From dc5518b57f8dc857b4e38864d1d445eb826aed6d Mon Sep 17 00:00:00 2001 From: Paul Payne Date: Fri, 10 Jul 2026 03:49:38 +0000 Subject: [PATCH] Externalize networking (welcome Wild Central!) --- akaunting/versions/3/ingress.yaml | 8 -- akaunting/versions/3/manifest.yaml | 18 ++-- aptly/versions/1/ingress.yaml | 8 -- aptly/versions/1/manifest.yaml | 10 +-- baserow/versions/2/ingress.yaml | 8 -- baserow/versions/2/manifest.yaml | 22 +++-- bookstack/versions/26/ingress.yaml | 8 -- bookstack/versions/26/manifest.yaml | 16 ++-- bookwyrm/versions/0/ingress.yaml | 8 -- bookwyrm/versions/0/manifest.yaml | 20 ++--- chamilo/versions/1/ingress.yaml | 8 -- chamilo/versions/1/manifest.yaml | 18 ++-- community-search/versions/0/ingress.yaml | 8 -- community-search/versions/0/manifest.yaml | 11 +-- cryptpad/versions/2024/ingress.yaml | 9 -- cryptpad/versions/2024/manifest.yaml | 6 +- decidim/versions/0/ingress.yaml | 7 -- decidim/versions/0/manifest.yaml | 31 ++++--- discourse/versions/3/ingress.yaml | 7 -- discourse/versions/3/manifest.yaml | 31 ++++--- docker-registry/versions/3/ingress.yaml | 4 - docker-registry/versions/3/manifest.yaml | 7 +- e2e-test-app/versions/1/manifest.yaml | 15 ++-- e2e-test-app/versions/2/manifest.yaml | 21 +++-- etherpad/versions/2/ingress.yaml | 8 -- etherpad/versions/2/manifest.yaml | 17 ++-- eventyay/versions/1/ingress.yaml | 8 -- eventyay/versions/1/manifest.yaml | 38 ++++----- example-admin/versions/1/ingress.yaml | 6 -- example-admin/versions/1/manifest.yaml | 4 +- example-app/versions/1/ingress.yaml | 6 -- example-app/versions/1/manifest.yaml | 4 +- .../versions/v0/externaldns-cloudflare.yaml | 8 +- externaldns/versions/v0/manifest.yaml | 3 +- firefly-iii/versions/6/ingress.yaml | 8 -- firefly-iii/versions/6/manifest.yaml | 12 ++- formbricks/versions/3/ingress.yaml | 8 -- formbricks/versions/3/manifest.yaml | 31 ++++--- gancio/versions/1/ingress.yaml | 8 -- gancio/versions/1/manifest.yaml | 15 ++-- ghost/versions/5/ingress.yaml | 8 -- ghost/versions/5/manifest.yaml | 14 ++- gitea/versions/1/ingress.yaml | 7 -- gitea/versions/1/manifest.yaml | 22 +++-- headlamp/versions/v0/ingress.yaml | 76 ++++------------- headlamp/versions/v0/manifest.yaml | 14 +-- headscale/versions/1/ingress.yaml | 8 -- headscale/versions/1/manifest.yaml | 25 +++--- immich/versions/1/ingress.yaml | 7 -- immich/versions/1/manifest.yaml | 14 ++- indico/versions/3/ingress.yaml | 8 -- indico/versions/3/manifest.yaml | 38 ++++----- jitsi/versions/stable/ingress.yaml | 8 -- jitsi/versions/stable/manifest.yaml | 14 ++- karrot/versions/1/ingress.yaml | 8 -- karrot/versions/1/manifest.yaml | 16 ++-- keila/versions/0/ingress.yaml | 10 --- keila/versions/0/kustomization.yaml | 3 +- keila/versions/0/manifest.yaml | 34 +++++--- keila/versions/0/middleware-cors.yaml | 28 ------ lemmy/versions/0/ingress.yaml | 7 -- lemmy/versions/0/manifest.yaml | 20 ++--- librebooking/versions/3/ingress.yaml | 8 -- librebooking/versions/3/manifest.yaml | 16 ++-- limesurvey/versions/6/ingress.yaml | 8 -- limesurvey/versions/6/manifest.yaml | 30 +++---- listmonk/versions/5/ingress.yaml | 11 +-- listmonk/versions/5/manifest.yaml | 15 ++-- longhorn/versions/v1/ingress.yaml | 4 - longhorn/versions/v1/manifest.yaml | 11 ++- loomio/versions/3/ingress.yaml | 9 +- loomio/versions/3/manifest.yaml | 37 ++++---- mastodon/versions/4/ingress.yaml | 8 -- mastodon/versions/4/manifest.yaml | 44 +++++----- mattermost/versions/10/ingress.yaml | 8 -- mattermost/versions/10/manifest.yaml | 15 ++-- mautic/versions/7/ingress.yaml | 8 -- mautic/versions/7/manifest.yaml | 18 ++-- mediawiki/versions/1/ingress.yaml | 8 -- mediawiki/versions/1/manifest.yaml | 22 +++-- memcached/versions/1/manifest.yaml | 3 +- mobilizon/versions/5/ingress.yaml | 8 -- mobilizon/versions/5/manifest.yaml | 20 ++--- moodle/versions/4/ingress.yaml | 8 -- moodle/versions/4/manifest.yaml | 16 ++-- mysql/versions/9/manifest.yaml | 7 +- nextcloud/versions/34/ingress.yaml | 8 -- nextcloud/versions/34/manifest.yaml | 21 +++-- nocodb/versions/2026/ingress.yaml | 8 -- nocodb/versions/2026/manifest.yaml | 17 ++-- odoo/versions/18/ingress.yaml | 8 -- odoo/versions/18/manifest.yaml | 16 ++-- ohmyform/versions/1/ingress.yaml | 8 -- ohmyform/versions/1/manifest.yaml | 31 ++++--- open-webui/versions/0/ingress.yaml | 8 -- open-webui/versions/0/manifest.yaml | 10 +-- openproject/versions/16/ingress.yaml | 7 -- openproject/versions/16/manifest.yaml | 14 ++- outline/versions/1/ingress.yaml | 8 -- outline/versions/1/manifest.yaml | 29 +++---- peertube/versions/8/ingress.yaml | 8 -- peertube/versions/8/manifest.yaml | 27 +++--- pixelfed/versions/0/ingress.yaml | 8 -- pixelfed/versions/0/manifest.yaml | 25 +++--- plausible/versions/3/ingress.yaml | 11 --- plausible/versions/3/kustomization.yaml | 1 - plausible/versions/3/manifest.yaml | 25 +++--- plausible/versions/3/middleware.yaml | 8 -- polis/versions/dev/ingress.yaml | 8 -- polis/versions/dev/manifest.yaml | 21 +++-- postgres/versions/1/manifest.yaml | 4 +- pretix/versions/2026/ingress.yaml | 8 -- pretix/versions/2026/manifest.yaml | 20 ++--- redis/versions/1/manifest.yaml | 4 +- smtp/versions/1/manifest.yaml | 16 ++-- supabase/versions/1/ingress.yaml | 8 -- supabase/versions/1/manifest.yaml | 85 ++++++++++--------- synapse/versions/v1/manifest.yaml | 56 ++++++------ syncthing-discovery/versions/1/ingress.yaml | 8 -- syncthing-discovery/versions/1/manifest.yaml | 4 +- syncthing-relay/versions/1/ingress.yaml | 8 -- syncthing-relay/versions/1/manifest.yaml | 6 +- taiga/versions/6/ingress.yaml | 8 -- taiga/versions/6/manifest.yaml | 32 ++++--- typebot/versions/3/ingress.yaml | 16 ---- typebot/versions/3/manifest.yaml | 23 +++-- umap/versions/3/ingress.yaml | 8 -- umap/versions/3/manifest.yaml | 17 ++-- ushahidi/versions/5/ingress.yaml | 20 ----- ushahidi/versions/5/manifest.yaml | 12 ++- utils/versions/v1/manifest.yaml | 2 +- vaultwarden/versions/1/ingress.yaml | 8 -- vaultwarden/versions/1/manifest.yaml | 23 +++-- vllm/versions/0/ingress.yaml | 9 -- vllm/versions/0/manifest.yaml | 6 +- wikijs/versions/2/ingress.yaml | 8 -- wikijs/versions/2/manifest.yaml | 10 +-- wild-directory-server/versions/1/ingress.yaml | 6 -- .../versions/1/manifest.yaml | 12 ++- writefreely/versions/0/ingress.yaml | 8 -- writefreely/versions/0/manifest.yaml | 12 ++- zulip/versions/9/ingress.yaml | 8 -- zulip/versions/9/manifest.yaml | 36 ++++---- 143 files changed, 691 insertions(+), 1379 deletions(-) delete mode 100644 keila/versions/0/middleware-cors.yaml delete mode 100644 plausible/versions/3/middleware.yaml diff --git a/akaunting/versions/3/ingress.yaml b/akaunting/versions/3/ingress.yaml index 276735f..1bf5ed4 100644 --- a/akaunting/versions/3/ingress.yaml +++ b/akaunting/versions/3/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: akaunting namespace: akaunting - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: akaunting port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/akaunting/versions/3/manifest.yaml b/akaunting/versions/3/manifest.yaml index b43e13e..348bd1e 100644 --- a/akaunting/versions/3/manifest.yaml +++ b/akaunting/versions/3/manifest.yaml @@ -1,12 +1,10 @@ -version: 3.1.21-1 +version: 3.1.21-2 requires: - - name: mysql - - name: smtp +- name: mysql +- name: smtp defaultConfig: namespace: akaunting - externalDnsDomain: '{{ .cloud.domain }}' domain: akaunting.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi locale: en-US dbPrefix: aka_ @@ -15,7 +13,7 @@ defaultConfig: adminEmail: '{{ .operator.email }}' db: host: '{{ .apps.mysql.host }}' - port: "3306" + port: '3306' name: akaunting user: akaunting smtp: @@ -24,8 +22,8 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: dbPassword - - key: adminPassword - - key: smtpPassword +- key: dbPassword +- key: adminPassword +- key: smtpPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/aptly/versions/1/ingress.yaml b/aptly/versions/1/ingress.yaml index f23359b..c451254 100644 --- a/aptly/versions/1/ingress.yaml +++ b/aptly/versions/1/ingress.yaml @@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: aptly - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -19,7 +15,3 @@ spec: name: aptly port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/aptly/versions/1/manifest.yaml b/aptly/versions/1/manifest.yaml index a13dc5c..039a44e 100644 --- a/aptly/versions/1/manifest.yaml +++ b/aptly/versions/1/manifest.yaml @@ -1,11 +1,9 @@ -version: 1.6.2-3 +version: 1.6.2-4 defaultConfig: namespace: aptly - externalDnsDomain: "{{ .cloud.domain }}" - domain: "aptly.{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls + domain: aptly.{{ .cloud.domain }} storage: 5Gi apiUser: aptly - operatorEmail: "{{ .operator.email }}" + operatorEmail: '{{ .operator.email }}' defaultSecrets: - - key: apiPassword +- key: apiPassword diff --git a/baserow/versions/2/ingress.yaml b/baserow/versions/2/ingress.yaml index d6a64f4..03820de 100644 --- a/baserow/versions/2/ingress.yaml +++ b/baserow/versions/2/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: baserow namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: baserow port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/baserow/versions/2/manifest.yaml b/baserow/versions/2/manifest.yaml index 5a80aa6..ecc8849 100644 --- a/baserow/versions/2/manifest.yaml +++ b/baserow/versions/2/manifest.yaml @@ -1,23 +1,21 @@ -version: 2.2.2-2 +version: 2.2.2-3 requires: - - name: postgres - - name: redis +- name: postgres +- name: redis defaultConfig: namespace: baserow - externalDnsDomain: "{{ .cloud.domain }}" domain: baserow.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: - host: "{{ .apps.postgres.host }}" - port: "5432" + host: '{{ .apps.postgres.host }}' + port: '5432' name: baserow user: baserow redis: - host: "{{ .apps.redis.host }}" + host: '{{ .apps.redis.host }}' defaultSecrets: - - key: dbPassword - - key: secretKey +- key: dbPassword +- key: secretKey requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/bookstack/versions/26/ingress.yaml b/bookstack/versions/26/ingress.yaml index 50d8e54..d2b02ac 100644 --- a/bookstack/versions/26/ingress.yaml +++ b/bookstack/versions/26/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: bookstack namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: bookstack port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/bookstack/versions/26/manifest.yaml b/bookstack/versions/26/manifest.yaml index e183652..5cfb994 100644 --- a/bookstack/versions/26/manifest.yaml +++ b/bookstack/versions/26/manifest.yaml @@ -1,12 +1,10 @@ -version: 26.05.1-2 +version: 26.05.1-3 requires: - - name: mysql - - name: smtp +- name: mysql +- name: smtp defaultConfig: namespace: bookstack - externalDnsDomain: '{{ .cloud.domain }}' domain: bookstack.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.mysql.host }}' @@ -19,8 +17,8 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: appKey - - key: dbPassword - - key: smtpPassword +- key: appKey +- key: dbPassword +- key: smtpPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/bookwyrm/versions/0/ingress.yaml b/bookwyrm/versions/0/ingress.yaml index b40b793..863d99b 100644 --- a/bookwyrm/versions/0/ingress.yaml +++ b/bookwyrm/versions/0/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: bookwyrm namespace: bookwyrm - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: bookwyrm port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/bookwyrm/versions/0/manifest.yaml b/bookwyrm/versions/0/manifest.yaml index c516c10..525fadd 100644 --- a/bookwyrm/versions/0/manifest.yaml +++ b/bookwyrm/versions/0/manifest.yaml @@ -1,13 +1,11 @@ -version: 0.8.7-1 +version: 0.8.7-2 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: bookwyrm - externalDnsDomain: '{{ .cloud.domain }}' domain: bookwyrm.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -22,9 +20,9 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: secretKey - - key: dbPassword - - key: smtpPassword +- key: secretKey +- key: dbPassword +- key: smtpPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/chamilo/versions/1/ingress.yaml b/chamilo/versions/1/ingress.yaml index 81fb660..b1ccaa5 100644 --- a/chamilo/versions/1/ingress.yaml +++ b/chamilo/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: chamilo namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: chamilo port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/chamilo/versions/1/manifest.yaml b/chamilo/versions/1/manifest.yaml index 04f3f0c..1ec45df 100644 --- a/chamilo/versions/1/manifest.yaml +++ b/chamilo/versions/1/manifest.yaml @@ -1,19 +1,17 @@ -version: 1.11.28-1 +version: 1.11.28-2 requires: - - name: mysql - - name: smtp +- name: mysql +- name: smtp defaultConfig: namespace: chamilo - externalDnsDomain: '{{ .cloud.domain }}' domain: chamilo.