arcodangeandClaude Opus 5
adc4aeebaf
Helm Charts / Detect changed charts (push) Successful in 12s
Helm Charts / Library charts tool (push) Skipped
Helm Charts / Application charts alloy (push) Skipped
Helm Charts / Application charts chart (push) Skipped
Helm Charts / Application charts crowdsec (push) Skipped
Helm Charts / Application charts grafana (push) Skipped
Helm Charts / Application charts hashicorp-vault (push) Skipped
Helm Charts / Application charts loki (push) Skipped
Helm Charts / Application charts minio (push) Skipped
Helm Charts / Application charts pgbouncer (push) Skipped
Helm Charts / Application charts pgcat (push) Skipped
Helm Charts / Application charts prometheus (push) Skipped
Helm Charts / Application charts redis (push) Skipped
startupProbe patiente sur /api/health (10 min, délai 5 s), posée par patch kustomize, et affinité requise NotIn [pi2]. Rendu kustomize avant/après : seuls ces deux blocs changent. Refs arcodange-org/tools#53 Co-Authored-By: Claude Opus 5 <[email protected]> Co-authored-by: Gabriel Radureau <[email protected]>
189 lines
6.5 KiB
YAML
189 lines
6.5 KiB
YAML
image:
|
|
# -- The registry to pull the image from.
|
|
registry: ghcr.io
|
|
# -- The repository to pull the image from.
|
|
repository: plausible/community-edition
|
|
# -- The docker tag, if left empty chart's appVersion will be used.
|
|
# @default -- `.Chart.AppVersion`
|
|
tag: ''
|
|
# -- The pull policy for the controller.
|
|
pullPolicy: IfNotPresent
|
|
|
|
nameOverride: ''
|
|
fullnameOverride: ''
|
|
|
|
controller:
|
|
# -- Create a workload for this chart.
|
|
enabled: true
|
|
# -- Type of the workload object.
|
|
kind: Deployment
|
|
# -- The number of replicas.
|
|
replicas: 1
|
|
# -- Additional annotations for the controller object.
|
|
annotations: {}
|
|
# -- Additional labels for the controller object.
|
|
labels: {}
|
|
|
|
service:
|
|
# -- Create a service for exposing this chart.
|
|
enabled: true
|
|
# -- The service type used.
|
|
type: ClusterIP
|
|
# -- ClusterIP used if service type is `ClusterIP`.
|
|
clusterIP: ''
|
|
# -- LoadBalancerIP if service type is `LoadBalancer`.
|
|
loadBalancerIP: ''
|
|
# -- Allowed addresses when service type is `LoadBalancer`.
|
|
loadBalancerSourceRanges: []
|
|
# -- Additional annotations for the service object.
|
|
annotations: {}
|
|
# -- Additional labels for the service object.
|
|
labels: {}
|
|
|
|
serviceMonitor:
|
|
# -- Create a service monitor for prometheus operator.
|
|
enabled: false
|
|
# -- How frequently the exporter should be scraped.
|
|
interval: 30s
|
|
# -- Timeout value for individual scrapes.
|
|
timeout: 10s
|
|
# -- Additional annotations for the service monitor object.
|
|
annotations: {}
|
|
# -- Additional labels for the service monitor object.
|
|
labels: {}
|
|
|
|
ingressRoute:
|
|
# -- Create an IngressRoute object for exposing this chart.
|
|
create: true
|
|
# -- List of [entry points](https://doc.traefik.io/traefik/routing/routers/#entrypoints) on which the ingress route will be available.
|
|
entryPoints: [websecure]
|
|
# -- [Matching rule](https://doc.traefik.io/traefik/routing/routers/#rule) for the underlying router.
|
|
rule: Host(`analytics.arcodange.lab`)
|
|
# -- List of [middleware objects](https://doc.traefik.io/traefik/routing/providers/kubernetes-crd/#kind-middleware) for the ingress route.
