s0wlz (Matthias Puchstein)
03a1e70df3
Some checks failed
Release / release (push) Failing after 56s
- httproute.yaml: name=default namespace=nginx-gateway (was: itsh-gateway, no namespace) - httproute.yaml: add cert-manager.io/cluster-issuer annotation for TLS cert issuance - httproute.yaml: parameterise sectionNames and parentRefs through values - deployment.yaml: render imagePullSecrets from values (itsh-registry pull secret) - values.yaml: add parentRefs, annotations, httpRedirectSectionName, imagePullSecrets
63 lines
1.1 KiB
YAML
63 lines
1.1 KiB
YAML
replicaCount: 1
|
|
|
|
image:
|
|
repository: registry.itsh.dev/s0wlz/tutortool
|
|
pullPolicy: IfNotPresent
|
|
tag: latest
|
|
|
|
serviceAccount:
|
|
create: true
|
|
name: ""
|
|
|
|
service:
|
|
port: 80
|
|
targetPort: 3000
|
|
|
|
containerPort: 3000
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
|
|
pvc:
|
|
storageClassName: hcloud-volumes
|
|
storage: 1Gi
|
|
|
|
imagePullSecrets:
|
|
- name: itsh-registry
|
|
|
|
httpRoute:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
parentRefs:
|
|
- name: default
|
|
namespace: nginx-gateway
|
|
hostnames:
|
|
- tutor.puchstein.dev
|
|
sectionName: https-tutor-puchstein-dev
|
|
httpRedirectSectionName: http-tutor-puchstein-dev
|
|
|
|
# JWT_SECRET provisioned as a pre-existing K8s Secret named here.
|
|
# Do not set jwtSecretValue in committed values — provision via kubectl manually.
|
|
jwtSecretName: tutortool-jwt
|
|
|
|
env:
|
|
DATABASE_URL: sqlite:/data/attendance.db
|
|
STATIC_DIR: /app/frontend/build
|
|
|
|
vpa:
|
|
enabled: false
|
|
updateMode: "Off"
|
|
containerPolicies:
|
|
- containerName: app
|
|
minAllowed:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
maxAllowed:
|
|
cpu: 1000m
|
|
memory: 512Mi
|