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi siteName: Chamilo LMS adminUser: admin adminEmail: '{{ .operator.email }}' db: host: '{{ .apps.mysql.host }}' - port: "3306" + port: '3306' name: chamilo user: chamilo smtp: @@ -22,8 +20,8 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: adminPassword - - key: dbPassword - - key: smtpPassword +- key: adminPassword +- key: dbPassword +- key: smtpPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/community-search/versions/0/ingress.yaml b/community-search/versions/0/ingress.yaml index b692852..4bf2c70 100644 --- a/community-search/versions/0/ingress.yaml +++ b/community-search/versions/0/ingress.yaml @@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: community-search - annotations: - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -19,7 +15,3 @@ spec: name: community-search port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/community-search/versions/0/manifest.yaml b/community-search/versions/0/manifest.yaml index 94350c7..095f60a 100644 --- a/community-search/versions/0/manifest.yaml +++ b/community-search/versions/0/manifest.yaml @@ -1,12 +1,9 @@ -version: 0.1.2_1 -requires: [] +version: 0.1.2_1-1 defaultConfig: namespace: community-search - externalDnsDomain: '{{ .cloud.domain }}' domain: search.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi - selfUrl: 'https://search.{{ .cloud.domain }}' - selfName: 'Community Search' + selfUrl: https://search.{{ .cloud.domain }} + selfName: Community Search defaultSecrets: - - key: adminToken +- key: adminToken diff --git a/cryptpad/versions/2024/ingress.yaml b/cryptpad/versions/2024/ingress.yaml index 4463fab..43520c8 100644 --- a/cryptpad/versions/2024/ingress.yaml +++ b/cryptpad/versions/2024/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: cryptpad namespace: cryptpad - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -30,8 +26,3 @@ spec: name: cryptpad port: number: 80 - tls: - - hosts: - - {{ .domain }} - - {{ .sandboxDomain }} - secretName: {{ .tlsSecretName }} diff --git a/cryptpad/versions/2024/manifest.yaml b/cryptpad/versions/2024/manifest.yaml index 70e0b08..f01431c 100644 --- a/cryptpad/versions/2024/manifest.yaml +++ b/cryptpad/versions/2024/manifest.yaml @@ -1,10 +1,8 @@ -version: 2026.5.1-2 +version: 2026.5.1-3 defaultConfig: namespace: cryptpad - externalDnsDomain: '{{ .cloud.domain }}' domain: cryptpad.{{ .cloud.domain }} sandboxDomain: cryptpad-sandbox.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi defaultSecrets: - - key: adminKey +- key: adminKey diff --git a/decidim/versions/0/ingress.yaml b/decidim/versions/0/ingress.yaml index b48ceef..ddb573f 100644 --- a/decidim/versions/0/ingress.yaml +++ b/decidim/versions/0/ingress.yaml @@ -4,15 +4,8 @@ kind: Ingress metadata: name: decidim namespace: decidim - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: diff --git a/decidim/versions/0/manifest.yaml b/decidim/versions/0/manifest.yaml index 114d9e7..30847a2 100644 --- a/decidim/versions/0/manifest.yaml +++ b/decidim/versions/0/manifest.yaml @@ -1,16 +1,14 @@ -version: 0.31.0-3 +version: 0.31.0-4 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: decidim - externalDnsDomain: '{{ .cloud.domain }}' storage: 2Gi systemAdminEmail: '{{ .operator.email }}' - siteName: 'Decidim' + siteName: Decidim domain: decidim.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls db: host: '{{ .apps.postgres.host }}' port: '{{ .apps.postgres.port }}' @@ -27,13 +25,14 @@ defaultConfig: tls: '{{ .apps.smtp.tls }}' startTls: '{{ .apps.smtp.startTls }}' defaultSecrets: - - key: systemAdminPassword - - key: secretKeyBase - default: "{{ random.AlphaNum 128 }}" - - key: dbPassword - - key: dbUrl - default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" +- key: systemAdminPassword +- key: secretKeyBase + default: '{{ random.AlphaNum 128 }}' +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password - - redis.password - - smtp.password +- postgres.password +- redis.password +- smtp.password diff --git a/discourse/versions/3/ingress.yaml b/discourse/versions/3/ingress.yaml index c7cc993..49b8961 100644 --- a/discourse/versions/3/ingress.yaml +++ b/discourse/versions/3/ingress.yaml @@ -5,9 +5,6 @@ kind: Ingress metadata: name: discourse namespace: "{{ .namespace }}" - annotations: - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}" spec: ingressClassName: traefik rules: @@ -21,7 +18,3 @@ spec: name: discourse port: name: http - tls: - - hosts: - - "{{ .domain }}" - secretName: wildcard-external-wild-cloud-tls diff --git a/discourse/versions/3/manifest.yaml b/discourse/versions/3/manifest.yaml index d51badc..f159b54 100644 --- a/discourse/versions/3/manifest.yaml +++ b/discourse/versions/3/manifest.yaml @@ -1,17 +1,15 @@ -version: 3.5.3-4 +version: 3.5.3-5 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: discourse - externalDnsDomain: '{{ .cloud.domain }}' storage: 2Gi adminEmail: '{{ .operator.email }}' adminUsername: admin - siteName: 'Community' + siteName: Community domain: discourse.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls db: host: '{{ .apps.postgres.host }}' port: '{{ .apps.postgres.port }}' @@ -28,13 +26,14 @@ defaultConfig: tls: '{{ .apps.smtp.tls }}' startTls: '{{ .apps.smtp.startTls }}' defaultSecrets: - - key: adminPassword - - key: secretKeyBase - default: "{{ random.Hex 32 }}" - - key: smtpPassword - - key: dbPassword - - key: dbUrl - default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" +- key: adminPassword +- key: secretKeyBase + default: '{{ random.Hex 32 }}' +- key: smtpPassword +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/docker-registry/versions/3/ingress.yaml b/docker-registry/versions/3/ingress.yaml index af3abd9..bf3d07f 100644 --- a/docker-registry/versions/3/ingress.yaml +++ b/docker-registry/versions/3/ingress.yaml @@ -15,7 +15,3 @@ spec: name: docker-registry port: number: 5000 - tls: - - hosts: - - {{ .host }} - secretName: wildcard-internal-wild-cloud-tls diff --git a/docker-registry/versions/3/manifest.yaml b/docker-registry/versions/3/manifest.yaml index 0f64b5a..adb9681 100644 --- a/docker-registry/versions/3/manifest.yaml +++ b/docker-registry/versions/3/manifest.yaml @@ -1,8 +1,5 @@ -version: "3.0.0-1" -requires: - - name: traefik - - name: cert-manager +version: 3.0.0-2 defaultConfig: namespace: docker-registry - host: "registry.{{ .cloud.internalDomain }}" + host: registry.{{ .cloud.internalDomain }} storage: 5Gi diff --git a/e2e-test-app/versions/1/manifest.yaml b/e2e-test-app/versions/1/manifest.yaml index febc579..ed31641 100644 --- a/e2e-test-app/versions/1/manifest.yaml +++ b/e2e-test-app/versions/1/manifest.yaml @@ -1,11 +1,9 @@ -version: 1.0.0-1 +version: 1.0.0-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: e2e-test-app domain: e2e-test-app.{{ .cloud.domain }} - externalDnsDomain: '{{ .cloud.domain }}' - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi db: host: '{{ .apps.postgres.host }}' @@ -13,8 +11,9 @@ defaultConfig: name: e2e_test_app user: e2e_test_app defaultSecrets: - - key: dbPassword - - key: dbUrl - default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password +- postgres.password diff --git a/e2e-test-app/versions/2/manifest.yaml b/e2e-test-app/versions/2/manifest.yaml index dbaaa6d..5a6aa5f 100644 --- a/e2e-test-app/versions/2/manifest.yaml +++ b/e2e-test-app/versions/2/manifest.yaml @@ -1,12 +1,10 @@ -version: 2.0.0-1 +version: 2.0.0-2 requires: - - name: postgres - - name: mysql +- name: postgres +- name: mysql defaultConfig: namespace: e2e-test-app domain: e2e-test-app.{{ .cloud.domain }} - externalDnsDomain: '{{ .cloud.domain }}' - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi db: host: '{{ .apps.postgres.host }}' @@ -19,10 +17,11 @@ defaultConfig: name: e2e_test_app user: e2e_test_app defaultSecrets: - - key: dbPassword - - key: dbUrl - default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" - - key: mysqlPassword +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: mysqlPassword requiredSecrets: - - postgres.password - - mysql.rootPassword +- postgres.password +- mysql.rootPassword diff --git a/etherpad/versions/2/ingress.yaml b/etherpad/versions/2/ingress.yaml index ee09b8f..2304f19 100644 --- a/etherpad/versions/2/ingress.yaml +++ b/etherpad/versions/2/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: etherpad namespace: etherpad - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: etherpad port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/etherpad/versions/2/manifest.yaml b/etherpad/versions/2/manifest.yaml index f5775d9..cf4da6d 100644 --- a/etherpad/versions/2/manifest.yaml +++ b/etherpad/versions/2/manifest.yaml @@ -1,11 +1,9 @@ -version: 2.2.7-1 +version: 2.2.7-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: etherpad - externalDnsDomain: '{{ .cloud.domain }}' domain: etherpad.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi title: Etherpad db: @@ -14,9 +12,10 @@ defaultConfig: name: etherpad user: etherpad defaultSecrets: - - key: adminPassword - - key: dbPassword - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' +- key: adminPassword +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password +- postgres.password diff --git a/eventyay/versions/1/ingress.yaml b/eventyay/versions/1/ingress.yaml index 7449711..cc0321f 100644 --- a/eventyay/versions/1/ingress.yaml +++ b/eventyay/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: eventyay namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: eventyay port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/eventyay/versions/1/manifest.yaml b/eventyay/versions/1/manifest.yaml index a33667e..adb6d30 100644 --- a/eventyay/versions/1/manifest.yaml +++ b/eventyay/versions/1/manifest.yaml @@ -1,13 +1,11 @@ -version: main-5 +version: main-6 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: eventyay - externalDnsDomain: '{{ .cloud.domain }}' domain: eventyay.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi timezone: UTC db: @@ -24,19 +22,19 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' scripts: - - name: create-superuser - path: scripts/create-superuser.sh - description: "Create an Eventyay superuser account for first-time setup." - params: - - name: EMAIL - description: Email address for the superuser account - required: true - - name: PASSWORD - description: Password (leave blank to generate a random one) +- name: create-superuser + path: scripts/create-superuser.sh + description: Create an Eventyay superuser account for first-time setup. + params: + - name: EMAIL + description: Email address for the superuser account + required: true + - name: PASSWORD + description: Password (leave blank to generate a random one) defaultSecrets: - - key: dbPassword - - key: djangoSecret +- key: dbPassword +- key: djangoSecret requiredSecrets: - - postgres.password - - redis.password - - smtp.password +- postgres.password +- redis.password +- smtp.password diff --git a/example-admin/versions/1/ingress.yaml b/example-admin/versions/1/ingress.yaml index 1539e6b..6c11428 100644 --- a/example-admin/versions/1/ingress.yaml +++ b/example-admin/versions/1/ingress.yaml @@ -3,8 +3,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-admin - annotations: - external-dns.alpha.kubernetes.io/target: '{{ .externalDnsDomain }}' spec: ingressClassName: traefik rules: @@ -18,7 +16,3 @@ spec: name: example-admin port: number: 80 - tls: - - hosts: - - "{{ .host }}" - secretName: wildcard-internal-wild-cloud-tls diff --git a/example-admin/versions/1/manifest.yaml b/example-admin/versions/1/manifest.yaml index b0f8639..0f44733 100644 --- a/example-admin/versions/1/manifest.yaml +++ b/example-admin/versions/1/manifest.yaml @@ -1,6 +1,4 @@ -version: 1.0.0-2 +version: 1.0.0-3 defaultConfig: namespace: example-admin - externalDnsDomain: '{{ .cloud.domain }}' host: '{{ .host }}' - tlsSecretName: wildcard-internal-wild-cloud-tls diff --git a/example-app/versions/1/ingress.yaml b/example-app/versions/1/ingress.yaml index 6a03c1a..5a11cb3 100644 --- a/example-app/versions/1/ingress.yaml +++ b/example-app/versions/1/ingress.yaml @@ -4,8 +4,6 @@ kind: Ingress metadata: name: example-app annotations: - external-dns.alpha.kubernetes.io/target: "{{ .cloud.externalDnsTarget }}" - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" # Optional: Enable basic auth # traefik.ingress.kubernetes.io/auth-type: basic # traefik.ingress.kubernetes.io/auth-secret: basic-auth @@ -22,7 +20,3 @@ spec: name: example-app port: number: 80 - tls: - - hosts: - - "{{ .host }}" - secretName: wildcard-wild-cloud-tls diff --git a/example-app/versions/1/manifest.yaml b/example-app/versions/1/manifest.yaml index 064ac53..90924b4 100644 --- a/example-app/versions/1/manifest.yaml +++ b/example-app/versions/1/manifest.yaml @@ -1,6 +1,4 @@ -version: 1.0.0-1 +version: 1.0.0-2 defaultConfig: namespace: example-app - externalDnsDomain: '{{ .cloud.domain }}' host: example-app.