Files
domain/share/authentik/redis.tf
2024-05-23 13:21:16 +02:00

34 lines
1.1 KiB
HCL

resource "kubectl_manifest" "authentik_redis" {
yaml_body = <<-EOF
apiVersion: "redis.redis.opstreelabs.in/v1beta2"
kind: "Redis"
metadata:
name: "${var.name}-${var.component}-redis"
namespace: "${var.namespace}"
labels: ${jsonencode(local.redis_all_labels)}
spec:
kubernetesConfig:
image: "${var.images.redis.registry}/${var.images.redis.repository}:${var.images.redis.tag}"
imagePullPolicy: "${var.images.redis.pull_policy}"
redisSecret:
name: "${var.component}"
key: "AUTHENTIK_REDIS__PASSWORD"
storage:
volumeClaimTemplate:
metadata:
annotations:
"k8up.io/backup": "false"
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: "${var.storage.redis.size}"
redisExporter:
enabled: ${var.redis.exporter.enabled}
image: "${var.images.redis_exporter.registry}/${var.images.redis_exporter.repository}:${var.images.redis_exporter.tag}"
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
EOF
}