fixing style
This commit is contained in:
Daniel Noulet
parent
e454940dfa
commit
f40485842d
35 changed files with 16000 additions and 286 deletions
|
|
@ -52,6 +52,8 @@ spec:
|
|||
value: {{ .Values.app.ssoHeader | quote }}
|
||||
- name: CMS_SSO_COOKIE
|
||||
value: {{ .Values.app.ssoCookie | quote }}
|
||||
- name: CMS_THEME_BASE_URL
|
||||
value: {{ .Values.app.themeBaseURL | quote }}
|
||||
- name: CMS_SSO_TOKEN
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
|
|
|
|||
104
deploy/helm/go-tell/values-dev.yaml
Normal file
104
deploy/helm/go-tell/values-dev.yaml
Normal file
|
|
@ -0,0 +1,104 @@
|
|||
# Development values for go-tell
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# Public host of the CMS.
|
||||
host: tell-dev.urpi.be
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: nexus.urpi.be/docker-hosted/go-tell
|
||||
tag: "0.0.1"
|
||||
pullPolicy: Always
|
||||
|
||||
imagePullSecrets:
|
||||
- name: nexus-registry
|
||||
|
||||
app:
|
||||
profile: demo
|
||||
allowedOrigins: https://tell-dev.urpi.be
|
||||
contentFile: ""
|
||||
postgresURL: ""
|
||||
ssoHeader: X-SSO-Token
|
||||
ssoCookie: ""
|
||||
|
||||
goLoose:
|
||||
enabled: false
|
||||
tenant: tell
|
||||
authDomain: auth-dev.urpi.be
|
||||
appDomain: tell-dev.urpi.be
|
||||
ca:
|
||||
existingSecret: ""
|
||||
key: ca.crt
|
||||
mountPath: /certs/local-ca.crt
|
||||
clientID: ""
|
||||
clientSecret: ""
|
||||
|
||||
secrets:
|
||||
ssoToken: ""
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
nodePort: null
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
cert-manager.io/cluster-issuer: letsencrypt-staging
|
||||
path: /
|
||||
pathType: Prefix
|
||||
tls:
|
||||
enabled: true
|
||||
existingSecret: ""
|
||||
secretName: ""
|
||||
|
||||
certManager:
|
||||
enabled: true
|
||||
issuerRef:
|
||||
name: letsencrypt-staging
|
||||
kind: ClusterIssuer
|
||||
duration: 8760h
|
||||
renewBefore: 720h
|
||||
caSecretName: ""
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 96Mi
|
||||
limits:
|
||||
cpu: 300m
|
||||
memory: 384Mi
|
||||
|
||||
podAnnotations: {}
|
||||
podLabels: {}
|
||||
|
||||
podSecurityContext:
|
||||
fsGroup: 10001
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 10001
|
||||
|
||||
strategy:
|
||||
type: Recreate
|
||||
|
||||
persistence:
|
||||
enabled: true
|
||||
size: 2Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClass: ""
|
||||
|
||||
nodeSelector: {}
|
||||
tolerations: []
|
||||
affinity: {}
|
||||
103
deploy/helm/go-tell/values-lcl.yaml
Normal file
103
deploy/helm/go-tell/values-lcl.yaml
Normal file
|
|
@ -0,0 +1,103 @@
|
|||
# Local (LCL) values for go-tell.
|
||||
# Served at https://tell-lcl.intern-urpi.be by the docker TLS edge.
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# Public host of the CMS.
|
||||
host: tell-lcl.intern-urpi.be
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: localhost:5000/go-tell
|
||||
tag: "0.0.1"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Images live in the local registry (localhost:5000), no pull secret needed.