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls diff --git a/externaldns/versions/v0/externaldns-cloudflare.yaml b/externaldns/versions/v0/externaldns-cloudflare.yaml index 9bf1e0d..312bc93 100644 --- a/externaldns/versions/v0/externaldns-cloudflare.yaml +++ b/externaldns/versions/v0/externaldns-cloudflare.yaml @@ -28,8 +28,12 @@ spec: - --source=ingress - --txt-owner-id={{ .ownerId }} - --provider=cloudflare - - --domain-filter=payne.io - #- --exclude-domains=internal.${DOMAIN} + {{- with (index . "domainFilter") }} + - --domain-filter={{ . }} + {{- end }} + {{- with (index . "internalDomain") }} + - --exclude-domains={{ . }} + {{- end }} - --cloudflare-dns-records-per-page=5000 - --publish-internal-services - --no-cloudflare-proxied diff --git a/externaldns/versions/v0/manifest.yaml b/externaldns/versions/v0/manifest.yaml index 426a52b..7448330 100644 --- a/externaldns/versions/v0/manifest.yaml +++ b/externaldns/versions/v0/manifest.yaml @@ -1,10 +1,11 @@ -version: v0.13.4-2 +version: v0.13.4-6 deploymentName: external-dns requires: - name: cert-manager defaultConfig: namespace: externaldns ownerId: "wild-cloud-{{ .cluster.name }}" + internalDomain: "{{ .cloud.internalDomain }}" defaultSecrets: - key: cloudflareToken requiredSecrets: diff --git a/firefly-iii/versions/6/ingress.yaml b/firefly-iii/versions/6/ingress.yaml index 41b8b07..8b4e94d 100644 --- a/firefly-iii/versions/6/ingress.yaml +++ b/firefly-iii/versions/6/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: firefly-iii namespace: firefly-iii - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: firefly-iii port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/firefly-iii/versions/6/manifest.yaml b/firefly-iii/versions/6/manifest.yaml index 89a764b..c030951 100644 --- a/firefly-iii/versions/6/manifest.yaml +++ b/firefly-iii/versions/6/manifest.yaml @@ -1,11 +1,9 @@ -version: 6.6.3-1 +version: 6.6.3-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: firefly-iii - externalDnsDomain: '{{ .cloud.domain }}' domain: firefly-iii.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi timezone: UTC adminEmail: '{{ .operator.email }}' @@ -15,7 +13,7 @@ defaultConfig: name: fireflyiii user: fireflyiii defaultSecrets: - - key: appKey - - key: dbPassword +- key: appKey +- key: dbPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/formbricks/versions/3/ingress.yaml b/formbricks/versions/3/ingress.yaml index 537134e..cad043c 100644 --- a/formbricks/versions/3/ingress.yaml +++ b/formbricks/versions/3/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: formbricks namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: formbricks port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/formbricks/versions/3/manifest.yaml b/formbricks/versions/3/manifest.yaml index 6d9157a..0413084 100644 --- a/formbricks/versions/3/manifest.yaml +++ b/formbricks/versions/3/manifest.yaml @@ -1,27 +1,26 @@ -version: 3.6.0-1 +version: 3.6.0-2 requires: - - name: postgres - - name: redis +- name: postgres +- name: redis defaultConfig: namespace: formbricks - externalDnsDomain: "{{ .cloud.domain }}" domain: formbricks.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: - host: "{{ .apps.postgres.host }}" - port: "{{ .apps.postgres.port }}" + host: '{{ .apps.postgres.host }}' + port: '{{ .apps.postgres.port }}' name: formbricks user: formbricks redis: - host: "{{ .apps.redis.host }}" + host: '{{ .apps.redis.host }}' defaultSecrets: - - key: dbPassword - - key: dbUrl - default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" - - key: nextauthSecret - - key: encryptionKey - - key: cronSecret +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: nextauthSecret +- key: encryptionKey +- key: cronSecret requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/gancio/versions/1/ingress.yaml b/gancio/versions/1/ingress.yaml index f542bbe..e624d55 100644 --- a/gancio/versions/1/ingress.yaml +++ b/gancio/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: gancio namespace: gancio - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: gancio port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/gancio/versions/1/manifest.yaml b/gancio/versions/1/manifest.yaml index e1bb8f0..5311423 100644 --- a/gancio/versions/1/manifest.yaml +++ b/gancio/versions/1/manifest.yaml @@ -1,11 +1,9 @@ -version: 1.28.2-1 +version: 1.28.2-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: gancio - externalDnsDomain: '{{ .cloud.domain }}' domain: gancio.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -13,8 +11,9 @@ defaultConfig: name: gancio user: gancio defaultSecrets: - - key: dbPassword - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password +- postgres.password diff --git a/ghost/versions/5/ingress.yaml b/ghost/versions/5/ingress.yaml index ae480db..3aa604d 100644 --- a/ghost/versions/5/ingress.yaml +++ b/ghost/versions/5/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: ghost namespace: ghost - annotations: - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: ghost port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} \ No newline at end of file diff --git a/ghost/versions/5/manifest.yaml b/ghost/versions/5/manifest.yaml index 9a0b505..2a49987 100644 --- a/ghost/versions/5/manifest.yaml +++ b/ghost/versions/5/manifest.yaml @@ -1,12 +1,10 @@ -version: 5.130.6-1 +version: 5.130.6-2 requires: - - name: mysql - - name: smtp +- name: mysql +- name: smtp defaultConfig: namespace: ghost - externalDnsDomain: '{{ .cloud.domain }}' domain: ghost.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.mysql.host }}' @@ -19,7 +17,7 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: dbPassword - - key: smtpPassword +- key: dbPassword +- key: smtpPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/gitea/versions/1/ingress.yaml b/gitea/versions/1/ingress.yaml index 252ed8b..cc75bde 100644 --- a/gitea/versions/1/ingress.yaml +++ b/gitea/versions/1/ingress.yaml @@ -3,9 +3,6 @@ kind: Ingress metadata: name: gitea-public namespace: gitea - annotations: - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}" spec: ingressClassName: traefik rules: @@ -19,7 +16,3 @@ spec: name: gitea-http port: number: 3000 - tls: - - secretName: "{{ .tlsSecretName }}" - hosts: - - "{{ .domain }}" diff --git a/gitea/versions/1/manifest.yaml b/gitea/versions/1/manifest.yaml index e968ea2..30a8e95 100644 --- a/gitea/versions/1/manifest.yaml +++ b/gitea/versions/1/manifest.yaml @@ -1,16 +1,14 @@ -version: 1.24.3-4 +version: 1.24.3-5 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: gitea - externalDnsDomain: '{{ .cloud.domain }}' appName: Gitea domain: gitea.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi adminUser: admin - adminEmail: "{{ .operator.email }}" + adminEmail: '{{ .operator.email }}' db: name: gitea user: gitea @@ -22,10 +20,10 @@ defaultConfig: user: '{{ .apps.smtp.user }}' from: '{{ .apps.smtp.from }}' defaultSecrets: - - key: adminPassword - - key: dbPassword - - key: secretKey - - key: jwtSecret - - key: smtpPassword +- key: adminPassword +- key: dbPassword +- key: secretKey +- key: jwtSecret +- key: smtpPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/headlamp/versions/v0/ingress.yaml b/headlamp/versions/v0/ingress.yaml index 9bd5b90..a8c3c6b 100644 --- a/headlamp/versions/v0/ingress.yaml +++ b/headlamp/versions/v0/ingress.yaml @@ -1,64 +1,18 @@ ---- -apiVersion: traefik.io/v1alpha1 -kind: Middleware +apiVersion: networking.k8s.io/v1 +kind: Ingress metadata: - name: internal-only + name: headlamp namespace: headlamp spec: - ipWhiteList: - sourceRange: - - 127.0.0.1/32 - - 10.0.0.0/8 - - 172.16.0.0/12 - - 192.168.0.0/16 - ---- -apiVersion: traefik.io/v1alpha1 -kind: Middleware -metadata: - name: headlamp-redirect-scheme - namespace: headlamp -spec: - redirectScheme: - scheme: https - permanent: true - ---- -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: headlamp-https - namespace: headlamp -spec: - entryPoints: - - websecure - routes: - - match: Host(`headlamp.{{ .internalDomain }}`) - kind: Rule - middlewares: - - name: internal-only - namespace: headlamp - services: - - name: headlamp - port: 80 - tls: - secretName: wildcard-internal-wild-cloud-tls - ---- -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: headlamp-http - namespace: headlamp -spec: - entryPoints: - - web - routes: - - match: Host(`headlamp.{{ .internalDomain }}`) - kind: Rule - middlewares: - - name: headlamp-redirect-scheme - namespace: headlamp - services: - - name: headlamp - port: 80 + ingressClassName: traefik + rules: + - host: headlamp.{{ .internalDomain }} + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: headlamp + port: + number: 80 diff --git a/headlamp/versions/v0/manifest.yaml b/headlamp/versions/v0/manifest.yaml index c43a3d4..f56d984 100644 --- a/headlamp/versions/v0/manifest.yaml +++ b/headlamp/versions/v0/manifest.yaml @@ -1,11 +1,13 @@ -version: v0.42.0 -requires: - - name: traefik - - name: cert-manager +version: v0.42.0-1 defaultConfig: namespace: headlamp - internalDomain: "{{ .cloud.internalDomain }}" + internalDomain: '{{ .cloud.internalDomain }}' + central: + ipAllow: + - 10.0.0.0/8 + - 172.16.0.0/12 + - 192.168.0.0/16 deploy: waitForRollout: name: headlamp - timeout: "120s" + timeout: 120s diff --git a/headscale/versions/1/ingress.yaml b/headscale/versions/1/ingress.yaml index 01b928e..40758fd 100644 --- a/headscale/versions/1/ingress.yaml +++ b/headscale/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: headscale namespace: headscale - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: headscale port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/headscale/versions/1/manifest.yaml b/headscale/versions/1/manifest.yaml index 50f9f45..cfcfa33 100644 --- a/headscale/versions/1/manifest.yaml +++ b/headscale/versions/1/manifest.yaml @@ -1,19 +1,18 @@ -version: 0.29.1-1 +version: 0.29.1-2 scripts: - - name: register-node - description: Register a Tailscale node using the auth ID shown in the Tailscale app. - path: scripts/register-node.sh - params: - - name: AUTH_ID - description: The auth ID shown by the Tailscale app (e.g. hskey-authreq-...) - required: true - - name: USER - description: Headscale username to register the node under - required: true +- name: register-node + description: Register a Tailscale node using the auth ID shown in the Tailscale + app. + path: scripts/register-node.sh + params: + - name: AUTH_ID + description: The auth ID shown by the Tailscale app (e.g. hskey-authreq-...) + required: true + - name: USER + description: Headscale username to register the node under + required: true defaultConfig: namespace: headscale domain: headscale.{{ .cloud.domain }} - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi vpnBaseDomain: vpn.{{ .cloud.domain }} diff --git a/immich/versions/1/ingress.yaml b/immich/versions/1/ingress.yaml index 88cc0e8..671112c 100644 --- a/immich/versions/1/ingress.yaml +++ b/immich/versions/1/ingress.yaml @@ -3,9 +3,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: immich-public - annotations: - external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}" - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: ingressClassName: traefik rules: @@ -19,7 +16,3 @@ spec: name: immich-server port: number: 3001 - tls: - - secretName: wildcard-wild-cloud-tls - hosts: - - "{{ .domain }}" diff --git a/immich/versions/1/manifest.yaml b/immich/versions/1/manifest.yaml index 9502eb9..8da4e87 100644 --- a/immich/versions/1/manifest.yaml +++ b/immich/versions/1/manifest.yaml @@ -1,14 +1,12 @@ -version: 1.135.3-4 +version: 1.135.3-5 requires: - - name: redis - - name: postgres +- name: redis +- name: postgres defaultConfig: namespace: immich - externalDnsDomain: '{{ .cloud.domain }}' storage: 5Gi cacheStorage: 5Gi domain: immich.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls db: host: '{{ .apps.postgres.host }}' name: immich @@ -16,7 +14,7 @@ defaultConfig: redis: host: '{{ .apps.redis.host }}' defaultSecrets: - - key: dbPassword +- key: dbPassword requiredSecrets: - - redis.password - - postgres.password +- redis.password +- postgres.password diff --git a/indico/versions/3/ingress.yaml b/indico/versions/3/ingress.yaml index 0823acd..16efb16 100644 --- a/indico/versions/3/ingress.yaml +++ b/indico/versions/3/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: indico namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: indico port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/indico/versions/3/manifest.yaml b/indico/versions/3/manifest.yaml index 799b882..bb53020 100644 --- a/indico/versions/3/manifest.yaml +++ b/indico/versions/3/manifest.yaml @@ -1,32 +1,30 @@ -version: 3.3.12-1 +version: 3.3.12-2 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: indico - externalDnsDomain: "{{ .cloud.domain }}" - domain: "indico.