Files
talos-cluster/kubernetes/apps/dev/atuin/app/helmrelease.yaml
Laur IVAN aef3651518 chore: Add skeletons for future containers
fix: Corrected observability namespace

- Add atuin but not enabled yet.
2026-02-24 13:56:21 +01:00

80 lines
2.2 KiB
YAML

---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: atuin
spec:
chartRef:
kind: OCIRepository
name: atuin
interval: 1h
values:
controllers:
atuin:
containers:
app:
image:
repository: ghcr.io/atuinsh/atuin
tag: v18.12.0@sha256:e953fa9e36ef571d3cb2f9746426129025b8101ad4b88cd0da6783d524cca431
env:
ATUIN_HOST: "0.0.0.0"
ATUIN_PORT: &port 80
ATUIN_OPEN_REGISTRATION: "true"
ATUIN_DB_URI: sqlite:///config/atuin.db
TZ: America/New_York
args:
- start
probes:
liveness:
enabled: true
spec:
periodSeconds: 30
timeoutSeconds: 5
failureThreshold: 5
readiness:
enabled: true
custom: true
spec:
httpGet:
path: /healthz
port: *port
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 5
startup:
enabled: true
spec:
failureThreshold: 30
periodSeconds: 10
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities: {drop: ["ALL"]}
resources:
requests:
cpu: 10m
limits:
memory: 256Mi
defaultPodOptions:
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
service:
app:
ports:
http:
port: *port
route:
app:
hostnames:
- "{{ .Release.Name }}.${SECRET_DOMAIN}"
parentRefs:
- name: envoy-internal
namespace: network
persistence:
config:
existingClaim: "{{ .Release.Name }}"