| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 1 | input: { |
| 2 | network: #Network |
| 3 | subdomain: string |
| 4 | } |
| 5 | |
| 6 | _domain: "\(input.subdomain).\(input.network.domain)" |
| 7 | |
| 8 | readme: "Installs pihole at https://\(_domain)" |
| 9 | |
| 10 | images: { |
| 11 | pihole: { |
| 12 | repository: "pihole" |
| 13 | name: "pihole" |
| 14 | tag: "v5.8.1" |
| 15 | pullPolicy: "IfNotPresent" |
| 16 | } |
| 17 | } |
| 18 | |
| 19 | charts: { |
| 20 | pihole: { |
| 21 | chart: "charts/pihole" |
| 22 | sourceRef: { |
| 23 | kind: "GitRepository" |
| 24 | name: "pcloud" |
| 25 | namespace: global.id |
| 26 | } |
| 27 | } |
| 28 | } |
| 29 | |
| 30 | helm: { |
| 31 | pihole: { |
| 32 | chart: charts.pihole |
| 33 | values: { |
| 34 | domain: _domain |
| 35 | pihole: { |
| 36 | fullnameOverride: "pihole" |
| 37 | persistentVolumeClaim: { // TODO(gio): create volume separately as a dependency |
| 38 | enabled: true |
| 39 | size: "5Gi" |
| 40 | } |
| 41 | admin: { |
| 42 | enabled: false |
| 43 | } |
| 44 | ingress: { |
| 45 | enabled: false |
| 46 | } |
| 47 | serviceDhcp: { |
| 48 | enabled: false |
| 49 | } |
| 50 | serviceDns: { |
| 51 | type: "ClusterIP" |
| 52 | } |
| 53 | serviceWeb: { |
| 54 | type: "ClusterIP" |
| 55 | http: { |
| 56 | enabled: true |
| 57 | } |
| 58 | https: { |
| 59 | enabled: false |
| 60 | } |
| 61 | } |
| 62 | virtualHost: _domain |
| 63 | resources: { |
| 64 | requests: { |
| 65 | cpu: "250m" |
| 66 | memory: "100M" |
| 67 | } |
| 68 | limits: { |
| 69 | cpu: "500m" |
| 70 | memory: "250M" |
| 71 | } |
| 72 | } |
| 73 | image: { |
| 74 | repository: images.pihole.fullName |
| 75 | tag: images.pihole.tag |
| 76 | pullPolicy: images.pihole.pullPolicy |
| 77 | } |
| 78 | } |
| 79 | oauth2: { |
| 80 | secretName: "oauth2-secret" |
| 81 | configName: "oauth2-proxy" |
| 82 | hydraAdmin: "http://hydra-admin.\(global.namespacePrefix)core-auth.svc" |
| 83 | } |
| 84 | hydraPublic: "https://hydra.\(global.domain)" |
| 85 | profileUrl: "https://accounts-ui.\(global.domain)" |
| 86 | ingressClassName: input.network.ingressClass |
| 87 | certificateIssuer: input.network.certificateIssuer |
| 88 | } |
| 89 | } |
| 90 | } |