fix
This commit is contained in:
@@ -6,21 +6,75 @@ metadata:
|
||||
name: authentik
|
||||
description: authentik is an open-source Identity Provider focused on flexibility and versatility
|
||||
options:
|
||||
domain:
|
||||
default: your-company
|
||||
loglevel:
|
||||
default: info
|
||||
examples:
|
||||
- your-company
|
||||
- info
|
||||
type: string
|
||||
domain-name:
|
||||
default: your_company.com
|
||||
geoip:
|
||||
default: /geoip/GeoLite2-City.mmdb
|
||||
examples:
|
||||
- your_company.com
|
||||
- /geoip/GeoLite2-City.mmdb
|
||||
type: string
|
||||
sub-domain:
|
||||
default: auth
|
||||
ingress-class:
|
||||
default: traefik
|
||||
examples:
|
||||
- auth
|
||||
- traefik
|
||||
type: string
|
||||
backups:
|
||||
default:
|
||||
enable: false
|
||||
endpoint: ''
|
||||
key-id-key: s3-id
|
||||
retention:
|
||||
db: 30d
|
||||
schedule:
|
||||
db: 0 3 * * *
|
||||
secret-key: s3-secret
|
||||
secret-name: backup-settings
|
||||
examples:
|
||||
- enable: false
|
||||
endpoint: ''
|
||||
key-id-key: s3-id
|
||||
retention:
|
||||
db: 30d
|
||||
schedule:
|
||||
db: 0 3 * * *
|
||||
secret-key: s3-secret
|
||||
secret-name: backup-settings
|
||||
properties:
|
||||
enable:
|
||||
default: false
|
||||
type: boolean
|
||||
endpoint:
|
||||
default: ''
|
||||
type: string
|
||||
key-id-key:
|
||||
default: s3-id
|
||||
type: string
|
||||
retention:
|
||||
default:
|
||||
db: 30d
|
||||
properties:
|
||||
db:
|
||||
default: 30d
|
||||
type: string
|
||||
type: object
|
||||
schedule:
|
||||
default:
|
||||
db: 0 3 * * *
|
||||
properties:
|
||||
db:
|
||||
default: 0 3 * * *
|
||||
type: string
|
||||
type: object
|
||||
secret-key:
|
||||
default: s3-secret
|
||||
type: string
|
||||
secret-name:
|
||||
default: backup-settings
|
||||
type: string
|
||||
type: object
|
||||
error_reporting:
|
||||
default:
|
||||
enabled: false
|
||||
@@ -41,49 +95,16 @@ options:
|
||||
default: false
|
||||
type: boolean
|
||||
type: object
|
||||
loglevel:
|
||||
default: info
|
||||
examples:
|
||||
- info
|
||||
type: string
|
||||
admin:
|
||||
default:
|
||||
email: auth-admin
|
||||
examples:
|
||||
- email: auth-admin
|
||||
properties:
|
||||
email:
|
||||
default: auth-admin
|
||||
type: string
|
||||
type: object
|
||||
postgres:
|
||||
default:
|
||||
cleanlogs:
|
||||
image: docker.io/alpine:3.18
|
||||
schedule: 30 5/12 * * *
|
||||
replicas: 1
|
||||
storage: 8Gi
|
||||
version: '14'
|
||||
examples:
|
||||
- cleanlogs:
|
||||
image: docker.io/alpine:3.18
|
||||
schedule: 30 5/12 * * *
|
||||
replicas: 1
|
||||
- replicas: 1
|
||||
storage: 8Gi
|
||||
version: '14'
|
||||
properties:
|
||||
cleanlogs:
|
||||
default:
|
||||
image: docker.io/alpine:3.18
|
||||
schedule: 30 5/12 * * *
|
||||
properties:
|
||||
image:
|
||||
default: docker.io/alpine:3.18
|
||||
type: string
|
||||
schedule:
|
||||
default: 30 5/12 * * *
|
||||
type: string
|
||||
type: object
|
||||
replicas:
|
||||
default: 1
|
||||
type: integer
|
||||
@@ -94,31 +115,6 @@ options:
|
||||
default: '14'
|
||||
type: string
|
||||
type: object
|
||||
email:
|
||||
default:
|
||||
port: 587
|
||||
timeout: 30
|
||||
use_ssl: false
|
||||
use_tls: false
|
||||
examples:
|
||||
- port: 587
|
||||
timeout: 30
|
||||
use_ssl: false
|
||||
use_tls: false
|
||||
properties:
|
||||
port:
