mirror of
https://gitlab.com/deepcypher/dc-kc.git
synced 2026-01-27 11:12:08 +00:00
105 lines
2.8 KiB
YAML
105 lines
2.8 KiB
YAML
tenant:
|
|
# ---
|
|
# I keep forgetting so as a note to myself
|
|
# DO NOT INSERT ANYTHING HERE
|
|
# this is not part of the tenant chart
|
|
enabled: true # the only thing that should be between the two tenants
|
|
# UP TO THE NEXT TENANT
|
|
# ---
|
|
tenant:
|
|
name: workflows
|
|
image:
|
|
repository: quay.io/minio/minio
|
|
tag: RELEASE.2025-04-22T22-12-26Z
|
|
pullPolicy: IfNotPresent
|
|
configuration:
|
|
name: minio # must match tenant.configSecret.name
|
|
configSecret:
|
|
name: minio # must match tenant.configuration.name
|
|
# stupidly having to remove insecure defaults (new in helm to override with zero values)
|
|
accessKey: ""
|
|
secretKey: ""
|
|
existingSecret: true
|
|
|
|
pools:
|
|
- name: pool-0
|
|
servers: 4
|
|
volumesPerServer: 1
|
|
size: 50Gi
|
|
resources:
|
|
requests:
|
|
cpu: 500m
|
|
ephemeral-storage: 10Gi
|
|
limits:
|
|
memory: 2Gi
|
|
# NOTE: minio binaries must be identical. I.E cant be ARM64 AND AMD64
|
|
# thus you need to set affinity to one or another.
|
|
nodeSelector:
|
|
kubernetes.io/arch: amd64
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
fsGroup: 1000
|
|
fsGroupChangePolicy: "OnRootMismatch"
|
|
runAsNonRoot: true
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
users:
|
|
- name: workflows
|
|
|
|
buckets:
|
|
- name: artifacts
|
|
objectLock: false
|
|
region: eu-west-2
|
|
|
|
#prometheusOperator: true
|
|
metrics:
|
|
enabled: true
|
|
port: 9000
|
|
protocol: http
|
|
|
|
# TLS configuration
|
|
certificate:
|
|
requestAutoCert: false
|
|
|
|
ingress:
|
|
api:
|
|
enabled: false
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: aux-issuer
|
|
host: s3.deepcypher.me
|
|
tls:
|
|
- hosts:
|
|
- s3.deepcypher.me
|
|
secretName: s3.deepcypher.me-tls
|
|
console:
|
|
enabled: false
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: aux-issuer
|
|
host: minio.deepcypher.me
|
|
tls:
|
|
- hosts:
|
|
- minio.deepcypher.me
|
|
secretName: minio.deepcypher.me-tls
|
|
|
|
environment:
|
|
name: unknown # not to be used for hard checks but to display to user
|
|
hardware: metal # to be used to enable on-prem specific features like ceph, cilium, etc
|
|
mode: production # to be used to configure backup movement and additional debugging features
|
|
revision: main # to be used to pull from different git branches
|
|
baseDomain: deepcypher.me # to be used to override default chart domains to configure environments
|
|
location:
|
|
name: unknown # not to be used for hard checks purely informational
|
|
contact:
|
|
name: George Onoufriou
|
|
email: noreply@deepcypher.me
|