remove old filesync deployments (nextcloud)
This commit is contained in:
@@ -1,5 +0,0 @@
|
|||||||
### Runninf `occ` commands:
|
|
||||||
|
|
||||||
```
|
|
||||||
su -s /bin/bash www-data -c "php occ user:list"
|
|
||||||
```
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: traefik.io/v1alpha1
|
|
||||||
kind: IngressRoute
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-ingressroute
|
|
||||||
|
|
||||||
spec:
|
|
||||||
entryPoints:
|
|
||||||
- websecure
|
|
||||||
routes:
|
|
||||||
- match: Host(`nextcloud.kluster.moll.re`)
|
|
||||||
kind: Rule
|
|
||||||
services:
|
|
||||||
- name: nextcloud
|
|
||||||
port: 8080
|
|
||||||
tls:
|
|
||||||
certResolver: default-tls
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- namespace.yaml
|
|
||||||
- ingress.yaml
|
|
||||||
- pvc.yaml
|
|
||||||
- postgres.sealedsecret.yaml
|
|
||||||
|
|
||||||
namespace: nextcloud
|
|
||||||
|
|
||||||
helmCharts:
|
|
||||||
- name: nextcloud
|
|
||||||
releaseName: nextcloud
|
|
||||||
version: 4.5.5
|
|
||||||
valuesFile: values.yaml
|
|
||||||
repo: https://nextcloud.github.io/helm/
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: placeholder
|
|
||||||
@@ -1,22 +0,0 @@
|
|||||||
{
|
|
||||||
"kind": "SealedSecret",
|
|
||||||
"apiVersion": "bitnami.com/v1alpha1",
|
|
||||||
"metadata": {
|
|
||||||
"name": "postgres-password",
|
|
||||||
"namespace": "nextcloud",
|
|
||||||
"creationTimestamp": null
|
|
||||||
},
|
|
||||||
"spec": {
|
|
||||||
"template": {
|
|
||||||
"metadata": {
|
|
||||||
"name": "postgres-password",
|
|
||||||
"namespace": "nextcloud",
|
|
||||||
"creationTimestamp": null
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"encryptedData": {
|
|
||||||
"password": "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",
|
|
||||||
"username": "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"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,25 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-nfs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "150Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /kluster/nextcloud
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-nfs
|
|
||||||
spec:
|
|
||||||
storageClassName: ""
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: "150Gi"
|
|
||||||
volumeName: nextcloud-nfs
|
|
||||||
@@ -1,17 +0,0 @@
|
|||||||
## Running occ commands
|
|
||||||
|
|
||||||
Sometimes you need to run a command on the Nextcloud container directly. You can do that by running commands as the user www-data via the kubectl exec command.
|
|
||||||
```
|
|
||||||
# $NEXTCLOUD_POD should be the name of *your* nextcloud pod :)
|
|
||||||
kubectl exec $NEXTCLOUD_POD -- su -s /bin/sh www-data -c "php occ myocccomand"
|
|
||||||
```
|
|
||||||
Here are some examples below.
|
|
||||||
Putting Nextcloud into maintanence mode
|
|
||||||
|
|
||||||
Some admin actions require you to put your Nextcloud instance into
|
|
||||||
|
|
||||||
(e.g. backups):
|
|
||||||
```
|
|
||||||
# $NEXTCLOUD_POD should be the name of *your* nextcloud pod :)
|
|
||||||
kubectl exec $NEXTCLOUD_POD -- su -s /bin/sh www-data -c "php occ maintenance:mode --on"
|
|
||||||
```
|
|
||||||
@@ -1,171 +0,0 @@
|
|||||||
## Official nextcloud image version
|
|
||||||
## ref: https://hub.docker.com/r/library/nextcloud/tags/
|
|
||||||
|
|
||||||
image:
|
|
||||||
tag: "28"
|
|
||||||
|
|
||||||
ingress:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
nextcloud:
|
|
||||||
host: nextcloud.kluster.moll.re
|
|
||||||
username: admin
|
|
||||||
password: changeme
|
|
||||||
## Use an existing secret
|
|
||||||
existingSecret:
|
|
||||||
enabled: false
|
|
||||||
update: 0
|
|
||||||
# If web server is not binding default port, you can define it
|
|
||||||
# containerPort: 8080
|
|
||||||
datadir: /var/www/html/data
|
|
||||||
persistence:
|
|
||||||
subPath:
|
|
||||||
mail:
|
|
||||||
enabled: false
|
|
||||||
# PHP Configuration files
|
|
||||||
# Will be injected in /usr/local/etc/php/conf.d for apache image and in /usr/local/etc/php-fpm.d when nginx.enabled: true
|
|
||||||
phpConfigs: {}
|
|
||||||
# Default config files
|
|
||||||
# IMPORTANT: Will be used only if you put extra configs, otherwise default will come from nextcloud itself
|
|
||||||
# Default confgurations can be found here: https://github.com/nextcloud/docker/tree/master/16.0/apache/config
|
|
||||||
defaultConfigs:
|
|
||||||
# To protect /var/www/html/config
|
|
||||||
.htaccess: true
|
|
||||||
# Redis default configuration
|
|
||||||