{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls + domain: indico.{{ .cloud.domain }} storage: 2Gi timezone: UTC db: - host: "{{ .apps.postgres.host }}" - port: "{{ .apps.postgres.port }}" + host: '{{ .apps.postgres.host }}' + port: '{{ .apps.postgres.port }}' name: indico user: indico redis: - host: "{{ .apps.redis.host }}" - port: "6379" + host: '{{ .apps.redis.host }}' + port: '6379' smtp: - host: "{{ .apps.smtp.host }}" - port: "{{ .apps.smtp.port }}" - from: "{{ .apps.smtp.from }}" - user: "{{ .apps.smtp.user }}" + host: '{{ .apps.smtp.host }}' + port: '{{ .apps.smtp.port }}' + from: '{{ .apps.smtp.from }}' + user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: dbPassword - - key: secretKey +- key: dbPassword +- key: secretKey requiredSecrets: - - postgres.password - - redis.password - - smtp.password +- postgres.password +- redis.password +- smtp.password diff --git a/jitsi/versions/stable/ingress.yaml b/jitsi/versions/stable/ingress.yaml index 46efdf1..bcc65a3 100644 --- a/jitsi/versions/stable/ingress.yaml +++ b/jitsi/versions/stable/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: jitsi namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: jitsi-web port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/jitsi/versions/stable/manifest.yaml b/jitsi/versions/stable/manifest.yaml index af9b6bc..6ad8fb1 100644 --- a/jitsi/versions/stable/manifest.yaml +++ b/jitsi/versions/stable/manifest.yaml @@ -1,16 +1,14 @@ -version: web-1.0.9282-2 +version: web-1.0.9282-3 defaultConfig: namespace: jitsi - domain: "jitsi.{{ .cloud.domain }}" - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls + domain: jitsi.{{ .cloud.domain }} xmppDomain: meet.jitsi xmppAuthDomain: auth.meet.jitsi xmppMucDomain: muc.meet.jitsi xmppInternalMucDomain: internal-muc.meet.jitsi xmppGuestDomain: guest.meet.jitsi - jvbStunServers: "stun.l.google.com:19302,stun1.l.google.com:19302" + jvbStunServers: stun.l.google.com:19302,stun1.l.google.com:19302 defaultSecrets: - - key: jicofoAuthPassword - - key: jvbAuthPassword - - key: jicofoComponentSecret +- key: jicofoAuthPassword +- key: jvbAuthPassword +- key: jicofoComponentSecret diff --git a/karrot/versions/1/ingress.yaml b/karrot/versions/1/ingress.yaml index 58288b5..197f477 100644 --- a/karrot/versions/1/ingress.yaml +++ b/karrot/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: karrot namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: karrot-frontend port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/karrot/versions/1/manifest.yaml b/karrot/versions/1/manifest.yaml index 784c0bc..0fd6d47 100644 --- a/karrot/versions/1/manifest.yaml +++ b/karrot/versions/1/manifest.yaml @@ -1,12 +1,10 @@ -version: v17.4.1 +version: v17.4.1-1 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: karrot - externalDnsDomain: '{{ .cloud.domain }}' domain: karrot.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -21,8 +19,8 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: secretKey - - key: dbPassword +- key: secretKey +- key: dbPassword requiredSecrets: - - postgres.password - - smtp.password +- postgres.password +- smtp.password diff --git a/keila/versions/0/ingress.yaml b/keila/versions/0/ingress.yaml index 4045a82..75eadcc 100644 --- a/keila/versions/0/ingress.yaml +++ b/keila/versions/0/ingress.yaml @@ -2,12 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: keila - annotations: - traefik.ingress.kubernetes.io/router.tls: "true" - traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - traefik.ingress.kubernetes.io/router.middlewares: keila-cors@kubernetescrd spec: ingressClassName: traefik rules: @@ -21,7 +15,3 @@ spec: name: keila port: number: 80 - tls: - - secretName: "wildcard-wild-cloud-tls" - hosts: - - "{{ .domain }}" diff --git a/keila/versions/0/kustomization.yaml b/keila/versions/0/kustomization.yaml index 6fa003c..1920f07 100644 --- a/keila/versions/0/kustomization.yaml +++ b/keila/versions/0/kustomization.yaml @@ -13,5 +13,4 @@ resources: - service.yaml - ingress.yaml - pvc.yaml - - db-init-job.yaml - - middleware-cors.yaml \ No newline at end of file + - db-init-job.yaml \ No newline at end of file diff --git a/keila/versions/0/manifest.yaml b/keila/versions/0/manifest.yaml index 59bd01f..6745a3f 100644 --- a/keila/versions/0/manifest.yaml +++ b/keila/versions/0/manifest.yaml @@ -1,15 +1,13 @@ -version: 0.17.1-4 +version: 0.17.1-5 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: keila - externalDnsDomain: '{{ .cloud.domain }}' storage: 1Gi domain: keila.{{ .cloud.domain }} disableRegistration: 'true' adminUser: admin@{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls db: host: '{{ .apps.postgres.host }}' port: '{{ .apps.postgres.port }}' @@ -22,13 +20,23 @@ defaultConfig: user: '{{ .apps.smtp.user }}' tls: '{{ .apps.smtp.tls }}' startTls: '{{ .apps.smtp.startTls }}' + central: + headers: + response: + Access-Control-Allow-Origin: https://{{ .cloud.domain }} + Access-Control-Allow-Credentials: 'true' + Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS + Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, + Accept, Origin, Cache-Control, X-File-Name + Access-Control-Max-Age: '86400' defaultSecrets: - - key: secretKeyBase - default: "{{ random.AlphaNum 64 }}" - - key: dbPassword - - key: dbUrl - default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" - - key: adminPassword - - key: smtpPassword +- key: secretKeyBase + default: '{{ random.AlphaNum 64 }}' +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: adminPassword +- key: smtpPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/keila/versions/0/middleware-cors.yaml b/keila/versions/0/middleware-cors.yaml deleted file mode 100644 index ff831e3..0000000 --- a/keila/versions/0/middleware-cors.yaml +++ /dev/null @@ -1,28 +0,0 @@ -apiVersion: traefik.io/v1alpha1 -kind: Middleware -metadata: - name: cors -spec: - headers: - accessControlAllowCredentials: true - accessControlAllowHeaders: - - "Content-Type" - - "Authorization" - - "X-Requested-With" - - "Accept" - - "Origin" - - "Cache-Control" - - "X-File-Name" - accessControlAllowMethods: - - "GET" - - "POST" - - "PUT" - - "DELETE" - - "OPTIONS" - accessControlAllowOriginList: - - "http://localhost:1313" - - "https://*.{{ .externalDnsDomain }}" - - "https://{{ .externalDnsDomain }}" - accessControlExposeHeaders: - - "*" - accessControlMaxAge: 86400 \ No newline at end of file diff --git a/lemmy/versions/0/ingress.yaml b/lemmy/versions/0/ingress.yaml index 8e9ad1a..fbfb7f5 100644 --- a/lemmy/versions/0/ingress.yaml +++ b/lemmy/versions/0/ingress.yaml @@ -3,15 +3,8 @@ kind: Ingress metadata: name: lemmy-ingress namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: diff --git a/lemmy/versions/0/manifest.yaml b/lemmy/versions/0/manifest.yaml index fe4c74e..c3b6db3 100644 --- a/lemmy/versions/0/manifest.yaml +++ b/lemmy/versions/0/manifest.yaml @@ -1,12 +1,10 @@ -version: 0.19.15-3 +version: 0.19.15-4 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: lemmy - externalDnsDomain: lemmy.{{ .cloud.baseDomain }} domain: lemmy.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi pictrsStorage: 2Gi db: @@ -18,12 +16,12 @@ defaultConfig: host: '{{ .apps.smtp.host }}' port: '{{ .apps.smtp.port }}' user: '{{ .apps.smtp.user }}' - from: 'noreply@{{ .cloud.baseDomain }}' + from: noreply@{{ .cloud.baseDomain }} tls: '{{ .apps.smtp.tls }}' defaultSecrets: - - key: dbPassword - - key: adminPassword - - key: jwtSecret +- key: dbPassword +- key: adminPassword +- key: jwtSecret requiredSecrets: - - postgres.password - - smtp.password +- postgres.password +- smtp.password diff --git a/librebooking/versions/3/ingress.yaml b/librebooking/versions/3/ingress.yaml index ace2388..b1e55bb 100644 --- a/librebooking/versions/3/ingress.yaml +++ b/librebooking/versions/3/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: librebooking namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: librebooking port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/librebooking/versions/3/manifest.yaml b/librebooking/versions/3/manifest.yaml index a5da902..3e86f99 100644 --- a/librebooking/versions/3/manifest.yaml +++ b/librebooking/versions/3/manifest.yaml @@ -1,20 +1,18 @@ -version: 3.3.7-1 +version: 3.3.7-2 requires: - - name: mysql +- name: mysql defaultConfig: namespace: librebooking - externalDnsDomain: "{{ .cloud.domain }}" domain: booking.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi timezone: UTC db: - host: "{{ .apps.mysql.host }}" - port: "3306" + host: '{{ .apps.mysql.host }}' + port: '3306' name: librebooking user: librebooking defaultSecrets: - - key: dbPassword - - key: installPassword +- key: dbPassword +- key: installPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/limesurvey/versions/6/ingress.yaml b/limesurvey/versions/6/ingress.yaml index f19e253..486e464 100644 --- a/limesurvey/versions/6/ingress.yaml +++ b/limesurvey/versions/6/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: limesurvey namespace: limesurvey - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: limesurvey port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/limesurvey/versions/6/manifest.yaml b/limesurvey/versions/6/manifest.yaml index 188d065..f9d8f97 100644 --- a/limesurvey/versions/6/manifest.yaml +++ b/limesurvey/versions/6/manifest.yaml @@ -1,28 +1,26 @@ -version: 6.17.5-1 +version: 6.17.5-2 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: limesurvey - externalDnsDomain: "{{ .cloud.domain }}" domain: limesurvey.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi adminUser: admin - adminEmail: "{{ .operator.email }}" + adminEmail: '{{ .operator.email }}' db: - host: "{{ .apps.postgres.host }}" - port: "{{ .apps.postgres.port }}" + host: '{{ .apps.postgres.host }}' + port: '{{ .apps.postgres.port }}' name: limesurvey user: limesurvey smtp: - host: "{{ .apps.smtp.host }}" - port: "{{ .apps.smtp.port }}" - from: "{{ .apps.smtp.from }}" - user: "{{ .apps.smtp.user }}" + host: '{{ .apps.smtp.host }}' + port: '{{ .apps.smtp.port }}' + from: '{{ .apps.smtp.from }}' + user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: adminPassword - - key: dbPassword - - key: smtpPassword +- key: adminPassword +- key: dbPassword +- key: smtpPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/listmonk/versions/5/ingress.yaml b/listmonk/versions/5/ingress.yaml index e73bd7a..23c9467 100644 --- a/listmonk/versions/5/ingress.yaml +++ b/listmonk/versions/5/ingress.yaml @@ -3,17 +3,8 @@ kind: Ingress metadata: name: listmonk namespace: listmonk - annotations: - traefik.ingress.kubernetes.io/router.entrypoints: websecure - traefik.ingress.kubernetes.io/router.tls: "true" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: @@ -24,4 +15,4 @@ spec: service: name: listmonk port: - number: 80 \ No newline at end of file + number: 80 diff --git a/listmonk/versions/5/manifest.yaml b/listmonk/versions/5/manifest.yaml index 5f11647..3d7b6f9 100644 --- a/listmonk/versions/5/manifest.yaml +++ b/listmonk/versions/5/manifest.yaml @@ -1,11 +1,9 @@ -version: 5.0.3-2 +version: 5.0.3-3 requires: - - name: postgres +- name: postgres defaultConfig: namespace: listmonk - externalDnsDomain: '{{ .cloud.domain }}' domain: listmonk.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi db: host: '{{ .apps.postgres.host }}' @@ -13,8 +11,9 @@ defaultConfig: name: listmonk user: listmonk defaultSecrets: - - key: dbPassword - - key: dbUrl - default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password +- postgres.password diff --git a/longhorn/versions/v1/ingress.yaml b/longhorn/versions/v1/ingress.yaml index 5c47ae7..accbed6 100644 --- a/longhorn/versions/v1/ingress.yaml +++ b/longhorn/versions/v1/ingress.yaml @@ -16,7 +16,3 @@ spec: name: longhorn-frontend port: number: 80 - tls: - - secretName: wildcard-internal-wild-cloud-tls - hosts: - - "longhorn.