|
||||
default: 587
|
||||
type: integer
|
||||
timeout:
|
||||
default: 30
|
||||
type: integer
|
||||
use_ssl:
|
||||
default: false
|
||||
type: boolean
|
||||
use_tls:
|
||||
default: false
|
||||
type: boolean
|
||||
type: object
|
||||
redis:
|
||||
default:
|
||||
exporter:
|
||||
@@ -182,20 +178,60 @@ options:
|
||||
default: 2023.5.4
|
||||
type: string
|
||||
type: object
|
||||
ingress-class:
|
||||
default: traefik
|
||||
domain-name:
|
||||
default: your_company.com
|
||||
examples:
|
||||
- traefik
|
||||
- your_company.com
|
||||
type: string
|
||||
sub-domain:
|
||||
default: auth
|
||||
examples:
|
||||
- auth
|
||||
type: string
|
||||
admin:
|
||||
default:
|
||||
email: auth-admin
|
||||
examples:
|
||||
- email: auth-admin
|
||||
properties:
|
||||
email:
|
||||
default: auth-admin
|
||||
type: string
|
||||
type: object
|
||||
issuer:
|
||||
default: letsencrypt-prod
|
||||
examples:
|
||||
- letsencrypt-prod
|
||||
type: string
|
||||
geoip:
|
||||
default: /geoip/GeoLite2-City.mmdb
|
||||
email:
|
||||
default:
|
||||
port: 587
|
||||
timeout: 30
|
||||
use_ssl: false
|
||||
use_tls: false
|
||||
examples:
|
||||
- /geoip/GeoLite2-City.mmdb
|
||||
- port: 587
|
||||
timeout: 30
|
||||
use_ssl: false
|
||||
use_tls: false
|
||||
properties:
|
||||
port:
|
||||
default: 587
|
||||
type: integer
|
||||
timeout:
|
||||
default: 30
|
||||
type: integer
|
||||
use_ssl:
|
||||
default: false
|
||||
type: boolean
|
||||
use_tls:
|
||||
default: false
|
||||
type: boolean
|
||||
type: object
|
||||
domain:
|
||||
default: your-company
|
||||
examples:
|
||||
- your-company
|
||||
type: string
|
||||
dependencies:
|
||||
- dist: null
|
||||
|
||||
@@ -5,6 +5,23 @@ locals {
|
||||
pool-labels = merge(local.common-labels, {
|
||||
"app.kubernetes.io/component" = "pg-pool"
|
||||
})
|
||||
backup-def = var.backups.enable ? {
|
||||
retentionPolicy = var.backups.retention.db
|
||||
barmanObjectStore = {
|
||||
destinationPath = "s3://${var.instance}-${var.namespace}/"
|
||||
endpointURL = "${var.backups.endpoint}/barman"
|
||||
s3Credentials = {
|
||||
accessKeyId = {
|
||||
name = var.backups.secret-name
|
||||
key = var.backups.key-id-key
|
||||
}
|
||||
secretAccessKey = {
|
||||
name = var.backups.secret-name
|
||||
key = var.backups.secret-key
|
||||
}
|
||||
}
|
||||
}
|
||||
} : {}
|
||||
}
|
||||
|
||||
resource "kubectl_manifest" "prj_pg" {
|
||||
@@ -19,6 +36,29 @@ resource "kubectl_manifest" "prj_pg" {
|
||||
instances: ${var.postgres.replicas}
|
||||
storage:
|
||||
size: "${var.postgres.storage}"
|
||||
monitoring:
|
||||
enablePodMonitor: true
|
||||
bootstrap:
|
||||
initdb:
|
||||
database: "${var.component}"
|
||||
owner: "${var.component}"
|
||||
backup: ${jsonencode(local.backup-def)}
|
||||
EOF
|
||||
}
|
||||
|
||||
resource "kubectl_manifest" "prj_pg_backup" {
|
||||
yaml_body = <<-EOF
|
||||
apiVersion: postgresql.cnpg.io/v1
|
||||
kind: ScheduledBackup
|
||||
metadata:
|
||||
name: "${var.instance}-${var.component}-pg"
|
||||
namespace: "${var.namespace}"
|
||||
labels: ${jsonencode(local.pg-labels)}
|
||||
spec:
|
||||
schedule: "${var.backups.schedule.db}"
|
||||
backupOwnerReference: self
|
||||
cluster:
|
||||
name: "${var.instance}-${var.component}-pg"
|
||||
EOF
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user