redis.config.php: true
|
|
||||||
# Apache configuration for rewrite urls
|
|
||||||
apache-pretty-urls.config.php: true
|
|
||||||
# Define APCu as local cache
|
|
||||||
apcu.config.php: true
|
|
||||||
# Apps directory configs
|
|
||||||
apps.config.php: true
|
|
||||||
# Used for auto configure database
|
|
||||||
autoconfig.php: true
|
|
||||||
# SMTP default configuration
|
|
||||||
smtp.config.php: true
|
|
||||||
# Extra config files created in /var/www/html/config/
|
|
||||||
# ref: https://docs.nextcloud.com/server/15/admin_manual/configuration_server/config_sample_php_parameters.html#multiple-config-php-file
|
|
||||||
configs: {}
|
|
||||||
|
|
||||||
# For example, to use S3 as primary storage
|
|
||||||
# ref: https://docs.nextcloud.com/server/13/admin_manual/configuration_files/primary_storage.html#simple-storage-service-s3
|
|
||||||
#
|
|
||||||
# configs:
|
|
||||||
# s3.config.php: |-
|
|
||||||
# <?php
|
|
||||||
# $CONFIG = array (
|
|
||||||
# 'objectstore' => array(
|
|
||||||
# 'class' => '\\OC\\Files\\ObjectStore\\S3',
|
|
||||||
# 'arguments' => array(
|
|
||||||
# 'bucket' => 'my-bucket',
|
|
||||||
# 'autocreate' => true,
|
|
||||||
# 'key' => 'xxx',
|
|
||||||
# 'secret' => 'xxx',
|
|
||||||
# 'region' => 'us-east-1',
|
|
||||||
# 'use_ssl' => true
|
|
||||||
# )
|
|
||||||
# )
|
|
||||||
# );
|
|
||||||
|
|
||||||
nginx:
|
|
||||||
## You need to set an fpm version of the image for nextcloud if you want to use nginx!
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
internalDatabase:
|
|
||||||
enabled: true
|
|
||||||
name: nextcloud
|
|
||||||
|
|
||||||
##
|
|
||||||
## External database configuration
|
|
||||||
##
|
|
||||||
externalDatabase:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
## Supported database engines: mysql or postgresql
|
|
||||||
type: postgresql
|
|
||||||
|
|
||||||
## Database host
|
|
||||||
host: postgres-postgresql.postgres
|
|
||||||
|
|
||||||
## Database user
|
|
||||||
# user: nextcloud
|
|
||||||
|
|
||||||
# ## Database password
|
|
||||||
# password: test
|
|
||||||
|
|
||||||
## Database name
|
|
||||||
database: nextcloud
|
|
||||||
|
|
||||||
## Use a existing secret
|
|
||||||
existingSecret:
|
|
||||||
enabled: true
|
|
||||||
secretName: postgres-password
|
|
||||||
usernameKey: username
|
|
||||||
passwordKey: password
|
|
||||||
|
|
||||||
##
|
|
||||||
## MariaDB chart configuration
|
|
||||||
##
|
|
||||||
mariadb:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
postgresql:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
redis:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
## Cronjob to execute Nextcloud background tasks
|
|
||||||
## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron
|
|
||||||
##
|
|
||||||
cronjob:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
## Enable persistence using Persistent Volume Claims
|
|
||||||
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
||||||
##
|
|
||||||
persistence:
|
|
||||||
# Nextcloud Data (/var/www/html)
|
|
||||||
enabled: true
|
|
||||||
annotations: {}
|
|
||||||
|
|
||||||
## If defined, PVC must be created manually before volume will be bound
|
|
||||||
existingClaim: nextcloud-nfs
|
|
||||||
|
|
||||||
## Use an additional pvc for the data directory rather than a subpath of the default PVC
|
|
||||||
## Useful to store data on a different storageClass (e.g. on slower disks)
|
|
||||||
nextcloudData:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
resources:
|
|
||||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
||||||
# choice for the user. This also increases chances charts run on environments with little
|
|
||||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
||||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
||||||
limits:
|
|
||||||
cpu: 2000m
|
|
||||||
memory: 2Gi
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 128Mi
|
|
||||||
|
|
||||||
livenessProbe:
|
|
||||||
enabled: true
|
|
||||||
# disable when upgrading from a previous chart version
|
|
||||||
|
|
||||||
## Enable pod autoscaling using HorizontalPodAutoscaler
|
|
||||||
## ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
|
|
||||||
##
|
|
||||||
hpa:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
## Prometheus Exporter / Metrics
|
|
||||||
##
|
|
||||||
metrics:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
|
|
||||||
rbac:
|
|
||||||
enabled: false
|
|
||||||
@@ -1,35 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: syncthing
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: syncthing
