k8s-deployment/installations/platform/helmfile.yaml

bases:
  - ../../common/environments.yaml
  - ../../common/templates.yaml

repositories:
  - name: argo
    url: https://argoproj.github.io/argo-helm
  - name: db-operator
    url: https://db-operator.github.io/charts
  - name: zot
    url: https://zotregistry.dev/helm-charts/
  - name: bedag
    url: https://bedag.github.io/helm-charts/
  - name: crossplane-stable
    url: https://charts.crossplane.io/stable
  - name: goauthentik
    url: https://charts.goauthentik.io/
  - name: minio-standalone
    url: https://charts.min.io/
  - name: kyverno
    url: https://kyverno.github.io/kyverno/
  - name: external-dns
    url: https://kubernetes-sigs.github.io/external-dns/
  - name: keel
    url: https://keel-hq.github.io/keel/
  - name: teleport
    url: https://charts.releases.teleport.dev

releases:
  - name: db-operator
    namespace: platform
    chart: db-operator/db-operator
    version: 1.29.0

  - name: db-instances
    chart: db-operator/db-instances
    namespace: platform
    needs:
      - platform/db-operator
    version: 2.4.0
    inherit:
      - template: default-env-values
      - template: default-env-secrets

  - name: zot
    chart: zot/zot
    version: 0.1.65
    createNamespace: false
    installed: true
    namespace: platform
    condition: workload.enabled
    inherit:
      - template: default-env-values
      - template: default-env-secrets

  - name: authentik
    chart: goauthentik/authentik
    version: 2024.10.2
    namespace: platform
    createNamespace: false
    condition: workload.enabled
    needs:
      - platform/db-operator
    inherit:
      - template: default-env-values
      - template: default-env-secrets
      - template: ext-database

  - name: minio
    chart: minio-standalone/minio
    version: 5.3.0
    namespace: platform
    inherit:
      - template: default-env-values
      - template: default-env-secrets

  - name: kyverno
    chart: kyverno/kyverno
    namespace: kyverno
    condition: workload.enabled
    labels:
      bootstrap: true
    version: 3.3.3

  - name: kyverno-policies
    chart: kyverno/kyverno-policies
    namespace: kyverno
    condition: workload.enabled
    labels:
      bootstrap: true
    version: 3.3.1
    needs:
      - kyverno/kyverno

  - name: custom-kyverno-policies
    chart: ../../kustomizations/kyverno/
    namespace: kyverno
    condition: workload.enabled
    labels:
      bootstrap: true
    needs:
      - kyverno/kyverno

  - name: external-dns
    chart: external-dns/external-dns
    version: 1.15.0
    namespace: platform
    inherit:
      - template: default-env-values
      - template: default-env-secrets

  - name: keel
    chart: keel/keel
    version: 1.0.4
    namespace: platform
    condition: workload.enabled

