Merge pull request #9 from yadon-infra/feat/plane

feat(application): plane

Author: seipan

application/plane/secret-app.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: plane-app-env
+    namespace: plane
+type: Opaque
+stringData:
+    secret_key: ENC[AES256_GCM,data:cgjE4xq2g6fYhuCnidT/syprlNGpFarCjMiJfy85BvXn11EVugW0gV6MN6z2qMNncmyeZniXmGVyZCUyN7khmw==,iv:JvxyVQwvetX5p6C/6fpSiz8vW9lAvte83NGB+JCNCQ4=,tag:XIVLbp8y10RZuq4w/DtJvw==,type:str]
+sops:
+    age:
+        - recipient: age1k7d7drqkwqawwfxhxzz6gd5ur7ns68xd5kpn69x8t6yvf9cp3pmsuukrgk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAycGFDMnZpS2FtbEpLb3U0
+            ckpYeWJQUm5QR3U1d0ZiQTI4K2FVZEc0Vnc0CmQ1b2l6NXJHRjZiYmN5a1dWSUpQ
+            Z0NJZEdXTXgxYVdzWGRLclo3TXp6YUUKLS0tIG1HSUJhT3JNdWRmWTFOcU5xVXNa
+            UHFha3RzU0RoUWxTdlUxMnNDK1Fpa2MK/iSzMF9lkKtfU3cc3SxyeUCxrqj3KJxm
+            3oK920JEMXOUxn4bwEVJi50KuccnL31sjnHJwA9eCJPZaKhLt5hgTw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-11T20:26:47Z"
+    mac: ENC[AES256_GCM,data:JDqNTnaUhvWyubDpQAAiKVGDJ0aPNw7XOMQjYoJT00cVucm7ZIIMCfMYjT+d43y1wzWDkevwN9jA1KevTf6sDOP787UMJwc1t5/lwxDLlTgA70++pFePek/qEZtAy7WdKi2HuSMxDkoK8p20UnqkFrBpJw8PcNhbaMHmVJfGEOM=,iv:ivcohMi2dZCfKpa58WbRzfV7zuZRnXO4DECdDGVF3kE=,tag:ph3ikHRyKL9MagwIOrnsYQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

application/plane/secret-datastore.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: plane-docstore-cred
+    namespace: plane
+type: Opaque
+stringData:
+    aws_access_key: ENC[AES256_GCM,data:ls1GBqaUBQhlOZPF/b6Dx5sfkVI=,iv:nYP0GzoFjtS7GfMANqH1O0iEZS1Kh6297epPcO0hj0s=,tag:3rgchxphk+0kx9j2S4gN7A==,type:str]
+    aws_secret_access_key: ENC[AES256_GCM,data:VlvRooCeJym7ncx/XQNrIKeLoqSVl2VsFBIlyYvS+36NdiXyWhe18g==,iv:4VOTAWQ4WuIiGqCeLWHheMYbdaLUkDeNFopPBtmYjBE=,tag:JLX+s6YKTeqDYOT1xnehMg==,type:str]
+sops:
+    age:
+        - recipient: age1k7d7drqkwqawwfxhxzz6gd5ur7ns68xd5kpn69x8t6yvf9cp3pmsuukrgk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtaTJFR2xVbmYzdTR0MHhp
+            M09PbzFESWZ5QzZJejAwYW41cXdZKzFwZUNJCkUyUmVDejdNY0podktMUG1LVG5J
+            bzUzUWJFdXJDOHdGWDlKajdSVWpFT0UKLS0tIG5IeWduZVZQdEF1YzloNUduSmNK
+            b0wxOEJQZm1BcU9CQmJIL3hUeklOaDAKPh7mfRqyVpUf4T+mr+4OK+XJ0/DPKGGE
+            y994h+lP1pOwJxK4uvMwZpvGRZx7QXcVavhYtRACtNLpQvr6Yz3UOg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-11T20:28:08Z"
+    mac: ENC[AES256_GCM,data:+1HngrHmTdXG3MGOr45+4NRoAD3ldpyYKjgtHWRfABDIUseZzFz1/wh6kn0mBjZUN2iaWB6iocOrOcE6DT7fnz8H06AiTXTs9xJV38idmcqbXaCddv+153xtaUtES9cVDemFqaGH/mgq2K+7T0+k+8ML4WY3iiqHGley7ELjrvM=,iv:nU+ml6oyEKTNCK4ystVDRl4JkXEFTM0FFdn5QrV9bKI=,tag:QBhSW5fTiOklLqzhx8pBhg==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