{{ .internalDomain }}" diff --git a/longhorn/versions/v1/manifest.yaml b/longhorn/versions/v1/manifest.yaml index 08e279b..dacbe9c 100644 --- a/longhorn/versions/v1/manifest.yaml +++ b/longhorn/versions/v1/manifest.yaml @@ -1,10 +1,9 @@ -version: v1.8.1-4 +version: v1.8.1-5 deploymentName: longhorn-ui requires: - - name: traefik - - name: nfs - - name: snapshot-controller +- name: nfs +- name: snapshot-controller defaultConfig: namespace: longhorn-system - internalDomain: "{{ .cloud.internalDomain }}" - backupTarget: "nfs://{{ .apps.nfs.host }}:/data/{{ .cluster.name }}/backups" + internalDomain: '{{ .cloud.internalDomain }}' + backupTarget: nfs://{{ .apps.nfs.host }}:/data/{{ .cluster.name }}/backups diff --git a/loomio/versions/3/ingress.yaml b/loomio/versions/3/ingress.yaml index c181efd..af1c262 100644 --- a/loomio/versions/3/ingress.yaml +++ b/loomio/versions/3/ingress.yaml @@ -2,15 +2,8 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: loomio - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: @@ -21,4 +14,4 @@ spec: service: name: loomio port: - number: 80 \ No newline at end of file + number: 80 diff --git a/loomio/versions/3/manifest.yaml b/loomio/versions/3/manifest.yaml index e7a3c00..7804fb9 100644 --- a/loomio/versions/3/manifest.yaml +++ b/loomio/versions/3/manifest.yaml @@ -1,15 +1,13 @@ -version: 3.0.24-2 +version: 3.0.24-3 requires: - - name: postgres - installed_as: postgres - - name: redis - - name: smtp +- name: postgres + installed_as: postgres +- name: redis +- name: smtp defaultConfig: namespace: loomio - externalDnsDomain: '{{ .cloud.domain }}' appName: Loomio - domain: 'loomio.{{ .cloud.domain }}' - tlsSecretName: wildcard-wild-cloud-tls + domain: loomio.{{ .cloud.domain }} storage: uploads: 5Gi files: 5Gi @@ -31,15 +29,16 @@ defaultConfig: tls: '{{ .apps.smtp.tls }}' from: '{{ .apps.smtp.from }}' defaultSecrets: - - key: dbPassword - default: "{{ random.AlphaNum 32 }}" - - key: dbUrl - default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?pool=30&sslmode=disable" - - key: deviseSecret - default: "{{ random.AlphaNum 32 }}" - - key: secretCookieToken - default: "{{ random.AlphaNum 32 }}" - - key: smtpPassword - default: "{{ .secrets.smtp.password }}" +- key: dbPassword + default: '{{ random.AlphaNum 32 }}' +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?pool=30&sslmode=disable +- key: deviseSecret + default: '{{ random.AlphaNum 32 }}' +- key: secretCookieToken + default: '{{ random.AlphaNum 32 }}' +- key: smtpPassword + default: '{{ .secrets.smtp.password }}' requiredSecrets: - - postgres.password +- postgres.password diff --git a/mastodon/versions/4/ingress.yaml b/mastodon/versions/4/ingress.yaml index e1b4d11..33c1c5b 100644 --- a/mastodon/versions/4/ingress.yaml +++ b/mastodon/versions/4/ingress.yaml @@ -3,16 +3,8 @@ kind: Ingress metadata: name: mastodon namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - traefik.ingress.kubernetes.io/router.entrypoints: websecure spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: diff --git a/mastodon/versions/4/manifest.yaml b/mastodon/versions/4/manifest.yaml index 95266f1..513e59a 100644 --- a/mastodon/versions/4/manifest.yaml +++ b/mastodon/versions/4/manifest.yaml @@ -1,17 +1,15 @@ -version: 4.5.3-3 +version: 4.5.3-4 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: mastodon - externalDnsDomain: '{{ .cloud.domain }}' domain: mastodon.{{ .cloud.domain }} locale: en singleUserMode: false assetsStorage: 5Gi systemStorage: 5Gi - tlsSecretName: wildcard-wild-cloud-tls sidekiq: replicas: 1 db: @@ -30,22 +28,20 @@ defaultConfig: user: '{{ .apps.smtp.user }}' tls: '{{ .apps.smtp.tls }}' defaultSecrets: - - key: secretKeyBase - default: "{{ random.AlphaNum 128 }}" - - key: otpSecret - default: "{{ random.AlphaNum 128 }}" - - key: vapidPrivateKey - # Generated by vapid-init-job.yaml on first deploy - - key: vapidPublicKey - # Generated by vapid-init-job.yaml on first deploy - - key: activeRecordPrimaryKey - default: "{{ random.AlphaNum 32 }}" - - key: activeRecordDeterministicKey - default: "{{ random.AlphaNum 32 }}" - - key: activeRecordKeyDerivationSalt - default: "{{ random.AlphaNum 32 }}" - - key: dbPassword - - key: smtpPassword +- key: secretKeyBase + default: '{{ random.AlphaNum 128 }}' +- key: otpSecret + default: '{{ random.AlphaNum 128 }}' +- key: vapidPrivateKey +- key: vapidPublicKey +- key: activeRecordPrimaryKey + default: '{{ random.AlphaNum 32 }}' +- key: activeRecordDeterministicKey + default: '{{ random.AlphaNum 32 }}' +- key: activeRecordKeyDerivationSalt + default: '{{ random.AlphaNum 32 }}' +- key: dbPassword +- key: smtpPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/mattermost/versions/10/ingress.yaml b/mattermost/versions/10/ingress.yaml index 37c0c33..d81b2b8 100644 --- a/mattermost/versions/10/ingress.yaml +++ b/mattermost/versions/10/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: mattermost namespace: mattermost - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: mattermost port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/mattermost/versions/10/manifest.yaml b/mattermost/versions/10/manifest.yaml index 84bb890..5803d66 100644 --- a/mattermost/versions/10/manifest.yaml +++ b/mattermost/versions/10/manifest.yaml @@ -1,11 +1,9 @@ -version: 10.8.1-1 +version: 10.8.1-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: mattermost - externalDnsDomain: '{{ .cloud.domain }}' domain: mattermost.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -13,8 +11,9 @@ defaultConfig: name: mattermost user: mattermost defaultSecrets: - - key: dbPassword - - key: dbUrl - default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable&connect_timeout=10' +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable&connect_timeout=10 requiredSecrets: - - postgres.password +- postgres.password diff --git a/mautic/versions/7/ingress.yaml b/mautic/versions/7/ingress.yaml index b4f1b4c..76cacf9 100644 --- a/mautic/versions/7/ingress.yaml +++ b/mautic/versions/7/ingress.yaml @@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: mautic - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -19,7 +15,3 @@ spec: name: mautic port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/mautic/versions/7/manifest.yaml b/mautic/versions/7/manifest.yaml index e256248..7bb5cec 100644 --- a/mautic/versions/7/manifest.yaml +++ b/mautic/versions/7/manifest.yaml @@ -1,18 +1,16 @@ -version: 7.1.2-2 +version: 7.1.2-3 requires: - - name: mysql - - name: smtp +- name: mysql +- name: smtp defaultConfig: namespace: mautic - externalDnsDomain: '{{ .cloud.domain }}' domain: mautic.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi siteUrl: https://mautic.{{ .cloud.domain }} adminEmail: '{{ .operator.email }}' db: host: '{{ .apps.mysql.host }}' - port: "3306" + port: '3306' name: mautic user: mautic smtp: @@ -21,8 +19,8 @@ defaultConfig: user: '{{ .apps.smtp.user }}' from: '{{ .apps.smtp.from }}' defaultSecrets: - - key: dbPassword - - key: adminPassword +- key: dbPassword +- key: adminPassword requiredSecrets: - - mysql.rootPassword - - smtp.password +- mysql.rootPassword +- smtp.password diff --git a/mediawiki/versions/1/ingress.yaml b/mediawiki/versions/1/ingress.yaml index 9831b6b..5e11db7 100644 --- a/mediawiki/versions/1/ingress.yaml +++ b/mediawiki/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: mediawiki namespace: mediawiki - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: mediawiki port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/mediawiki/versions/1/manifest.yaml b/mediawiki/versions/1/manifest.yaml index 25a6c6f..3b0a667 100644 --- a/mediawiki/versions/1/manifest.yaml +++ b/mediawiki/versions/1/manifest.yaml @@ -1,18 +1,16 @@ -version: 1.43.1-1 +version: 1.43.1-2 requires: - - name: mysql - - name: smtp +- name: mysql +- name: smtp defaultConfig: namespace: mediawiki - externalDnsDomain: '{{ .cloud.domain }}' domain: wiki.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi siteName: My Wiki adminUser: admin db: host: '{{ .apps.mysql.host }}' - port: "3306" + port: '3306' name: mediawiki user: mediawiki smtp: @@ -21,10 +19,10 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: adminPassword - - key: secretKey - - key: upgradeKey - - key: dbPassword - - key: smtpPassword +- key: adminPassword +- key: secretKey +- key: upgradeKey +- key: dbPassword +- key: smtpPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/memcached/versions/1/manifest.yaml b/memcached/versions/1/manifest.yaml index c393525..424d8cd 100644 --- a/memcached/versions/1/manifest.yaml +++ b/memcached/versions/1/manifest.yaml @@ -1,5 +1,4 @@ -version: 1.6.32-3 -requires: [] +version: 1.6.32-4 defaultConfig: namespace: memcached host: memcached.memcached.svc.cluster.local diff --git a/mobilizon/versions/5/ingress.yaml b/mobilizon/versions/5/ingress.yaml index 613bcbd..6ef42ad 100644 --- a/mobilizon/versions/5/ingress.yaml +++ b/mobilizon/versions/5/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: mobilizon namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: mobilizon port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/mobilizon/versions/5/manifest.yaml b/mobilizon/versions/5/manifest.yaml index 54add92..03e541b 100644 --- a/mobilizon/versions/5/manifest.yaml +++ b/mobilizon/versions/5/manifest.yaml @@ -1,12 +1,10 @@ -version: 5.2.3-3 +version: 5.2.3-4 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: mobilizon - externalDnsDomain: '{{ .cloud.domain }}' domain: mobilizon.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi instanceName: Mobilizon instanceEmail: '{{ .operator.email }}' @@ -21,10 +19,10 @@ defaultConfig: user: '{{ .apps.smtp.user }}' from: '{{ .apps.smtp.from }}' defaultSecrets: - - key: dbPassword - - key: secretKeyBase - - key: secretKey - - key: smtpPassword +- key: dbPassword +- key: secretKeyBase +- key: secretKey +- key: smtpPassword requiredSecrets: - - postgres.password - - smtp.password +- postgres.password +- smtp.password diff --git a/moodle/versions/4/ingress.yaml b/moodle/versions/4/ingress.yaml index 1819ab8..2d09144 100644 --- a/moodle/versions/4/ingress.yaml +++ b/moodle/versions/4/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: moodle namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: moodle port: number: 8080 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/moodle/versions/4/manifest.yaml b/moodle/versions/4/manifest.yaml index c47038e..02226ca 100644 --- a/moodle/versions/4/manifest.yaml +++ b/moodle/versions/4/manifest.yaml @@ -1,19 +1,17 @@ -version: 4.5.2-3 +version: 4.5.2-4 requires: - - name: mysql +- name: mysql defaultConfig: namespace: moodle domain: moodle.{{ .cloud.domain }} - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: - host: "{{ .apps.mysql.host }}" - port: "3306" + host: '{{ .apps.mysql.host }}' + port: '3306' name: moodle user: moodle defaultSecrets: - - key: dbPassword - - key: adminPassword +- key: dbPassword +- key: adminPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/mysql/versions/9/manifest.yaml b/mysql/versions/9/manifest.yaml index 3181e77..90448a0 100644 --- a/mysql/versions/9/manifest.yaml +++ b/mysql/versions/9/manifest.yaml @@ -1,5 +1,4 @@ -version: 9.1.0-3 -requires: [] +version: 9.1.0-4 defaultConfig: namespace: mysql host: mysql.mysql.svc.cluster.local @@ -7,5 +6,5 @@ defaultConfig: dbName: mysql user: mysql defaultSecrets: - - key: rootPassword - - key: password +- key: rootPassword +- key: password diff --git a/nextcloud/versions/34/ingress.yaml b/nextcloud/versions/34/ingress.yaml index da06b6b..c8fb2fe 100644 --- a/nextcloud/versions/34/ingress.yaml +++ b/nextcloud/versions/34/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: nextcloud namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: nextcloud port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/nextcloud/versions/34/manifest.yaml b/nextcloud/versions/34/manifest.yaml index 0b0c99c..d872000 100644 --- a/nextcloud/versions/34/manifest.yaml +++ b/nextcloud/versions/34/manifest.yaml @@ -1,12 +1,10 @@ -version: 34.0.0-1 +version: 34.0.0-2 requires: - - name: postgres - - name: redis +- name: postgres +- name: redis defaultConfig: namespace: nextcloud - externalDnsDomain: '{{ .cloud.domain }}' domain: nextcloud.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 5Gi adminUser: admin db: @@ -17,10 +15,11 @@ defaultConfig: redis: host: '{{ .apps.redis.host }}' defaultSecrets: - - key: adminPassword - - key: dbPassword - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' +- key: adminPassword +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/nocodb/versions/2026/ingress.yaml b/nocodb/versions/2026/ingress.yaml index 04c52e4..f6bd917 100644 --- a/nocodb/versions/2026/ingress.yaml +++ b/nocodb/versions/2026/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: nocodb namespace: nocodb - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: nocodb port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/nocodb/versions/2026/manifest.yaml b/nocodb/versions/2026/manifest.yaml index 374b9a4..14afefb 100644 --- a/nocodb/versions/2026/manifest.yaml +++ b/nocodb/versions/2026/manifest.yaml @@ -1,11 +1,9 @@ -version: 2026.04.1-1 +version: 2026.04.1-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: nocodb - externalDnsDomain: '{{ .cloud.domain }}' domain: nocodb.