  - name: teleport-cluster
    installed: true
    version: 16.4.2
    chart: teleport/teleport-cluster
    namespace: teleport-cluster
    condition: teleport.enabled
    inherit:
      - template: default-env-values
First commit 2024-07-13 20:21:59 +00:00			`bases:`
			`- ../../common/environments.yaml`
Refactor everything a bit 2024-09-11 21:19:35 +00:00			`- ../../common/templates.yaml`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
First commit 2024-07-13 20:21:59 +00:00			`repositories:`
			`- name: argo`
			`url: https://argoproj.github.io/argo-helm`
			`- name: db-operator`
			`url: https://db-operator.github.io/charts`
			`- name: zot`
			`url: https://zotregistry.dev/helm-charts/`
Update a lot of apps 2024-07-15 19:12:53 +00:00			`- name: bedag`
			`url: https://bedag.github.io/helm-charts/`
Refactor everything a bit 2024-09-11 21:19:35 +00:00			`- name: crossplane-stable`
A lot of untrackable changes 2024-09-03 12:15:47 +00:00			`url: https://charts.crossplane.io/stable`
Migrate authentik from application ns to platform ns Increase authentik memory requests and limits from 512Mi to 1Gi Issue: https://gitea.badhouseplants.net/allanger/k8s-deployment/issues/1 2024-09-03 16:01:56 +00:00			`- name: goauthentik`
			`url: https://charts.goauthentik.io/`
Migrate minio to the platform namespace 2024-09-12 12:45:25 +00:00			`- name: minio-standalone`
			`url: https://charts.min.io/`
Install kyverno 2024-09-28 19:53:35 +00:00			`- name: kyverno`
			`url: https://kyverno.github.io/kyverno/`
Install and set up External DNS 2024-10-16 08:59:38 +00:00			`- name: external-dns`
			`url: https://kubernetes-sigs.github.io/external-dns/`
Install keel to the cluster 2024-11-18 12:55:54 +00:00			`- name: keel`
			`url: https://keel-hq.github.io/keel/`
Deploy teleport-cluster instance I won't use it atm because it requires an external account, and it doesn't play well with my understanding of self-hosting and indie culture. 2024-10-15 15:11:34 +00:00			`- name: teleport`
			`url: https://charts.releases.teleport.dev`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
First commit 2024-07-13 20:21:59 +00:00			`releases:`
			`- name: db-operator`
			`namespace: platform`
			`chart: db-operator/db-operator`
Update Helm release db-operator to v1.29.0 2024-09-11 14:24:23 +00:00			`version: 1.29.0`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
First commit 2024-07-13 20:21:59 +00:00			`- name: db-instances`
			`chart: db-operator/db-instances`
			`namespace: platform`
			`needs:`
			`- platform/db-operator`
chore(deps): update helm release db-instances to v2.4.0 2024-10-29 01:01:21 +00:00			`version: 2.4.0`
First commit 2024-07-13 20:21:59 +00:00			`inherit:`
			`- template: default-env-values`
			`- template: default-env-secrets`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
First commit 2024-07-13 20:21:59 +00:00			`- name: zot`
			`chart: zot/zot`
chore(deps): update helm release zot to v0.1.65 2024-11-06 01:01:45 +00:00			`version: 0.1.65`
First commit 2024-07-13 20:21:59 +00:00			`createNamespace: false`
Configure zot 2024-09-13 03:23:44 +00:00			`installed: true`
First commit 2024-07-13 20:21:59 +00:00			`namespace: platform`
A lot of untrackable changes 2024-09-03 12:15:47 +00:00			`condition: workload.enabled`
First commit 2024-07-13 20:21:59 +00:00			`inherit:`
			`- template: default-env-values`
			`- template: default-env-secrets`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
Migrate authentik from application ns to platform ns Increase authentik memory requests and limits from 512Mi to 1Gi Issue: https://gitea.badhouseplants.net/allanger/k8s-deployment/issues/1 2024-09-03 16:01:56 +00:00			`- name: authentik`
			`chart: goauthentik/authentik`
chore(deps): update helm release authentik to v2024.10.2 2024-11-19 01:01:33 +00:00			`version: 2024.10.2`
Migrate authentik from application ns to platform ns Increase authentik memory requests and limits from 512Mi to 1Gi Issue: https://gitea.badhouseplants.net/allanger/k8s-deployment/issues/1 2024-09-03 16:01:56 +00:00			`namespace: platform`
			`createNamespace: false`
Onboard the etersoft cluster 2024-10-11 18:00:57 +00:00			`condition: workload.enabled`
Install kyverno 2024-09-28 19:53:35 +00:00			`needs:`
			`- platform/db-operator`
Migrate authentik from application ns to platform ns Increase authentik memory requests and limits from 512Mi to 1Gi Issue: https://gitea.badhouseplants.net/allanger/k8s-deployment/issues/1 2024-09-03 16:01:56 +00:00			`inherit:`
			`- template: default-env-values`
			`- template: default-env-secrets`
			`- template: ext-database`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
Migrate minio to the platform namespace 2024-09-12 12:45:25 +00:00			`- name: minio`
			`chart: minio-standalone/minio`
Update Helm release minio to v5.3.0 2024-10-12 01:01:22 +00:00			`version: 5.3.0`
Migrate minio to the platform namespace 2024-09-12 12:45:25 +00:00			`namespace: platform`
			`inherit:`
			`- template: default-env-values`
			`- template: default-env-secrets`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
Install kyverno 2024-09-28 19:53:35 +00:00			`- name: kyverno`
			`chart: kyverno/kyverno`
			`namespace: kyverno`
Onboard the etersoft cluster 2024-10-11 18:00:57 +00:00			`condition: workload.enabled`
Install kyverno 2024-09-28 19:53:35 +00:00			`labels:`
			`bootstrap: true`
chore(deps): update helm release kyverno to v3.3.3 2024-11-19 01:01:39 +00:00			`version: 3.3.3`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
Install kyverno 2024-09-28 19:53:35 +00:00			`- name: kyverno-policies`
			`chart: kyverno/kyverno-policies`
			`namespace: kyverno`
Onboard the etersoft cluster 2024-10-11 18:00:57 +00:00			`condition: workload.enabled`
Install kyverno 2024-09-28 19:53:35 +00:00			`labels:`
			`bootstrap: true`
chore(deps): update helm release kyverno-policies to v3.3.1 2024-11-19 01:01:49 +00:00			`version: 3.3.1`
Install kyverno 2024-09-28 19:53:35 +00:00			`needs:`
			`- kyverno/kyverno`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
Install kyverno 2024-09-28 19:53:35 +00:00			`- name: custom-kyverno-policies`
			`chart: ../../kustomizations/kyverno/`
			`namespace: kyverno`
Onboard the etersoft cluster 2024-10-11 18:00:57 +00:00			`condition: workload.enabled`
Install kyverno 2024-09-28 19:53:35 +00:00			`labels:`
			`bootstrap: true`
			`needs:`
			`- kyverno/kyverno`
A big refactoring and postgres17 init 2024-10-30 20:03:58 +00:00
Install and set up External DNS 2024-10-16 08:59:38 +00:00			`- name: external-dns`
			`chart: external-dns/external-dns`
			`version: 1.15.0`
			`namespace: platform`
			`inherit:`
			`- template: default-env-values`
			`- template: default-env-secrets`
Install keel to the cluster 2024-11-18 12:55:54 +00:00
			`- name: keel`
			`chart: keel/keel`
			`version: 1.0.4`
			`namespace: platform`
			`condition: workload.enabled`
Deploy teleport-cluster instance I won't use it atm because it requires an external account, and it doesn't play well with my understanding of self-hosting and indie culture. 2024-10-15 15:11:34 +00:00
			`- name: teleport-cluster`
			`installed: true`
			`version: 16.4.2`
			`chart: teleport/teleport-cluster`
			`namespace: teleport-cluster`
			`condition: teleport.enabled`
			`inherit:`
			`- template: default-env-values`