|
||||
imagePullSecrets: []
|
||||
|
||||
app:
|
||||
profile: demo
|
||||
allowedOrigins: https://tell-lcl.intern-urpi.be
|
||||
contentFile: ""
|
||||
postgresURL: ""
|
||||
ssoHeader: X-SSO-Token
|
||||
ssoCookie: ""
|
||||
|
||||
goLoose:
|
||||
enabled: false
|
||||
tenant: tell
|
||||
authDomain: auth-lcl.intern-urpi.be
|
||||
appDomain: tell-lcl.intern-urpi.be
|
||||
ca:
|
||||
existingSecret: ""
|
||||
key: ca.crt
|
||||
mountPath: /certs/local-ca.crt
|
||||
clientID: ""
|
||||
clientSecret: ""
|
||||
|
||||
secrets:
|
||||
ssoToken: ""
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
nodePort: null
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
className: traefik
|
||||
annotations: {}
|
||||
path: /
|
||||
pathType: Prefix
|
||||
tls:
|
||||
enabled: true
|
||||
# local-dev-cert is signed by the local CA (dev-infrastructure/certs).
|
||||
existingSecret: "local-dev-cert"
|
||||
secretName: ""
|
||||
|
||||
# No cert-manager in the local cluster.
|
||||
certManager:
|
||||
enabled: false
|
||||
issuerRef: null
|
||||
duration: 8760h
|
||||
renewBefore: 720h
|
||||
caSecretName: ""
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 96Mi
|
||||
limits:
|
||||
cpu: 300m
|
||||
memory: 384Mi
|
||||
|
||||
podAnnotations: {}
|
||||
podLabels: {}
|
||||
|
||||
podSecurityContext:
|
||||
fsGroup: 10001
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 10001
|
||||
|
||||
strategy:
|
||||
type: Recreate
|
||||
|
||||
persistence:
|
||||
enabled: true
|
||||
size: 2Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClass: ""
|
||||
|
||||
nodeSelector: {}
|
||||
tolerations: []
|
||||
affinity: {}
|
||||
107
deploy/helm/go-tell/values-prd.yaml
Normal file
107
deploy/helm/go-tell/values-prd.yaml
Normal file
|
|
@ -0,0 +1,107 @@
|
|||
# Production values for go-tell
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# Public host of the CMS.
|
||||
host: tell.urpi.be
|
||||
|
||||
replicaCount: 2
|
||||
|
||||
imagePullSecrets:
|
||||
- name: nexus-registry
|
||||
|
||||
image:
|
||||
repository: nexus.urpi.be/docker-hosted/go-tell
|
||||
tag: "0.0.1"
|
||||
pullPolicy: Always
|
||||
|
||||
app:
|
||||
profile: production
|
||||
allowedOrigins: https://tell.urpi.be
|
||||
contentFile: /data/content.json
|
||||
postgresURL: ""
|
||||
ssoHeader: X-SSO-Token
|
||||
ssoCookie: ""
|
||||
|
||||
goLoose:
|
||||
enabled: false
|
||||
tenant: tell
|
||||
authDomain: auth.urpi.be
|
||||
appDomain: tell.urpi.be
|
||||
ca:
|
||||
existingSecret: ""
|
||||
key: ca.crt
|
||||
mountPath: /certs/local-ca.crt
|
||||
clientID: ""
|
||||
clientSecret: ""
|
||||
|
||||
secrets:
|
||||
ssoToken: ""
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
nodePort: null
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
path: /
|
||||
pathType: Prefix
|
||||
tls:
|
||||
enabled: true
|
||||
existingSecret: ""
|
||||
secretName: ""
|
||||
|
||||
certManager:
|
||||
enabled: true
|
||||
issuerRef:
|
||||
name: letsencrypt-prod
|
||||
kind: ClusterIssuer
|
||||
duration: 8760h
|
||||
renewBefore: 720h
|
||||
caSecretName: ""
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 1000m
|
||||
memory: 1Gi
|
||||
|
||||
podAnnotations: {}
|
||||
podLabels: {}
|
||||
|
||||
podSecurityContext:
|
||||
fsGroup: 10001
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 10001
|
||||
|
||||
strategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate:
|
||||
maxSurge: 1
|
||||
maxUnavailable: 0
|
||||
|
||||
persistence:
|
||||
enabled: true
|
||||
size: 10Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClass: ""
|
||||
|
||||
nodeSelector: {}
|
||||
tolerations: []
|
||||
affinity: {}
|
||||
104
deploy/helm/go-tell/values-tst.yaml
Normal file
104
deploy/helm/go-tell/values-tst.yaml
Normal file
|
|
@ -0,0 +1,104 @@
|
|||
# TST values for go-tell
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# Public host of the CMS.