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi db: host: '{{ .apps.postgres.host }}' @@ -13,9 +11,10 @@ defaultConfig: name: nocodb user: nocodb defaultSecrets: - - key: dbPassword - - key: ncAuthJwtSecret - - key: dbUrl - default: 'pg://{{ .app.db.host }}:{{ .app.db.port }}?u={{ .app.db.user }}&p={{ .secrets.dbPassword }}&d={{ .app.db.name }}' +- key: dbPassword +- key: ncAuthJwtSecret +- key: dbUrl + default: pg://{{ .app.db.host }}:{{ .app.db.port }}?u={{ .app.db.user }}&p={{ .secrets.dbPassword + }}&d={{ .app.db.name }} requiredSecrets: - - postgres.password +- postgres.password diff --git a/odoo/versions/18/ingress.yaml b/odoo/versions/18/ingress.yaml index 48b6a02..7023043 100644 --- a/odoo/versions/18/ingress.yaml +++ b/odoo/versions/18/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: odoo namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: odoo port: number: 8069 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/odoo/versions/18/manifest.yaml b/odoo/versions/18/manifest.yaml index 1116054..8f70d1b 100644 --- a/odoo/versions/18/manifest.yaml +++ b/odoo/versions/18/manifest.yaml @@ -1,19 +1,17 @@ -version: 18.0-2 +version: 18.0-3 requires: - - name: postgres +- name: postgres defaultConfig: namespace: odoo - externalDnsDomain: "{{ .cloud.domain }}" domain: odoo.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: - host: "{{ .apps.postgres.host }}" - port: "{{ .apps.postgres.port }}" + host: '{{ .apps.postgres.host }}' + port: '{{ .apps.postgres.port }}' name: odoo user: odoo defaultSecrets: - - key: dbPassword - - key: adminPassword +- key: dbPassword +- key: adminPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/ohmyform/versions/1/ingress.yaml b/ohmyform/versions/1/ingress.yaml index 384cf1d..8ca6347 100644 --- a/ohmyform/versions/1/ingress.yaml +++ b/ohmyform/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: ohmyform namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -27,7 +23,3 @@ spec: name: ohmyform-ui port: number: 4000 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/ohmyform/versions/1/manifest.yaml b/ohmyform/versions/1/manifest.yaml index 840e992..bd700c6 100644 --- a/ohmyform/versions/1/manifest.yaml +++ b/ohmyform/versions/1/manifest.yaml @@ -1,26 +1,25 @@ -version: 1.0.3-2 +version: 1.0.3-3 requires: - - name: postgres - - name: redis +- name: postgres +- name: redis defaultConfig: namespace: ohmyform - externalDnsDomain: "{{ .cloud.domain }}" domain: ohmyform.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls - adminEmail: "{{ .operator.email }}" + adminEmail: '{{ .operator.email }}' db: - host: "{{ .apps.postgres.host }}" - port: "{{ .apps.postgres.port }}" + host: '{{ .apps.postgres.host }}' + port: '{{ .apps.postgres.port }}' name: ohmyform user: ohmyform redis: - host: "{{ .apps.redis.host }}" + host: '{{ .apps.redis.host }}' defaultSecrets: - - key: dbPassword - - key: dbUrl - default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" - - key: secretKey - - key: adminPassword +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: secretKey +- key: adminPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/open-webui/versions/0/ingress.yaml b/open-webui/versions/0/ingress.yaml index 6de69a0..b10c028 100644 --- a/open-webui/versions/0/ingress.yaml +++ b/open-webui/versions/0/ingress.yaml @@ -3,10 +3,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: open-webui - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - traefik.ingress.kubernetes.io/router.middlewares: crowdsec-crowdsec-bouncer@kubernetescrd,crowdsec-rate-limit@kubernetescrd spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: open-webui port: number: 80 - tls: - - secretName: wildcard-wild-cloud-tls - hosts: - - {{ .domain }} \ No newline at end of file diff --git a/open-webui/versions/0/manifest.yaml b/open-webui/versions/0/manifest.yaml index d4afa58..b33516f 100644 --- a/open-webui/versions/0/manifest.yaml +++ b/open-webui/versions/0/manifest.yaml @@ -1,13 +1,11 @@ -version: 0.9.5-4 -requires: [] +version: 0.9.5-5 defaultConfig: namespace: open-webui - externalDnsDomain: '{{ .cloud.domain }}' storage: 2Gi domain: chat.{{ .cloud.domain }} vllmApiUrl: http://vllm-service.llm.svc.cluster.local:8000/v1 adminEmail: '{{ .operator.email }}' defaultSecrets: - - key: secretKey - - key: adminPassword - - key: vllmApiKey +- key: secretKey +- key: adminPassword +- key: vllmApiKey diff --git a/openproject/versions/16/ingress.yaml b/openproject/versions/16/ingress.yaml index 1688819..d6fac30 100644 --- a/openproject/versions/16/ingress.yaml +++ b/openproject/versions/16/ingress.yaml @@ -4,15 +4,8 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: openproject - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: ingressClassName: traefik - tls: - - hosts: - - "{{ .domain }}" - secretName: "wildcard-wild-cloud-tls" rules: - host: "{{ .domain }}" http: diff --git a/openproject/versions/16/manifest.yaml b/openproject/versions/16/manifest.yaml index 9b3ec41..4ca2036 100644 --- a/openproject/versions/16/manifest.yaml +++ b/openproject/versions/16/manifest.yaml @@ -1,15 +1,13 @@ -version: 16.1.1-4 +version: 16.1.1-5 requires: - - name: postgres - - name: memcached +- name: postgres +- name: memcached defaultConfig: namespace: openproject - externalDnsDomain: '{{ .cloud.domain }}' storage: 2Gi adminUserName: OpenProject Admin adminUserEmail: '{{ .operator.email }}' domain: openproject.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls db: host: '{{ .apps.postgres.host }}' port: '{{ .apps.postgres.port }}' @@ -19,7 +17,7 @@ defaultConfig: host: '{{ .apps.memcached.host }}' port: '{{ .apps.memcached.port }}' defaultSecrets: - - key: dbPassword - - key: adminPassword +- key: dbPassword +- key: adminPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/outline/versions/1/ingress.yaml b/outline/versions/1/ingress.yaml index 0378eb0..d792238 100644 --- a/outline/versions/1/ingress.yaml +++ b/outline/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: outline namespace: outline - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: outline port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/outline/versions/1/manifest.yaml b/outline/versions/1/manifest.yaml index 5a1e050..71100ae 100644 --- a/outline/versions/1/manifest.yaml +++ b/outline/versions/1/manifest.yaml @@ -1,13 +1,11 @@ -version: 1.8.1-1 +version: 1.8.1-2 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: outline - externalDnsDomain: '{{ .cloud.domain }}' domain: outline.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -22,13 +20,14 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: utilsSecret - - key: secretKey - default: '{{ crypto.SHA256 .secrets.utilsSecret }}' - - key: dbPassword - - key: dbUrl - default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' - - key: smtpPassword +- key: utilsSecret +- key: secretKey + default: '{{ crypto.SHA256 .secrets.utilsSecret }}' +- key: dbPassword +- key: dbUrl + default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: smtpPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/peertube/versions/8/ingress.yaml b/peertube/versions/8/ingress.yaml index 82f057e..0d0d2f1 100644 --- a/peertube/versions/8/ingress.yaml +++ b/peertube/versions/8/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: peertube namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: peertube port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/peertube/versions/8/manifest.yaml b/peertube/versions/8/manifest.yaml index 0f09cdf..b298c38 100644 --- a/peertube/versions/8/manifest.yaml +++ b/peertube/versions/8/manifest.yaml @@ -1,13 +1,11 @@ -version: 8.2.1-1 +version: 8.2.1-2 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: peertube - externalDnsDomain: '{{ .cloud.domain }}' domain: peertube.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 5Gi db: host: '{{ .apps.postgres.host }}' @@ -22,12 +20,13 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: adminPassword - - key: secretKey - - key: dbPassword - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' - - key: smtpPassword +- key: adminPassword +- key: secretKey +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: smtpPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/pixelfed/versions/0/ingress.yaml b/pixelfed/versions/0/ingress.yaml index 4010f68..0c92ce8 100644 --- a/pixelfed/versions/0/ingress.yaml +++ b/pixelfed/versions/0/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: pixelfed namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: pixelfed port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/pixelfed/versions/0/manifest.yaml b/pixelfed/versions/0/manifest.yaml index eb09287..12e0d4f 100644 --- a/pixelfed/versions/0/manifest.yaml +++ b/pixelfed/versions/0/manifest.yaml @@ -1,13 +1,11 @@ -version: 0.12.7-1 +version: 0.12.7-2 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: pixelfed - externalDnsDomain: '{{ .cloud.domain }}' domain: pixelfed.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -22,11 +20,12 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: appKey - - key: dbPassword - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' - - key: smtpPassword +- key: appKey +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: smtpPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/plausible/versions/3/ingress.yaml b/plausible/versions/3/ingress.yaml index c167041..44b9387 100644 --- a/plausible/versions/3/ingress.yaml +++ b/plausible/versions/3/ingress.yaml @@ -2,19 +2,8 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: plausible - annotations: - traefik.ingress.kubernetes.io/router.entrypoints: websecure - traefik.ingress.kubernetes.io/router.tls: "true" - traefik.ingress.kubernetes.io/router.middlewares: plausible-private-network-access@kubernetescrd - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: diff --git a/plausible/versions/3/kustomization.yaml b/plausible/versions/3/kustomization.yaml index e3df0dc..f146db5 100644 --- a/plausible/versions/3/kustomization.yaml +++ b/plausible/versions/3/kustomization.yaml @@ -16,5 +16,4 @@ resources: - service-clickhouse.yaml - deployment.yaml - service.yaml - - middleware.yaml - ingress.yaml diff --git a/plausible/versions/3/manifest.yaml b/plausible/versions/3/manifest.yaml index 7e82a90..4280333 100644 --- a/plausible/versions/3/manifest.yaml +++ b/plausible/versions/3/manifest.yaml @@ -1,11 +1,9 @@ -version: v3.2.1-1 +version: v3.2.1-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: plausible - externalDnsDomain: '{{ .cloud.domain }}' domain: plausible.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls plausibleStorage: 1Gi clickhouseStorage: 10Gi db: @@ -15,19 +13,20 @@ defaultConfig: user: plausible clickhouse: host: clickhouse - port: "8123" + port: '8123' db: plausible_events_db - disableRegistration: "false" + disableRegistration: 'false' central: headers: response: Access-Control-Allow-Private-Network: 'true' defaultSecrets: - - key: dbPassword - - key: secretKeySeed - - key: secretKeyBase - default: '{{ crypto.SHA256 .secrets.secretKeySeed }}' - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' +- key: dbPassword +- key: secretKeySeed +- key: secretKeyBase + default: '{{ crypto.SHA256 .secrets.secretKeySeed }}' +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable requiredSecrets: - - postgres.password +- postgres.password diff --git a/plausible/versions/3/middleware.yaml b/plausible/versions/3/middleware.yaml deleted file mode 100644 index 76db582..0000000 --- a/plausible/versions/3/middleware.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: traefik.io/v1alpha1 -kind: Middleware -metadata: - name: private-network-access -spec: - headers: - customResponseHeaders: - Access-Control-Allow-Private-Network: "true" diff --git a/polis/versions/dev/ingress.yaml b/polis/versions/dev/ingress.yaml index e61834b..edce341 100644 --- a/polis/versions/dev/ingress.yaml +++ b/polis/versions/dev/ingress.yaml @@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: polis - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -19,7 +15,3 @@ spec: name: polis-file-server port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/polis/versions/dev/manifest.yaml b/polis/versions/dev/manifest.yaml index e80a01f..1846eba 100644 --- a/polis/versions/dev/manifest.yaml +++ b/polis/versions/dev/manifest.yaml @@ -1,11 +1,9 @@ -version: 2025.06-1 +version: 2025.06-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: polis domain: polis.