema: move syncOptions under syncPolicy (00-secrets.yaml) - Remove helm install --wait flag (talos-cp-2 slow node timeout issue) - Add comprehensive progress logging with timestamps to bootstrap.sh - Fix SOPS key path (/Users/rockliang/.sops/key.txt, not homelab-age.key) - Add local SOPS decryption for bootstrap secrets - Add CNPG NetworkPolicy allowing app→database connectivity - Disable Forgejo bundled dependencies (saves 66Gi storage) - Inject database credentials via deployment.env (GITEA__DATABASE__*) - Remove invalid ext4 mount options from StorageClass - Add namespace manifests with PodSecurity labels - Add encrypted forgejo-admin secret (SOPS) - Reduce forgejo-db size 50Gi→25Gi per instance - Prepare ArgoCD SOPS CMP plugin (for post-bootstrap)
58 lines
1.2 KiB
YAML
58 lines
1.2 KiB
YAML
# CloudNativePG Operator Helm Values — Single Source of Truth
|
|
# Chart: https://github.com/cloudnative-pg/charts
|
|
|
|
# Basic operator configuration
|
|
replicaCount: 1
|
|
|
|
# CRDs must be installed (Helm default behavior)
|
|
crds:
|
|
create: true
|
|
|
|
# Webhook configuration
|
|
webhook:
|
|
port: 9443
|
|
mutating:
|
|
create: true
|
|
failurePolicy: Fail
|
|
validating:
|
|
create: true
|
|
failurePolicy: Fail
|
|
|
|
# Monitoring
|
|
# PodMonitor disabled during bootstrap (Prometheus CRDs not installed yet)
|
|
# Re-enable via ArgoCD after Prometheus stack is deployed
|
|
monitoring:
|
|
podMonitorEnabled: false
|
|
grafanaDashboard:
|
|
create: false # We'll manage dashboards via ArgoCD later
|
|
|
|
# Resource limits for operator
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
|
|
# Security context
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
|
|
# Tolerate control-plane taints
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
|
|
# Additional labels for ArgoCD adoption
|
|
commonLabels:
|
|
app.kubernetes.io/managed-by: Helm
|
|
argocd.argoproj.io/instance: cnpg-operator
|