|
||||
host: tell-tst.intern-urpi.be
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: nexus.urpi.be/docker-hosted/go-tell
|
||||
tag: "0.0.1"
|
||||
pullPolicy: Always
|
||||
|
||||
imagePullSecrets:
|
||||
- name: nexus-registry
|
||||
|
||||
app:
|
||||
profile: demo
|
||||
allowedOrigins: https://tell-tst.intern-urpi.be
|
||||
contentFile: ""
|
||||
postgresURL: ""
|
||||
ssoHeader: X-SSO-Token
|
||||
ssoCookie: ""
|
||||
|
||||
goLoose:
|
||||
enabled: false
|
||||
tenant: tell
|
||||
authDomain: auth-tst.intern-urpi.be
|
||||
appDomain: tell-tst.intern-urpi.be
|
||||
ca:
|
||||
existingSecret: ""
|
||||
key: ca.crt
|
||||
mountPath: /certs/local-ca.crt
|
||||
clientID: ""
|
||||
clientSecret: ""
|
||||
|
||||
secrets:
|
||||
ssoToken: ""
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
nodePort: null
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
cert-manager.io/cluster-issuer: letsencrypt-staging
|
||||
path: /
|
||||
pathType: Prefix
|
||||
tls:
|
||||
enabled: true
|
||||
existingSecret: ""
|
||||
secretName: ""
|
||||
|
||||
certManager:
|
||||
enabled: true
|
||||
issuerRef:
|
||||
name: letsencrypt-staging
|
||||
kind: ClusterIssuer
|
||||
duration: 8760h
|
||||
renewBefore: 720h
|
||||
caSecretName: ""
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 96Mi
|
||||
limits:
|
||||
cpu: 300m
|
||||
memory: 384Mi
|
||||
|
||||
podAnnotations: {}
|
||||
podLabels: {}
|
||||
|
||||
podSecurityContext:
|
||||
fsGroup: 10001
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 10001
|
||||
|
||||
strategy:
|
||||
type: Recreate
|
||||
|
||||
persistence:
|
||||
enabled: true
|
||||
size: 3Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClass: ""
|
||||
|
||||
nodeSelector: {}
|
||||
tolerations: []
|
||||
affinity: {}
|
||||
|
|
@ -7,12 +7,13 @@ host: tell.dev
|
|||
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: batty1039.startdedicated.net:5000/go-tell
|
||||
tag: latest
|
||||
pullPolicy: IfNotPresent
|
||||
imagePullSecrets:
|
||||
- name: nexus-registry
|
||||
|
||||
imagePullSecrets: []
|
||||
image:
|
||||
repository: nexus.urpi.be/docker-hosted/go-tell
|
||||
tag: "0.0.1"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
app:
|
||||
# Demo keeps content in memory and offers the sudo terminal. Production serves
|
||||
|
|
@ -25,6 +26,12 @@ app:
|
|||
# configured. An empty header disables it.
|
||||
ssoHeader: X-SSO-Token
|
||||
ssoCookie: ""
|
||||
# The go-bananas origin supplying the shared styling contract: the palette and
|
||||
# appearance controls, and the --bn-* custom properties the page is styled with.
|
||||
# Empty leaves the shell on its own built-in fallbacks, which is why a
|
||||
# deployment can run without it and still look right — and also why a missing
|
||||
# value here is silent rather than obvious.
|
||||
themeBaseURL: ""
|
||||
|
||||
goLoose:
|
||||
enabled: true
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue