feat: add plausible helmfile setup

2025-06-23 10:56:57 +02:00
parent e533015e38
commit 3b8c286842
8 changed files with 147 additions and 0 deletions
@@ -0,0 +1,14 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-plausible-secure-external
+  namespace: plausible
+spec:
+  description: Allow Plausible External
+  egress:
+    - toFQDNs:
+        - matchName: data.iana.org
+        - matchName: raw.githubusercontent.com
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: plausible-analytics
@@ -0,0 +1,15 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-plausible-secure-gravatar
+  namespace: plausible
+spec:
+  description: Allow Plausible Gravatar
+  egress:
+    - toFQDNs:
+        - matchName: secure.gravatar.com
+        - matchName: gravatar.com
+        - matchName: www.gravatar.com
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: plausible-analytics
@@ -0,0 +1,41 @@
+{{- if .Values.clusterConfig.argo.enabled }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: plausible-analytics
+  namespace: argocd
+spec:
+  destination:
+    namespace: plausible
+    server: 'https://kubernetes.default.svc'
+  sources:
+  - repoURL: 'https://imio.github.io/helm-charts'
+    targetRevision: 0.4.0
+    chart: plausible-analytics
+    helm:
+      valueFiles:
+        - $values/values/plausible/values/values.yaml
+  - repoURL: {{ .Values.clusterConfig.manifests }}
+    targetRevision: main
+    ref: values
+  project: aux
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: aux
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+    {{- if .Values.plausible.autosync }}
+    automated:
+      prune: true
+      selfHeal: true
+    {{- end }}
+  ignoreDifferences:
+    - kind: Secret
+      name: plausible-analytics
+      jqPathExpressions:
+        - '.data'
+        - '.metadata.labels'
+        - '.metadata.annotations'
+{{- end }}