iac/kubernetes/apps/ai/cli-proxy-api/app/helmrelease.yaml at c5e3d2406b2d8890864bdb711804647490a50297 · Mafyuh/iac · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: &app cli-proxy-api
spec:
  interval: 15m
  chartRef:
    kind: OCIRepository
    name: cli-proxy-api
  values:
    global:
      fullnameOverride: *app
      namespace: ai

    controllers:
      cli-proxy-api:
        enabled: true
        type: deployment

        replicas: 1

        containers:
          app:
            image:
              repository: mirror.gcr.io/eceasy/cli-proxy-api
              tag: v7.2.140
              pullPolicy: IfNotPresent
            env:
              TZ: America/New_York

            probes:
              liveness:
                enabled: false

            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                  - ALL

            resources:
              requests:
                cpu: 25m
                memory: 128Mi
              limits:
                memory: 512Mi

    service:
      app:
        primary: true
        controller: cli-proxy-api
        ports:
          http:
            port: &port 8317

    route:
      internal:
        enabled: true
        kind: HTTPRoute
        hostnames: ["{{ .Release.Name }}.local.mafyuh.dev"]
        rules:
          - matches:
              - path:
                  type: PathPrefix
                  value: /
            backendRefs:
              - name: cli-proxy-api
                port: *port
        parentRefs:
          - name: envoy-internal
            namespace: kube-system
            sectionName: https

    persistence:
      config:
        enabled: true
        type: configMap
        name: cli-proxy-api-config
        globalMounts:
          - path: /CLIProxyAPI/config.yaml
            subPath: config.yaml
            readOnly: true

      auth-dir:
        enabled: true
        type: persistentVolumeClaim
        accessMode: ReadWriteOnce
        size: 1Gi
        storageClass: ceph-block
        globalMounts:
          - path: /root/.cli-proxy-api