cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (1320B)

      1 apiVersion: helm.toolkit.fluxcd.io/v2
      2 kind: HelmRelease
      3 metadata:
      4   name: zot
      5   namespace: zot
      6 spec:
      7   interval: 30m
      8   chart:
      9     spec:
     10       chart: zot
     11       version: "0.1.x"
     12       sourceRef:
     13         kind: HelmRepository
     14         name: zot
     15         namespace: zot
     16       interval: 24h
     17   install:
     18     remediation:
     19       retries: 3
     20   upgrade:
     21     remediation:
     22       retries: 3
     23   values:
     24     replicaCount: 1
     25 
     26     image:
     27       pullPolicy: IfNotPresent
     28 
     29     service:
     30       type: ClusterIP
     31       port: 5000
     32 
     33     priorityClassName: system-cluster-critical
     34 
     35     resources:
     36       requests:
     37         cpu: 50m
     38         memory: 64Mi
     39       limits:
     40         cpu: "1"
     41         memory: 512Mi
     42 
     43     # Mount zot-secret at /etc/zot — provides config.json (with real S3 creds) and htpasswd
     44     externalSecrets:
     45       - secretName: zot-secret
     46         mountPath: /etc/zot
     47 
     48     # Mount cosign public key into _cosign directory so it persists across pod restarts
     49     extraVolumes:
     50       - name: cosign-pubkey
     51         configMap:
     52           name: zot-cosign-pubkey
     53 
     54     extraVolumeMounts:
     55       - name: cosign-pubkey
     56         mountPath: /var/lib/registry/_cosign/cosign.pub
     57         subPath: cosign.pub
     58 
     59     persistence:
     60       enabled: true
     61       size: 10Gi
     62       storageClass: longhorn
     63       accessMode: ReadWriteOnce
     64       mountPath: /var/lib/registry