Initial commit

helm/tline/values.yaml

@@ -0,0 +1,254 @@
+global:
+  nameOverride: ""
+  fullnameOverride: ""
+  storageClass: ""
+
+  tailscale:
+    enabled: true
+    ingressClassName: tailscale
+    tailnetFQDN: "" # e.g. tailxyz.ts.net
+    proxyGroup:
+      enabled: false
+      create: false
+      name: ingress-proxies
+      tags: []
+
+scheduling:
+  compute:
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+            - matchExpressions:
+                - key: node-class
+                  operator: In
+                  values:
+                    - compute
+    tolerations: []
+
+app:
+  name: porthole
+  queueName: tline
+
+  # Optional overrides when bringing your own services.
+  databaseUrl: "" # defaults to in-chart Postgres when empty
+  redisUrl: "" # defaults to in-chart Redis when empty
+
+  minio:
+    bucket: media
+    region: us-east-1
+    presignExpiresSeconds: 900
+    publicEndpointTs: "" # optional if global.tailscale.tailnetFQDN is set (defaults to https://minio.<tailnet-fqdn>)
+    internalEndpoint: "" # defaults to in-chart MinIO when empty
+
+secrets:
+  existingSecret: "" # if set, chart will not create secrets
+
+  postgres:
+    user: tline
+    password: "" # REQUIRED if not using existingSecret
+    database: tline
+
+  minio:
+    accessKeyId: "" # REQUIRED if not using existingSecret
+    secretAccessKey: "" # REQUIRED if not using existingSecret
+
+images:
+  web:
+    repository: ""
+    tag: ""
+    pullPolicy: IfNotPresent
+  worker:
+    repository: ""
+    tag: ""
+    pullPolicy: IfNotPresent
+  postgres:
+    repository: postgres
+    tag: "16"
+    pullPolicy: IfNotPresent
+  redis:
+    repository: redis
+    tag: "7"
+    pullPolicy: IfNotPresent
+  minio:
+    repository: minio/minio
+    tag: RELEASE.2024-01-16T16-07-38Z
+    pullPolicy: IfNotPresent
+
+# Optional: secrets used for pulling container images.
+# Each entry is a Secret name in the same namespace.
+imagePullSecrets: []
+
+# Optional: create a docker-registry Secret from values.
+# This is convenient for private/local deployments, but stores credentials in values.
+registrySecret:
+  create: false
+  name: "" # defaults to <release>-<chart>-registry
+  server: "" # e.g. registry.lan:5000
+  username: ""
+  password: ""
+  email: ""
+
+web:
+  enabled: true
+  replicas: 1
+  schedulingClass: compute
+  service:
+    port: 3000
+  resources:
+    requests:
+      cpu: 200m
+      memory: 256Mi
+    limits:
+      cpu: 1000m
+      memory: 1Gi
+
+  ingress:
+    enabled: true
+    hostnameLabel: app
+    path: /
+    pathType: Prefix
+    tags: []
+    funnel: false
+    extraAnnotations: {}
+
+worker:
+  enabled: true
+  replicas: 1
+  schedulingClass: compute
+  resources:
+    requests:
+      cpu: 500m
+      memory: 1Gi
+    limits:
+      cpu: 2000m
+      memory: 2Gi
+
+postgres:
+  enabled: true
+  schedulingClass: compute
+  service:
+    port: 5432
+  storage:
+    size: 20Gi
+    storageClass: "" # defaults to global.storageClass
+  resources:
+    requests:
+      cpu: 500m
+      memory: 1Gi
+    limits:
+      cpu: 1500m
+      memory: 2Gi
+
+redis:
+  enabled: true
+  schedulingClass: compute
+  service:
+    port: 6379
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 300m
+      memory: 512Mi
+
+minio:
+  enabled: true
+  schedulingClass: compute
+  service:
+    s3Port: 9000
+    consolePort: 9001
+
+  # Optional: expose MinIO S3 API via a Tailscale LoadBalancer Service
+  # instead of (or in addition to) Tailscale Ingress.
+  # This can be more reliable for streaming / Range requests depending on
+  # Tailscale operator + cluster behavior.
+  tailscaleServiceS3:
+    enabled: false
+    hostnameLabel: minio
+    tags: []
+    extraAnnotations: {}
+
+  tailscaleServiceConsole:
+    enabled: false
+    hostnameLabel: minio-console
+    tags: []
+    extraAnnotations: {}
+
+  # When true, disable the MinIO S3 Ingress when S3 service is enabled.
+  ingressS3DisabledWhenTailscaleService: true
+
+  # When true, disable the MinIO console Ingress when console service is enabled.
+  ingressConsoleDisabledWhenTailscaleService: true
+
+  storage:
+    size: 200Gi
+    storageClass: "" # defaults to global.storageClass
+
+  resources:
+    requests:
+      cpu: 250m
+      memory: 512Mi
+    limits:
+      cpu: 1500m
+      memory: 2Gi
+
+  ingressS3:
+    enabled: true
+    hostnameLabel: minio
+    path: /
+    pathType: Prefix
+    tags: []
+    funnel: false
+    extraAnnotations: {}
+
+  ingressConsole:
+    enabled: true
+    hostnameLabel: minio-console
+    path: /
+    pathType: Prefix
+    tags: []
+    funnel: false
+    extraAnnotations: {}
+
+jobs:
+  ensureBucket:
+    enabled: false
+    image:
+      repository: minio/mc
+      tag: RELEASE.2024-01-16T16-07-38Z
+      pullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 64Mi
+      limits:
+        cpu: 300m
+        memory: 256Mi
+
+  migrate:
+    enabled: true
+    image:
+      repository: "" # defaults to images.worker.repository when empty
+      tag: "" # defaults to images.worker.tag when empty
+      pullPolicy: "" # defaults to images.worker.pullPolicy when empty
+
+cronjobs:
+  cleanupStaging:
+    enabled: false
+    schedule: "0 4 * * *"
+    # Remove objects under `staging/` older than this many days.
+    # This CronJob must never touch `originals/`.
+    olderThanDays: 14
+    image:
+      repository: minio/mc
+      tag: RELEASE.2024-01-16T16-07-38Z
+      pullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 64Mi
+      limits:
+        cpu: 300m
+        memory: 256Mi