Aleksandr BogomiakovandClaude
ff4e87aca0
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 1m19s
Co-Authored-By: Claude <noreply@anthropic.com>
66 lines
2.3 KiB
YAML
66 lines
2.3 KiB
YAML
# Per-cluster variables. Override them in k8s-ng/bootstrap/root.yaml
|
|
# (spec.source.helm.valuesObject) when the state is deployed to another cluster.
|
|
repoURL: https://gt.hexor.cy/ab/homelab.git
|
|
targetRevision: main
|
|
destinationServer: https://kubernetes.default.svc
|
|
project: core
|
|
|
|
# Core applications. Lower waves are synced first and must be Healthy before the
|
|
# next wave starts. Every path is a kustomize (or plain manifest) directory.
|
|
# wave 0: Argo CD itself and its projects
|
|
# wave 1: operators (their CRDs are used by the later waves)
|
|
# wave 2: the database cluster and its databases/users
|
|
# wave 3: services that need the database and secrets
|
|
apps:
|
|
- name: argocd
|
|
path: k8s-ng/core/argocd
|
|
namespace: argocd
|
|
wave: 0
|
|
- name: cnpg
|
|
path: k8s-ng/core/cnpg
|
|
namespace: cnpg-system
|
|
wave: 1
|
|
- name: traefik-config
|
|
path: k8s-ng/core/traefik-config
|
|
namespace: kube-system
|
|
wave: 1
|
|
- name: reloader
|
|
path: k8s-ng/core/reloader
|
|
namespace: reloader
|
|
wave: 1
|
|
- name: cert-manager
|
|
path: k8s-ng/core/cert-manager
|
|
namespace: cert-manager
|
|
wave: 1
|
|
skipDryRunOnMissingResource: true # ClusterIssuers need the cert-manager CRDs
|
|
- name: external-secrets
|
|
path: k8s-ng/core/external-secrets
|
|
namespace: external-secrets
|
|
wave: 1
|
|
- name: postgresql
|
|
path: k8s-ng/core/postgresql
|
|
namespace: psql
|
|
wave: 2
|
|
prune: false # never delete databases because of a manifest change
|
|
skipDryRunOnMissingResource: true # CRDs come from the cnpg and external-secrets apps
|
|
- name: vaultwarden
|
|
path: k8s-ng/core/vaultwarden
|
|
namespace: vaultwarden
|
|
wave: 3
|
|
skipDryRunOnMissingResource: true
|
|
- name: keycloak
|
|
path: k8s-ng/core/keycloak
|
|
namespace: keycloak
|
|
wave: 3
|
|
skipDryRunOnMissingResource: true # ExternalSecret/Certificate CRDs come from earlier waves
|
|
- name: furumi
|
|
path: k8s-ng/core/furumi
|
|
namespace: furumi
|
|
wave: 5 # pinned to the music node; must not hold back the other waves
|
|
skipDryRunOnMissingResource: true
|
|
- name: secret-stores
|
|
path: k8s-ng/core/secret-stores
|
|
namespace: external-secrets
|
|
wave: 4 # reads the Vaultwarden vault, so it comes after vaultwarden
|
|
skipDryRunOnMissingResource: true # ClusterSecretStore CRD comes from the external-secrets app
|