{{ .cloud.domain }} - externalDnsDomain: '{{ .cloud.domain }}' - tlsSecretName: wildcard-wild-cloud-tls adminEmail: '{{ .operator.email }}' db: host: '{{ .apps.postgres.host }}' @@ -13,11 +11,12 @@ defaultConfig: name: polis user: polis defaultSecrets: - - key: dbPassword - - key: dbUrl - default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" - - key: loginCodePepper - - key: jwtPrivateKey - - key: jwtPublicKey +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: loginCodePepper +- key: jwtPrivateKey +- key: jwtPublicKey requiredSecrets: - - postgres.password +- postgres.password diff --git a/postgres/versions/1/manifest.yaml b/postgres/versions/1/manifest.yaml index df113e1..b32dc9e 100644 --- a/postgres/versions/1/manifest.yaml +++ b/postgres/versions/1/manifest.yaml @@ -1,4 +1,4 @@ -version: 1.0.0-6 +version: 1.0.0-7 defaultConfig: namespace: postgres host: postgres.postgres.svc.cluster.local @@ -7,4 +7,4 @@ defaultConfig: user: postgres storage: 2Gi defaultSecrets: - - key: password +- key: password diff --git a/pretix/versions/2026/ingress.yaml b/pretix/versions/2026/ingress.yaml index 8217f25..50ac9dd 100644 --- a/pretix/versions/2026/ingress.yaml +++ b/pretix/versions/2026/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: pretix namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: pretix port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/pretix/versions/2026/manifest.yaml b/pretix/versions/2026/manifest.yaml index 38d2e48..640ef3a 100644 --- a/pretix/versions/2026/manifest.yaml +++ b/pretix/versions/2026/manifest.yaml @@ -1,13 +1,11 @@ -version: 2026.5.1-1 +version: 2026.5.1-2 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: pretix - externalDnsDomain: '{{ .cloud.domain }}' domain: pretix.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi currency: EUR timezone: UTC @@ -25,9 +23,9 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: dbPassword - - key: djangoSecret - - key: smtpPassword +- key: dbPassword +- key: djangoSecret +- key: smtpPassword requiredSecrets: - - postgres.password - - redis.password +- postgres.password +- redis.password diff --git a/redis/versions/1/manifest.yaml b/redis/versions/1/manifest.yaml index 2330501..5a5a44b 100644 --- a/redis/versions/1/manifest.yaml +++ b/redis/versions/1/manifest.yaml @@ -1,8 +1,8 @@ -version: 1.0.0-3 +version: 1.0.0-4 defaultConfig: namespace: redis host: redis.redis.svc.cluster.local port: 6379 uri: redis://{{ .app.host }}:{{ .app.port }}/0 defaultSecrets: - - key: password +- key: password diff --git a/smtp/versions/1/manifest.yaml b/smtp/versions/1/manifest.yaml index 28ea264..f5a1daa 100644 --- a/smtp/versions/1/manifest.yaml +++ b/smtp/versions/1/manifest.yaml @@ -1,10 +1,10 @@ -version: 1.0.0-2 +version: 1.0.0-3 defaultConfig: - host: "" - port: "465" - user: "" - from: "no-reply@{{ .cloud.domain }}" - tls: "true" - startTls: "true" + host: '' + port: '465' + user: '' + from: no-reply@{{ .cloud.domain }} + tls: 'true' + startTls: 'true' defaultSecrets: - - key: password +- key: password diff --git a/supabase/versions/1/ingress.yaml b/supabase/versions/1/ingress.yaml index 63aafc2..8f6a41f 100644 --- a/supabase/versions/1/ingress.yaml +++ b/supabase/versions/1/ingress.yaml @@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: supabase - annotations: - external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}" - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -19,7 +15,3 @@ spec: name: kong port: number: 8000 - tls: - - hosts: - - "{{ .domain }}" - secretName: "{{ .tlsSecretName }}" diff --git a/supabase/versions/1/manifest.yaml b/supabase/versions/1/manifest.yaml index 56a327f..d31c337 100644 --- a/supabase/versions/1/manifest.yaml +++ b/supabase/versions/1/manifest.yaml @@ -1,56 +1,59 @@ -version: 2026.07.02 +version: 2026.07.02-1 requires: - - name: smtp +- name: smtp defaultConfig: namespace: supabase domain: supabase.{{ .cloud.domain }} - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls dbStorage: 10Gi fileStorage: 5Gi db: host: db name: postgres user: supabase_admin - jwtExpiry: "3600" - siteUrl: "https://supabase.{{ .cloud.domain }}" - defaultOrg: "Default Organization" - defaultProject: "Default Project" + jwtExpiry: '3600' + siteUrl: https://supabase.{{ .cloud.domain }} + defaultOrg: Default Organization + defaultProject: Default Project dashboardUsername: supabase smtp: - host: "{{ .apps.smtp.host }}" - port: "{{ .apps.smtp.port }}" - user: "{{ .apps.smtp.user }}" - from: "{{ .apps.smtp.from }}" + host: '{{ .apps.smtp.host }}' + port: '{{ .apps.smtp.port }}' + user: '{{ .apps.smtp.user }}' + from: '{{ .apps.smtp.from }}' defaultSecrets: - - key: dbPassword - - key: dashboardPassword - - key: jwtSecret - default: "your-super-secret-jwt-token-with-at-least-32-characters-long" - - key: anonKey - default: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJhbm9uIiwKICAgICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsCiAgICAiaWF0IjogMTY0MTc2OTIwMCwKICAgICJleHAiOiAxNzk5NTM1NjAwCn0.dc_X5iR_VP_qT0zsiyj_I_OZ2T9FtRU2BBNWN8Bu4GE" - - key: serviceRoleKey - default: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJzZXJ2aWNlX3JvbGUiLAogICAgImlzcyI6ICJzdXBhYmFzZS1kZW1vIiwKICAgICJpYXQiOiAxNjQxNzY5MjAwLAogICAgImV4cCI6IDE3OTk1MzU2MDAKfQ.DaYlNEoUrrEn2Ig7tqibS-PHK5vgusbcbo7X36XVt4Q" - - key: secretKeyBase - default: "UpNVntn3cDxHJpq99YMc1T1AQgQpc8kfYTuRgBiYa15BLrx8etQoXz3gZv1/u2oq" - - key: realtimeEncKey - default: "supabaserealtime" - - key: vaultEncKey - default: '{{ crypto.SHA256 .secrets.jwtSecret }}' - - key: pgMetaCryptoKey - default: '{{ crypto.SHA256 .secrets.dbPassword }}' - - key: dbUrlAuth - default: "postgres://supabase_auth_admin:{{ .secrets.dbPassword }}@{{ .app.db.host }}:5432/{{ .app.db.name }}?sslmode=disable" - - key: dbUrlStorage - default: "postgres://supabase_storage_admin:{{ .secrets.dbPassword }}@{{ .app.db.host }}:5432/{{ .app.db.name }}?sslmode=disable" - - key: dbUrlRest - default: "postgres://authenticator:{{ .secrets.dbPassword }}@{{ .app.db.host }}:5432/{{ .app.db.name }}?sslmode=disable" +- key: dbPassword +- key: dashboardPassword +- key: jwtSecret + default: your-super-secret-jwt-token-with-at-least-32-characters-long +- key: anonKey + default: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJhbm9uIiwKICAgICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsCiAgICAiaWF0IjogMTY0MTc2OTIwMCwKICAgICJleHAiOiAxNzk5NTM1NjAwCn0.dc_X5iR_VP_qT0zsiyj_I_OZ2T9FtRU2BBNWN8Bu4GE +- key: serviceRoleKey + default: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJzZXJ2aWNlX3JvbGUiLAogICAgImlzcyI6ICJzdXBhYmFzZS1kZW1vIiwKICAgICJpYXQiOiAxNjQxNzY5MjAwLAogICAgImV4cCI6IDE3OTk1MzU2MDAKfQ.DaYlNEoUrrEn2Ig7tqibS-PHK5vgusbcbo7X36XVt4Q +- key: secretKeyBase + default: UpNVntn3cDxHJpq99YMc1T1AQgQpc8kfYTuRgBiYa15BLrx8etQoXz3gZv1/u2oq +- key: realtimeEncKey + default: supabaserealtime +- key: vaultEncKey + default: '{{ crypto.SHA256 .secrets.jwtSecret }}' +- key: pgMetaCryptoKey + default: '{{ crypto.SHA256 .secrets.dbPassword }}' +- key: dbUrlAuth + default: postgres://supabase_auth_admin:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:5432/{{ .app.db.name }}?sslmode=disable +- key: dbUrlStorage + default: postgres://supabase_storage_admin:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:5432/{{ .app.db.name }}?sslmode=disable +- key: dbUrlRest + default: postgres://authenticator:{{ .secrets.dbPassword }}@{{ .app.db.host }}:5432/{{ + .app.db.name }}?sslmode=disable requiredSecrets: - - smtp.password +- smtp.password scripts: - - name: generate-keys - path: scripts/generate-keys.sh - description: "Generate new JWT secret and API keys. Run this before going to production to replace the default example keys." - params: - - name: JWT_SECRET - description: "Optional: provide your own JWT secret (min 32 chars). Leave blank to auto-generate." +- name: generate-keys + path: scripts/generate-keys.sh + description: Generate new JWT secret and API keys. Run this before going to production + to replace the default example keys. + params: + - name: JWT_SECRET + description: 'Optional: provide your own JWT secret (min 32 chars). Leave blank + to auto-generate.' diff --git a/synapse/versions/v1/manifest.yaml b/synapse/versions/v1/manifest.yaml index 2bb37ab..50de424 100644 --- a/synapse/versions/v1/manifest.yaml +++ b/synapse/versions/v1/manifest.yaml @@ -1,16 +1,14 @@ -version: v1.144.0-12 +version: v1.144.0-13 requires: - - name: postgres - - name: redis - - name: smtp +- name: postgres +- name: redis +- name: smtp defaultConfig: namespace: synapse - externalDnsDomain: '{{ .cloud.domain }}' storage: 2Gi mediaStorage: 2Gi serverName: '{{ .cloud.domain }}' domain: synapse.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls enableRegistration: false db: host: '{{ .apps.postgres.host }}' @@ -26,29 +24,29 @@ defaultConfig: requireTls: '{{ .apps.smtp.tls }}' central: extraDomains: - - domain: '{{ .cloud.baseDomain }}' - paths: - - /.well-known/matrix - - /_matrix + - domain: '{{ .cloud.baseDomain }}' + paths: + - /.well-known/matrix + - /_matrix defaultSecrets: - - key: dbPassword - - key: registrationSharedSecret - - key: macaroonSecretKey - - key: formSecret +- key: dbPassword +- key: registrationSharedSecret +- key: macaroonSecretKey +- key: formSecret requiredSecrets: - - postgres.password - - redis.password - - smtp.password +- postgres.password +- redis.password +- smtp.password scripts: - - name: create-user - path: scripts/create-user.sh - description: "Create a Matrix user on this Synapse homeserver." - params: - - name: USERNAME - description: Matrix localpart (e.g. alice) - required: true - - name: ADMIN - description: Create as server admin (true or false) - required: true - - name: PASSWORD - description: Password (leave blank to generate a random one) +- name: create-user + path: scripts/create-user.sh + description: Create a Matrix user on this Synapse homeserver. + params: + - name: USERNAME + description: Matrix localpart (e.g. alice) + required: true + - name: ADMIN + description: Create as server admin (true or false) + required: true + - name: PASSWORD + description: Password (leave blank to generate a random one) diff --git a/syncthing-discovery/versions/1/ingress.yaml b/syncthing-discovery/versions/1/ingress.yaml index 5be965c..fbfbd47 100644 --- a/syncthing-discovery/versions/1/ingress.yaml +++ b/syncthing-discovery/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: syncthing-discovery namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: syncthing-discovery port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/syncthing-discovery/versions/1/manifest.yaml b/syncthing-discovery/versions/1/manifest.yaml index d8146ec..54f9d8d 100644 --- a/syncthing-discovery/versions/1/manifest.yaml +++ b/syncthing-discovery/versions/1/manifest.yaml @@ -1,7 +1,5 @@ -version: 2.1.1 +version: 2.1.1-1 defaultConfig: namespace: syncthing-discovery domain: discosrv.{{ .cloud.domain }} - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi diff --git a/syncthing-relay/versions/1/ingress.yaml b/syncthing-relay/versions/1/ingress.yaml index 8838796..e5d1857 100644 --- a/syncthing-relay/versions/1/ingress.yaml +++ b/syncthing-relay/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: syncthing-relay namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: syncthing-relay-status port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/syncthing-relay/versions/1/manifest.yaml b/syncthing-relay/versions/1/manifest.yaml index f8c8419..6dbddee 100644 --- a/syncthing-relay/versions/1/manifest.yaml +++ b/syncthing-relay/versions/1/manifest.yaml @@ -1,8 +1,6 @@ -version: 2.1.1 +version: 2.1.1-1 defaultConfig: namespace: syncthing-relay domain: relay.{{ .cloud.domain }} - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls - externalAddress: "{{ .cloud.domain }}:22067" + externalAddress: '{{ .cloud.domain }}:22067' storage: 100Mi diff --git a/taiga/versions/6/ingress.yaml b/taiga/versions/6/ingress.yaml index af257d5..6e1a5ac 100644 --- a/taiga/versions/6/ingress.yaml +++ b/taiga/versions/6/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: taiga namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: taiga-gateway port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/taiga/versions/6/manifest.yaml b/taiga/versions/6/manifest.yaml index 525161b..e2d8e37 100644 --- a/taiga/versions/6/manifest.yaml +++ b/taiga/versions/6/manifest.yaml @@ -1,30 +1,28 @@ -version: 6.10.3-2 +version: 6.10.3-3 requires: - - name: postgres +- name: postgres defaultConfig: namespace: taiga - externalDnsDomain: "{{ .cloud.domain }}" domain: taiga.