|
|
middlewares:
|
|
# ⚠ Valable parce que la règle ci-dessus est en `.lab` (le client arrive en direct
|
|
# sur 192.168.1.201). À NE PAS recopier sur un hôte `.fr` : cf. doc/ce-que-traefik-voit.md §3.
|
|
- name: localIp@file
|
|
# -- Use an existing secret containing the TLS certificate.
|
|
tlsSecretName: ''
|
|
# -- Additional annotations for the ingress route object.
|
|
annotations: {}
|
|
# -- Additional labels for the ingress route object.
|
|
labels: {}
|
|
|
|
certificate:
|
|
# -- Create an Certificate object for the exposed chart.
|
|
create: false
|
|
# -- List of subject alternative names for the certificate.
|
|
dnsNames: []
|
|
# -- Name of the secret in which the certificate will be stored. Defaults to the first item in dnsNames.
|
|
secretName: ''
|
|
issuerRef:
|
|
# -- Type of the referenced certificate issuer. Can be "Issuer" or "ClusterIssuer".
|
|
kind: ClusterIssuer
|
|
# -- Name of the referenced certificate issuer.
|
|
name: ''
|
|
# -- Additional annotations for the certificate object.
|
|
annotations: {}
|
|
# -- Additional labels for the certificate object.
|
|
labels: {}
|
|
|
|
env:
|
|
# -- Timezone for the container.
|
|
- name: TZ
|
|
value: Europe/Paris
|
|
|
|
ports:
|
|
http:
|
|
# -- Enable the port inside the `Deployment` and `Service` objects.
|
|
enabled: true
|
|
# -- The port used as internal port and cluster-wide port if `.service.type` == `ClusterIP`.
|
|
port: 8000
|
|
# -- The external port used if `.service.type` == `NodePort`.
|
|
nodePort: null
|
|
# -- The protocol used for the service.
|
|
protocol: TCP
|
|
|
|
secret:
|
|
# -- Create a new secret object.
|
|
create: false
|
|
# -- Use an existing secret object.
|
|
existingSecret: 'plausible-config'
|
|
# -- Secret values used when not using an existing secret. Helm templates are supported for values.
|
|
values:
|
|
# -- Secret key for session tokens.
|
|
SECRET_KEY_BASE: '{{ randAlphaNum 42 | b64enc }}'
|
|
# -- Encryption token for TOTP secrets.
|
|
TOTP_VAULT_KEY: '{{ randAlphaNum 32 | b64enc }}'
|
|
|
|
# -- Additional annotations for the secret object.
|
|
annotations: {}
|
|
# -- Additional labels for the secret object.
|
|
labels: {}
|
|
|
|
geoip:
|
|
# -- Enable support for MaxMinds GeoLite2 database.
|
|
enabled: true
|
|
image:
|
|
# -- The repository for the geoip image.
|
|
repository: ghcr.io/maxmind/geoipupdate
|
|
# -- The docker tag for the geoip image.
|
|
tag: v7.1.1
|
|
# -- Required. MaxMind account ID.
|
|
accountId: '1266329'
|
|
# -- Required. Case-sensitive MaxMind license key.
|
|
# licenseKey: 'kvv2/data/plausible/geoip LICENSE_KEY'
|
|
# -- Optional. Database update frequency. Defaults to "168" which equals 7 days.
|
|
frequency: 168
|
|
# -- Optional. Specify the database mount path inside the containers.
|
|
mountPath: /geoip
|
|
|
|
serviceAccount:
|
|
# -- Create a `ServiceAccount` object.
|
|
create: true
|
|
# -- Specify the service account used for the controller.
|
|
name: ''
|
|
# -- Additional annotations for the service account object.
|
|
annotations: {}
|
|
# -- Additional labels for the service account object.
|
|
labels: {}
|
|
|
|
# -- Pod-level security attributes. More info [here](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context).
|
|
securityContext: {}
|
|
# fsGroup: 1000
|
|
# runAsNonRoot: true
|
|
# runAsGroup: 1000
|
|
# runAsUser: 1000
|
|
|
|
# -- Compute resources used by the container. More info [here](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/).
|
|
resources: {}
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
# -- Pod-level affinity. More info [here](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling).
|
|
#
|
|
# ⚠ JAMAIS SUR pi2 (tools#52, #53) : le nœud le plus chargé du cluster — c'est
|
|
# là que Plausible bouclait au démarrage le 2026-09-15. Même forme que
|
|
# ClickHouse (#54), MinIO (#50) et Prometheus (#51) : exclusion REQUISE, sans
|
|
# préférence. Elle ne bloque pas le placement si UN nœud tombe (pi1 ou pi3
|
|
# restent éligibles) ; elle ne bloquerait que si pi1 ET pi3 tombaient, et pi1
|
|
# porte le plan de contrôle.
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/hostname
|
|
operator: NotIn
|
|
values:
|
|
- pi2
|
|
|
|
# -- Pod-level tolerations. More info [here](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling).
|
|
tolerations: []
|
|
# - key: node-role.kubernetes.io/control-plane
|
|
# operator: Exists
|
|
# effect: NoSchedule |