helmfile/base/helmfile.yaml

repositories:
- name: appscode
  url: https://charts.appscode.com/stable/
- name: ingress-nginx
  url: https://kubernetes.github.io/ingress-nginx
- name: jetstack
  url: https://charts.jetstack.io
- name: bwolf
  url: https://bwolf.github.io/cert-manager-webhook-gandi
- name: metallb
  url: https://metallb.github.io/metallb

helmDefaults:
  tillerless: true
  waitForJobs: false
  createNamespace: true

releases:
- name: metallb
  chart: metallb/metallb
  version: 0.11.0
  namespace: {{ .Values.name }}-networking-metallb
  values:
  - fullnameOverride: {{ .Values.name }}-metallb
  - configInline:
      address-pools:
      - name: default
        protocol: layer2
        addresses:
        - {{ .Values.loadBalancerIPRange }}
  - controller:
      image:
        repository: quay.io/metallb/controller
        tag: v0.11
        pullPolicy: IfNotPresent
  - speaker:
      image:
        repository: quay.io/metallb/speaker
        tag: v0.11
        pullPolicy: IfNotPresent
- name: ingress-public
  chart: ingress-nginx/ingress-nginx
  version: 4.0.3
  namespace: {{ .Values.name }}-ingress-public
  values:
  - fullnameOverride: {{ .Values.name }}-ingress-public
  - controller:
      service:
        type: LoadBalancer
      ingressClassByName: true
      ingressClassResource:
        name: {{ .Values.name }}-ingress-public
        enabled: true
        default: false
        controllerValue: k8s.io/{{ .Values.name }}-ingress-public
      config:
        proxy-body-size: 100M
  - tcp:
      25: {{ .Values.name }}-mail-gateway/maddy:25
- name: kubed
  chart: appscode/kubed
  version: v0.12.0
  namespace: {{ .Values.name }}-kubed
  values:
  - enableAnalytics: false
  - fullnameOverride: {{ .Values.name }}-kubed
  - operator:
      registry: appscode
      repository: kubed
      tag: v0.12.0
  - criticalAddon: true
  - config:
      clusterName: {{ .Values.name }}
- name: cert-manager
  chart: jetstack/cert-manager
  version: v1.6
  namespace: {{ .Values.name }}-cert-manager
  values:
  - installCRDs: true
  - fullnameOverride: {{ .Values.name}}-cert-manager
  - image:
      tag: v1.6.1
      pullPolicy: IfNotPresent
  - resources:
      requests:
        cpu: "100m"
        memory: "50M"
      limits:
        cpu: "250m"
        memory: "150M"
  - tolerations:
    - key: "pcloud"
      operator: "Equal"
      value: "role"
      effect: "NoSchedule"
  - cainjector:
      resources:
        requests:
          cpu: "100m"
          memory: "50M"
        limits:
          cpu: "250m"
          memory: "150M"
      tolerations:
      - key: "pcloud"
        operator: "Equal"
        value: "role"
        effect: "NoSchedule"
  - webhook:
      resources:
        requests:
          cpu: "100m"
          memory: "50M"
        limits:
          cpu: "250m"
          memory: "150M"
      tolerations:
      - key: "pcloud"
        operator: "Equal"
        value: "role"
        effect: "NoSchedule"
- name: cert-manager-gandi
  chart: bwolf/cert-manager-webhook-gandi
  version: v0.2.0
  namespace: {{ .Values.name }}-cert-manager
  values:
  - certManager:
      namespace: {{ .Values.name }}-cert-manager
      serviceAccountName: {{ .Values.name }}-cert-manager
  - fullnameOverride: {{ .Values.name }}-cert-manager-webhook-gandi
  - image:
      repository: giolekva/cert-manager-webhook-gandi
      tag: v0.2.0
      pullPolicy: IfNotPresent
  - logLevel: 2
  - resources:
      requests:
        cpu: "100m"
        memory: "50M"
      limits:
        cpu: "250m"
        memory: "150M"
  - tolerations:
    - key: "pcloud"
      operator: "Equal"
      value: "role"
      effect: "NoSchedule"

environments:
  prod:
    values:
    - name: pcloud
    - loadBalancerIPRange: 192.168.0.200-192.168.0.250