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls mediaStorage: 2Gi staticStorage: 2Gi db: - host: "{{ .apps.postgres.host }}" - port: "{{ .apps.postgres.port }}" + host: '{{ .apps.postgres.host }}' + port: '{{ .apps.postgres.port }}' name: taiga user: taiga smtp: - host: "" - port: "587" - user: "" + host: '' + port: '587' + user: '' from: taiga@{{ .cloud.domain }} - tls: "True" - ssl: "False" + tls: 'True' + ssl: 'False' defaultSecrets: - - key: secretKey - - key: dbPassword - - key: rabbitmqPassword - - key: rabbitmqErlangCookie - - key: smtpPassword +- key: secretKey +- key: dbPassword +- key: rabbitmqPassword +- key: rabbitmqErlangCookie +- key: smtpPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/typebot/versions/3/ingress.yaml b/typebot/versions/3/ingress.yaml index b32682f..abc4804 100644 --- a/typebot/versions/3/ingress.yaml +++ b/typebot/versions/3/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: typebot-builder namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,20 +16,12 @@ spec: name: typebot-builder port: number: 80 - tls: - - hosts: - - {{ .builderDomain }} - secretName: {{ .tlsSecretName }} --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: typebot-viewer namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -47,7 +35,3 @@ spec: name: typebot-viewer port: number: 80 - tls: - - hosts: - - {{ .viewerDomain }} - secretName: {{ .tlsSecretName }} diff --git a/typebot/versions/3/manifest.yaml b/typebot/versions/3/manifest.yaml index c95318d..7a1e8b9 100644 --- a/typebot/versions/3/manifest.yaml +++ b/typebot/versions/3/manifest.yaml @@ -1,13 +1,11 @@ -version: 3.17.1-1 +version: 3.17.1-2 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: typebot - externalDnsDomain: '{{ .cloud.domain }}' builderDomain: typebot.{{ .cloud.domain }} viewerDomain: bot.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -21,11 +19,12 @@ defaultConfig: from: '{{ .apps.smtp.from }}' user: '{{ .apps.smtp.user }}' defaultSecrets: - - key: nextauthSecret - - key: encryptionSecret - - key: dbPassword - - key: dbUrl - default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable' - - key: smtpPassword +- key: nextauthSecret +- key: encryptionSecret +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: smtpPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/umap/versions/3/ingress.yaml b/umap/versions/3/ingress.yaml index 2bfa4ea..f7e6a11 100644 --- a/umap/versions/3/ingress.yaml +++ b/umap/versions/3/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: umap namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: umap port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/umap/versions/3/manifest.yaml b/umap/versions/3/manifest.yaml index 5853166..df68457 100644 --- a/umap/versions/3/manifest.yaml +++ b/umap/versions/3/manifest.yaml @@ -1,11 +1,9 @@ -version: 3.7.3-1 +version: 3.7.3-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: umap - externalDnsDomain: '{{ .cloud.domain }}' domain: umap.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.postgres.host }}' @@ -13,9 +11,10 @@ defaultConfig: name: umap user: umap defaultSecrets: - - key: dbPassword - - key: secretKey - - key: databaseUrl - default: 'postgis://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}' +- key: dbPassword +- key: secretKey +- key: databaseUrl + default: postgis://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }} requiredSecrets: - - postgres.password +- postgres.password diff --git a/ushahidi/versions/5/ingress.yaml b/ushahidi/versions/5/ingress.yaml index f722eda..820359e 100644 --- a/ushahidi/versions/5/ingress.yaml +++ b/ushahidi/versions/5/ingress.yaml @@ -3,18 +3,8 @@ kind: Ingress metadata: name: ushahidi-client namespace: ushahidi - annotations: - traefik.ingress.kubernetes.io/router.entrypoints: websecure - traefik.ingress.kubernetes.io/router.tls: "true" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .domain }} http: @@ -32,18 +22,8 @@ kind: Ingress metadata: name: ushahidi-api namespace: ushahidi - annotations: - traefik.ingress.kubernetes.io/router.entrypoints: websecure - traefik.ingress.kubernetes.io/router.tls: "true" - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik - tls: - - hosts: - - {{ .apiDomain }} - secretName: {{ .tlsSecretName }} rules: - host: {{ .apiDomain }} http: diff --git a/ushahidi/versions/5/manifest.yaml b/ushahidi/versions/5/manifest.yaml index 19e87a8..1410500 100644 --- a/ushahidi/versions/5/manifest.yaml +++ b/ushahidi/versions/5/manifest.yaml @@ -1,12 +1,10 @@ -version: 5.1.0-2 +version: 5.1.0-3 requires: - - name: mysql +- name: mysql defaultConfig: namespace: ushahidi - externalDnsDomain: '{{ .cloud.domain }}' domain: ushahidi.{{ .cloud.domain }} apiDomain: ushahidi-api.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 2Gi db: host: '{{ .apps.mysql.host }}' @@ -17,7 +15,7 @@ defaultConfig: host: ushahidi-redis port: '6379' defaultSecrets: - - key: appKey - - key: dbPassword +- key: appKey +- key: dbPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/utils/versions/v1/manifest.yaml b/utils/versions/v1/manifest.yaml index 9dcb6de..547c75d 100644 --- a/utils/versions/v1/manifest.yaml +++ b/utils/versions/v1/manifest.yaml @@ -1,4 +1,4 @@ -version: v1.0.1-1 +version: v1.0.1-2 deploymentName: netdebug defaultConfig: namespace: debug diff --git a/vaultwarden/versions/1/ingress.yaml b/vaultwarden/versions/1/ingress.yaml index 927944b..b8d1a1d 100644 --- a/vaultwarden/versions/1/ingress.yaml +++ b/vaultwarden/versions/1/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: vaultwarden namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: vaultwarden port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/vaultwarden/versions/1/manifest.yaml b/vaultwarden/versions/1/manifest.yaml index 22b226c..3808051 100644 --- a/vaultwarden/versions/1/manifest.yaml +++ b/vaultwarden/versions/1/manifest.yaml @@ -1,14 +1,12 @@ -version: 1.36.0 +version: 1.36.0-1 requires: - - name: postgres - - name: smtp +- name: postgres +- name: smtp defaultConfig: namespace: vaultwarden - externalDnsDomain: '{{ .cloud.domain }}' domain: vaultwarden.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi - signupsAllowed: "true" + signupsAllowed: 'true' db: host: '{{ .apps.postgres.host }}' port: '{{ .apps.postgres.port }}' @@ -21,10 +19,11 @@ defaultConfig: user: '{{ .apps.smtp.user }}' security: starttls defaultSecrets: - - key: dbPassword - - key: dbUrl - default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable" - - key: adminToken +- key: dbPassword +- key: dbUrl + default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host + }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable +- key: adminToken requiredSecrets: - - postgres.password - - smtp.password +- postgres.password +- smtp.password diff --git a/vllm/versions/0/ingress.yaml b/vllm/versions/0/ingress.yaml index b5d5dbc..d0e835a 100644 --- a/vllm/versions/0/ingress.yaml +++ b/vllm/versions/0/ingress.yaml @@ -2,11 +2,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: vllm - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - traefik.ingress.kubernetes.io/router.tls: "true" - traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt spec: ingressClassName: traefik rules: @@ -20,7 +15,3 @@ spec: name: vllm port: number: 8000 - tls: - - hosts: - - {{ .domain }} - secretName: vllm-tls \ No newline at end of file diff --git a/vllm/versions/0/manifest.yaml b/vllm/versions/0/manifest.yaml index 4d7b4ed..b5e898e 100644 --- a/vllm/versions/0/manifest.yaml +++ b/vllm/versions/0/manifest.yaml @@ -1,5 +1,4 @@ -version: 0.5.4-6 -requires: [] +version: 0.5.4-7 defaultConfig: namespace: llm model: Qwen/Qwen2.5-7B-Instruct @@ -11,6 +10,5 @@ defaultConfig: memoryLimit: 24Gi gpuCount: 1 domain: vllm.{{ .cloud.domain }} - externalDnsDomain: "{{ .cloud.domain }}" defaultSecrets: - - key: apiKey +- key: apiKey diff --git a/wikijs/versions/2/ingress.yaml b/wikijs/versions/2/ingress.yaml index 6788169..f59760c 100644 --- a/wikijs/versions/2/ingress.yaml +++ b/wikijs/versions/2/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: wikijs namespace: wikijs - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: wikijs port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/wikijs/versions/2/manifest.yaml b/wikijs/versions/2/manifest.yaml index e228da8..42d157f 100644 --- a/wikijs/versions/2/manifest.yaml +++ b/wikijs/versions/2/manifest.yaml @@ -1,11 +1,9 @@ -version: 2.5.314-1 +version: 2.5.314-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: wikijs - externalDnsDomain: '{{ .cloud.domain }}' domain: wiki.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi db: host: '{{ .apps.postgres.host }}' @@ -13,6 +11,6 @@ defaultConfig: name: wikijs user: wikijs defaultSecrets: - - key: dbPassword +- key: dbPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/wild-directory-server/versions/1/ingress.yaml b/wild-directory-server/versions/1/ingress.yaml index 2faa386..44914b7 100644 --- a/wild-directory-server/versions/1/ingress.yaml +++ b/wild-directory-server/versions/1/ingress.yaml @@ -2,14 +2,8 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: wild-directory-server - annotations: - external-dns.alpha.kubernetes.io/target: '{{ .externalDnsDomain }}' spec: ingressClassName: traefik - tls: - - hosts: - - '{{ .domain }}' - secretName: '{{ .tlsSecretName }}' rules: - host: '{{ .domain }}' http: diff --git a/wild-directory-server/versions/1/manifest.yaml b/wild-directory-server/versions/1/manifest.yaml index 56fb145..bbd7814 100644 --- a/wild-directory-server/versions/1/manifest.yaml +++ b/wild-directory-server/versions/1/manifest.yaml @@ -1,17 +1,15 @@ -version: 0.2.0-1 +version: 0.2.0-2 requires: - - name: postgres +- name: postgres defaultConfig: namespace: wild-directory-server domain: wild-directory.{{ .cloud.domain }} - externalDnsDomain: '{{ .cloud.domain }}' - tlsSecretName: wildcard-wild-cloud-tls gitUrl: https://git.civilsociety.dev/wild-cloud/wild-directory.git gitBranch: main gitSyncInterval: 5m storage: 1Gi defaultSecrets: - - key: jwtSecret - - key: dbPassword +- key: jwtSecret +- key: dbPassword requiredSecrets: - - postgres.password +- postgres.password diff --git a/writefreely/versions/0/ingress.yaml b/writefreely/versions/0/ingress.yaml index 3769742..eb83c74 100644 --- a/writefreely/versions/0/ingress.yaml +++ b/writefreely/versions/0/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: writefreely namespace: writefreely - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: writefreely port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/writefreely/versions/0/manifest.yaml b/writefreely/versions/0/manifest.yaml index 441238f..6c1af95 100644 --- a/writefreely/versions/0/manifest.yaml +++ b/writefreely/versions/0/manifest.yaml @@ -1,11 +1,9 @@ -version: 0.15.1-2 +version: 0.15.1-3 requires: - - name: mysql +- name: mysql defaultConfig: namespace: writefreely - externalDnsDomain: '{{ .cloud.domain }}' domain: writefreely.{{ .cloud.domain }} - tlsSecretName: wildcard-wild-cloud-tls storage: 1Gi siteName: WriteFreely adminUser: wildadmin @@ -15,7 +13,7 @@ defaultConfig: name: writefreely user: writefreely defaultSecrets: - - key: adminPassword - - key: dbPassword +- key: adminPassword +- key: dbPassword requiredSecrets: - - mysql.rootPassword +- mysql.rootPassword diff --git a/zulip/versions/9/ingress.yaml b/zulip/versions/9/ingress.yaml index 73bd155..dc8da8a 100644 --- a/zulip/versions/9/ingress.yaml +++ b/zulip/versions/9/ingress.yaml @@ -3,10 +3,6 @@ kind: Ingress metadata: name: zulip namespace: {{ .namespace }} - annotations: - external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }} - external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" - external-dns.alpha.kubernetes.io/ttl: "60" spec: ingressClassName: traefik rules: @@ -20,7 +16,3 @@ spec: name: zulip port: number: 80 - tls: - - hosts: - - {{ .domain }} - secretName: {{ .tlsSecretName }} diff --git a/zulip/versions/9/manifest.yaml b/zulip/versions/9/manifest.yaml index 60fdd83..b111dd0 100644 --- a/zulip/versions/9/manifest.yaml +++ b/zulip/versions/9/manifest.yaml @@ -1,17 +1,15 @@ -version: 9.4-3 +version: 9.4-4 requires: - - name: smtp - - name: redis +- name: smtp +- name: redis defaultConfig: namespace: zulip - domain: "zulip.{{ .cloud.domain }}" - externalDnsDomain: "{{ .cloud.domain }}" - tlsSecretName: wildcard-wild-cloud-tls + domain: zulip.{{ .cloud.domain }} storage: 2Gi - adminEmail: "{{ .operator.email }}" + adminEmail: '{{ .operator.email }}' db: host: zulip-postgres.zulip.svc.cluster.local - port: "5432" + port: '5432' name: zulip user: zulip storage: 2Gi @@ -19,19 +17,19 @@ defaultConfig: host: zulip-rabbitmq.zulip.svc.cluster.local user: zulip redis: - host: "{{ .apps.redis.host }}" + host: '{{ .apps.redis.host }}' memcached: host: zulip-memcached.zulip.svc.cluster.local smtp: - host: "{{ .apps.smtp.host }}" - port: "{{ .apps.smtp.port }}" - user: "{{ .apps.smtp.user }}" - from: "{{ .apps.smtp.from }}" + host: '{{ .apps.smtp.host }}' + port: '{{ .apps.smtp.port }}' + user: '{{ .apps.smtp.user }}' + from: '{{ .apps.smtp.from }}' defaultSecrets: - - key: adminPassword - - key: secretKey - - key: postgresPassword - - key: rabbitmqPassword +- key: adminPassword +- key: secretKey +- key: postgresPassword +- key: rabbitmqPassword requiredSecrets: - - smtp.password - - redis.password +- smtp.password +- redis.password