iac/kubernetes/apps/miniflux/helm-release.yml at 7fcaf8fa826c640e0580f65710fdca600279a23a · chkpwd/iac · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/common-4.5.0/charts/library/common/values.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: miniflux
spec:
  interval: 1h
  chart:
    spec:
      chart: app-template
      version: 5.0.1
      interval: 30m
      sourceRef:
        kind: HelmRepository
        name: bjw-s-labs
        namespace: flux-system
  values:
    controllers:
      miniflux:
        annotations:
          reloader.stakater.com/auto: "true"
        replicas: 1
        containers:
          app:
            image:
              repository: ghcr.io/miniflux/miniflux
              tag: 2.3.3
              pullPolicy: IfNotPresent
            env:
              BASE_URL: https://miniflux.chkpwd.com
              DATABASE_URL:
                valueFrom:
                  secretKeyRef:
                    name: miniflux-pguser-miniflux
                    key: uri
              LOG_LEVEL: info
              LOG_DATE_TIME: "1"
              RUN_MIGRATIONS: "1"
              METRICS_COLLECTOR: "1"
              METRICS_ALLOWED_NETWORKS: "10.42.0.0/16"
              POLLING_SCHEDULER: entry_frequency
              POLLING_FREQUENCY: "15"
              FETCH_YOUTUBE_WATCH_TIME: "1"
              OAUTH2_OIDC_PROVIDER_NAME: Authentik
              DISABLE_LOCAL_AUTH: "true"
              OAUTH2_PROVIDER: oidc
              OAUTH2_REDIRECT_URL: https://{{ .Release.Name }}.chkpwd.com/oauth2/oidc/callback
              OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://authentik.chkpwd.com/application/o/miniflux/
              OAUTH2_USER_CREATION: "1"
            envFrom:
              - secretRef:
                  name: miniflux
            probes:
              liveness: &probes
                enabled: true
                custom: true
                spec:
                  httpGet:
                    path: /healthcheck
                    port: 8080
                  initialDelaySeconds: 0
                  periodSeconds: 10
                  timeoutSeconds: 1
                  failureThreshold: 3
              readiness: *probes
              startup:
                enabled: false
            resources:
              requests:
                cpu: 10m
                memory: 100Mi
              limits:
                memory: 350Mi
    service:
      app:
        controller: miniflux
        ports:
          http:
            port: 8080
    route:
      public:
        kind: HTTPRoute
        hostnames: ["{{ .Release.Name }}.chkpwd.com"]
        parentRefs:
          - name: public
            namespace: networking
            sectionName: https