application/plane/values.yaml

@@ -8,7 +8,7 @@ dockerRegistry:
 
 license:
   licenseServer: https://prime.plane.so
-  licenseDomain: 'plane.yadon3141.com'  # 実運用ドメインに合わせて
+  licenseDomain: 'plane.yadon3141.com'  
 
 airgapped:
   enabled: false
@@ -17,17 +17,15 @@ airgapped:
 
 ingress:
   enabled: true
-  minioHost: ''         # 既存MinIOのUIを別Ingressで持っているなら空でOK
-  rabbitmqHost: ''      # 必要なら管理UIを公開
+  minioHost: ''         
+  rabbitmqHost: ''      
   ingressClass: 'traefik'
   ingress_annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-    # 必要に応じて: traefik.ingress.kubernetes.io/redirect-entry-point: websecure
-    #               traefik.ingress.kubernetes.io/router.tls: "true"
 
 ssl:
-  tls_secret_name: 'plane-tls'  # cert-manager等で作るSecret名。既にあるものを指定
-  createIssuer: false           # Traefik/cert-manager側で証明書を発行する運用を想定
+  tls_secret_name: 'plane-tls'  
+  createIssuer: false           
   issuer: http
   token: ''
   server: https://acme-v02.api.letsencrypt.org/directory
@@ -60,7 +58,6 @@ services:
     default_password: plane
     external_rabbitmq_url: ''
 
-  # ← ここが重要：既存MinIOを使うため Plane 同梱MinIOは無効化
   minio:
     local_setup: false
     image: minio/minio:latest
@@ -145,36 +142,22 @@ services:
 external_secrets:
   rabbitmq_existingSecret: ''
   pgdb_existingSecret: ''
-  # ★ 既存MinIOのアクセスキー/シークレットを格納したSecret名
   doc_store_existingSecret: 'plane-docstore-cred'
-  app_env_existingSecret: ''
+  app_env_existingSecret: 'plane-app-env'
   live_env_existingSecret: ''
   silo_env_existingSecret: ''
 
 env:
-  # Longhorn を使うなら指定
   storageClass: 'longhorn'
-
-  # REDIS（外部を使うならURLを入れる）
-  remote_redis_url: ''
-
-  # POSTGRES（外部DBを使う場合はURLを入れる）
-  pgdb_username: plane
-  pgdb_password: plane
-  pgdb_name: plane
-  pgdb_remote_url: ''
-
-  # S3/MinIO（★既存MinIOを使うため、ここが肝心）
   docstore_bucket: 'uploads'
-  doc_upload_size_limit: '5242880' # 5MB
-  aws_access_key: ''           # ← Secret優先、空でOK
-  aws_secret_access_key: ''    # ← Secret優先、空でOK
-  aws_region: 'us-east-1'      # MinIOでもダミーでOK
-  # 既存 MinIO のエンドポイント（Ingress経由でTLSなら https を指定）
+  doc_upload_size_limit: '5242880' 
+  aws_access_key: ''           
+  aws_secret_access_key: ''    
+  aws_region: 'us-east-1'      
   aws_s3_endpoint_url: 'https://s3.yadon3141.com'
   use_storage_proxy: false
 
-  secret_key: "60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5"
+  secret_key: ""
   api_key_rate_limit: "60/minute"
 
   sentry_dsn: ''

apps/apps/plane.yaml

@@ -8,7 +8,7 @@ spec:
   source:
     repoURL: https://github.com/yadon-infra/manifest
     targetRevision: main
-    path: plane
+    path: application/plane
   destination:
     server: https://kubernetes.default.svc
     namespace: plane