Files
tutortool/deploy/values.yaml
s0wlz (Matthias Puchstein) 16e8c6c865
All checks were successful
Release / release (push) Successful in 5m28s
ci: upgrade Helm to v4.1.4, switch images to Alpine 3.23, disable backup cron
- release.yml: bump Helm v3.16.2 → v4.1.4; replace --wait with
  --rollback-on-failure (Helm 4 rename, implies --wait)
- Dockerfile: backend builder rust:1.95-slim-bookworm → rust:1.95-alpine3.23
  (adds cmake/g++/perl/nasm/sqlite-dev for aws-lc-rs + sqlx); runtime
  debian:trixie-slim → alpine:3.23 (adds sqlite-libs, uses adduser -D)
- cronjob-backup: gate on backup.enabled, pin image to alpine:3.23
- values.yaml: backup.enabled default true
- values_override.yaml: backup.enabled: false (disabled until tested)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-06 15:29:51 +02:00

72 lines
1.3 KiB
YAML

replicaCount: 1
strategy:
type: Recreate
image:
repository: registry.itsh.dev/s0wlz/tutortool
pullPolicy: IfNotPresent
tag: latest
serviceAccount:
create: true
name: ""
service:
port: 80
targetPort: 3000
containerPort: 3000
resources:
requests:
cpu: 50m
memory: 64Mi
limits:
cpu: 200m
memory: 256Mi
pvc:
storageClassName: hcloud-volumes
storage: 1Gi
imagePullSecrets:
- name: itsh-registry
httpRoute:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
parentRefs:
- name: default
namespace: nginx-gateway
hostnames:
- tutor.puchstein.dev
sectionName: https-tutor-puchstein-dev
httpRedirectSectionName: http
# JWT_SECRET provisioned as a pre-existing K8s Secret named here.
# Do not set jwtSecretValue in committed values — provision via kubectl manually.
jwtSecretName: tutortool-jwt
backup:
enabled: true
env:
DATABASE_URL: sqlite:/data/attendance.db
STATIC_DIR: /app/frontend/build
extra: {}
# extra:
# DEMO: "true" # seeds demo data on startup (idempotent, INSERT OR IGNORE)
vpa:
enabled: false
updateMode: "Off"
containerPolicies:
- containerName: app
minAllowed:
cpu: 10m
memory: 32Mi
maxAllowed:
cpu: 1000m
memory: 512Mi