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: syncthing
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: syncthing
|
|
||||||
image: syncthing
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
memory: "256Mi"
|
|
||||||
cpu: "500m"
|
|
||||||
ports:
|
|
||||||
- containerPort: 8384
|
|
||||||
protocol: TCP
|
|
||||||
name: syncthing-web
|
|
||||||
- containerPort: 22000
|
|
||||||
protocol: TCP
|
|
||||||
- containerPort: 22000
|
|
||||||
protocol: UDP
|
|
||||||
volumeMounts:
|
|
||||||
- name: persistence
|
|
||||||
mountPath: /var/syncthing
|
|
||||||
volumes:
|
|
||||||
- name: persistence
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: syncthing-claim
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: traefik.io/v1alpha1
|
|
||||||
kind: IngressRoute
|
|
||||||
metadata:
|
|
||||||
name: rss-ingressroute
|
|
||||||
|
|
||||||
spec:
|
|
||||||
entryPoints:
|
|
||||||
- websecure
|
|
||||||
routes:
|
|
||||||
- match: Host(`syncthing.kluster.moll.re`)
|
|
||||||
kind: Rule
|
|
||||||
services:
|
|
||||||
- name: syncthing-web
|
|
||||||
port: 8384
|
|
||||||
tls:
|
|
||||||
certResolver: default-tls
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
|
|
||||||
namespace: syncthing
|
|
||||||
|
|
||||||
resources:
|
|
||||||
- namespace.yaml
|
|
||||||
- pvc.yaml
|
|
||||||
- deployment.yaml
|
|
||||||
- service.yaml
|
|
||||||
- ingress.yaml
|
|
||||||
- servicemonitor.yaml
|
|
||||||
- syncthing-api.sealedsecret.yaml
|
|
||||||
|
|
||||||
images:
|
|
||||||
- name: syncthing
|
|
||||||
newName: syncthing/syncthing
|
|
||||||
newTag: "1.27"
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: placeholder
|
|
||||||
@@ -1,25 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: syncthing-data
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: "50Gi"
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
nfs:
|
|
||||||
path: /kluster/syncthing
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
apiVersion: v1
|
|
||||||
metadata:
|
|
||||||
name: syncthing-claim
|
|
||||||
spec:
|
|
||||||
storageClassName: ""
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 10Gi
|
|
||||||
volumeName: syncthing
|
|
||||||
@@ -1,46 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: syncthing-web
|
|
||||||
labels:
|
|
||||||
app: syncthing
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: syncthing
|
|
||||||
type: ClusterIP
|
|
||||||
ports:
|
|
||||||
- port: 8384
|
|
||||||
targetPort: 8384
|
|
||||||
name: syncthing-web
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: syncthing-listen
|
|
||||||
annotations:
|
|
||||||
metallb.universe.tf/allow-shared-ip: syncthing-service
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: syncthing
|
|
||||||
type: LoadBalancer
|
|
||||||
LoadBalancerIP: 192.168.3.4
|
|
||||||
ports:
|
|
||||||
- port: 22000
|
|
||||||
targetPort: 22000
|
|
||||||
protocol: TCP
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: syncthing-discover
|
|
||||||
annotations:
|
|
||||||
metallb.universe.tf/allow-shared-ip: syncthing-service
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: syncthing
|
|
||||||
type: LoadBalancer
|
|
||||||
LoadBalancerIP: 192.168.3.4
|
|
||||||
ports:
|
|
||||||
- port: 22000
|
|
||||||
targetPort: 22000
|
|
||||||
protocol: UDP
|
|
||||||
@@ -1,17 +0,0 @@
|
|||||||
apiVersion: monitoring.coreos.com/v1
|
|
||||||
kind: ServiceMonitor
|
|
||||||
metadata:
|
|
||||||
name: syncthing-servicemonitor
|
|
||||||
labels:
|
|
||||||
app: syncthing
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: syncthing
|
|
||||||
endpoints:
|
|
||||||
- port: syncthing-web
|
|
||||||
path: /metrics
|
|
||||||
bearerTokenSecret:
|
|
||||||
name: syncthing-api
|
|
||||||
key: token
|
|
||||||
namespace: syncthing
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: bitnami.com/v1alpha1
|
|
||||||
kind: SealedSecret
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: syncthing-api
|
|
||||||
namespace: syncthing
|
|
||||||
spec:
|
|
||||||
encryptedData:
|
|
||||||
token: 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
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: syncthing-api
|
|
||||||
namespace: syncthing
|
|
||||||
type: Opaque
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
Create a new role by executing the createuser command. With the options below, the new role will not be a superuser and will not have privileges for creating new databases or new roles (this is usually the default for the createuser command).
