Added firefly-iii

2026-07-30 12:18:12 +01:00
parent 719504a399
commit 69186d807e
8 changed files with 555 additions and 0 deletions
@@ -0,0 +1,75 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - app.yaml
+  - external-secrets.yaml
+  - postgres.yaml
+  - storage.yaml
+  - traefik-ai.yaml
+  - network-policy.yaml
+
+helmCharts:
+  - name: firefly-iii
+    repo: https://harish2k01.github.io/helm-charts
+    version: 0.1.2
+    releaseName: firefly-iii
+    namespace: firefly-iii
+    valuesFile: values.yaml
+    includeCRDs: true
+
+patches:
+  # Chart 0.1.2 requires postgres.enabled=true. Remove its StatefulSet and
+  # redirect the generated database Service to the CloudNativePG primary.
+  - target:
+      group: apps
+      version: v1
+      kind: StatefulSet
+      name: firefly-iii-postgres
+    patch: |-
+      $patch: delete
+      apiVersion: apps/v1
+      kind: StatefulSet
+      metadata:
+        name: firefly-iii-postgres
+  - target:
+      version: v1
+      kind: Service
+      name: firefly-iii-postgres
+    patch: |-
+      - op: remove
+        path: /spec/selector
+      - op: replace
+        path: /spec/type
+        value: ExternalName
+      - op: add
+        path: /spec/externalName
+        value: firefly-postgres-rw.firefly-iii.svc.cluster.local
+  # The upstream chart does not expose scheduling settings for its CronJob.
+  - target:
+      group: batch
+      version: v1
+      kind: CronJob
+      name: firefly-iii-cron
+    patch: |-
+      - op: add
+        path: /spec/jobTemplate/spec/template/spec/nodeSelector
+        value:
+          kubernetes.io/hostname: ai.tail2fe2d.ts.net
+      - op: add
+        path: /spec/jobTemplate/spec/template/spec/tolerations
+        value:
+          - key: workload
+            operator: Equal
+            value: ai
+            effect: NoSchedule
+  # A second independent filter in addition to ingressClassName.
+  - target:
+      group: networking.k8s.io
+      version: v1
+      kind: Ingress
+      name: firefly-iii
+    patch: |-
+      - op: add
+        path: /metadata/labels/firefly.hexor.cy~1private-ai
+        value: "true"