|
|
||||||
|
|
||||||
k exec -it -n postgres postgres-postgresql-0 -- bash
|
|
||||||
|
|
||||||
```
|
|
||||||
createuser -U postgres USER_NAME -S -D -R -P
|
|
||||||
```
|
|
||||||
You will be prompted to enter first the password for the new role and to reenter it, and then to enter the postgres role password.
|
|
||||||
|
|
||||||
Create a new database with the new role as the owner:
|
|
||||||
```
|
|
||||||
createdb -U postgres DATABASE_NAME -O USER_NAME
|
|
||||||
```
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
name: postgres
|
|
||||||
chart: bitnami/postgresql
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
{
|
|
||||||
"kind": "SealedSecret",
|
|
||||||
"apiVersion": "bitnami.com/v1alpha1",
|
|
||||||
"metadata": {
|
|
||||||
"name": "postgres-password",
|
|
||||||
"namespace": "postgres",
|
|
||||||
"creationTimestamp": null
|
|
||||||
},
|
|
||||||
"spec": {
|
|
||||||
"template": {
|
|
||||||
"metadata": {
|
|
||||||
"name": "postgres-password",
|
|
||||||
"namespace": "postgres",
|
|
||||||
"creationTimestamp": null
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"encryptedData": {
|
|
||||||
"password": "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"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
namespace: postgres
|
|
||||||
name: postgres-nfs
|
|
||||||
spec:
|
|
||||||
# storageClassName: fast
|
|
||||||
capacity:
|
|
||||||
storage: "50Gi"
|
|
||||||
# volumeMode: Filesystem
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
nfs:
|
|
||||||
path: /export/kluster/postgres
|
|
||||||
server: 192.168.1.157
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
namespace: postgres
|
|
||||||
name: postgres-nfs
|
|
||||||
spec:
|
|
||||||
storageClassName: ""
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: "50Gi"
|
|
||||||
volumeName: postgres-nfs
|
|
||||||
File diff suppressed because it is too large
Load Diff
@@ -33,10 +33,8 @@ resources:
|
|||||||
- journal/
|
- journal/
|
||||||
- media/
|
- media/
|
||||||
- monitoring/
|
- monitoring/
|
||||||
# - nextcloud/
|
|
||||||
- ntfy/
|
- ntfy/
|
||||||
- recipes/
|
- recipes/
|
||||||
- rss/
|
- rss/
|
||||||
# - syncthing/
|
|
||||||
- whoami/
|
- whoami/
|
||||||
- todos/
|
- todos/
|
||||||
|
|||||||
@@ -1,18 +0,0 @@
|
|||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: nextcloud-application
|
|
||||||
namespace: argocd
|
|
||||||
spec:
|
|
||||||
project: apps
|
|
||||||
source:
|
|
||||||
repoURL: ssh://git@git.kluster.moll.re:2222/remoll/k3s-infra.git
|
|
||||||
targetRevision: main
|
|
||||||
path: apps/nextcloud/
|
|
||||||
destination:
|
|
||||||
server: https://kubernetes.default.svc
|
|
||||||
namespace: nextcloud
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- application.yaml
|
|
||||||
@@ -1,19 +0,0 @@
|
|||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: syncthing-application
|
|
||||||
namespace: argocd
|
|
||||||
|
|
||||||
spec:
|
|
||||||
project: apps
|
|
||||||
source:
|
|
||||||
repoURL: ssh://git@git.kluster.moll.re:2222/remoll/k3s-infra.git
|
|
||||||
targetRevision: main
|
|
||||||
path: apps/syncthing
|
|
||||||
destination:
|
|
||||||
server: https://kubernetes.default.svc
|
|
||||||
namespace: syncthing
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- application.yaml
|
|
||||||
Reference in New Issue
Block a user