feat: Add uptermd chart

2026-07-21 14:00:23 +02:00
parent 7369ad3c8a
commit b5c24dc26f
8 changed files with 163 additions and 0 deletions
@@ -0,0 +1,2 @@
+uptermd:
+  enabled: true
@@ -0,0 +1,3 @@
+uptermd:
+  enabled: false
+  autosync: false
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - _manifest.yaml
@@ -0,0 +1,24 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - target:
+      kind: Ingress
+      name: uptermd
+    patch: |
+      $patch: delete
+      apiVersion: networking.k8s.io/v1
+      kind: Ingress
+      metadata:
+        name: uptermd
+  - target:
+      group: cert-manager.io
+      kind: Issuer
+      name: uptermd-letsencrypt
+    patch: |
+      $patch: delete
+      apiVersion: cert-manager.io/v1
+      kind: Issuer
+      metadata:
+        name: uptermd-letsencrypt
@@ -0,0 +1,30 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: uptermd
+  namespace: uptermd
+  labels:
+    app.kubernetes.io/name: uptermd
+  annotations:
+    cert-manager.io/cluster-issuer: ca-issuer
+    haproxy.org/backend-protocol: h1
+    haproxy.org/timeout-tunnel: "3600s"
+    haproxy.org/timeout-client: "3600s"
+    haproxy.org/timeout-server: "3600s"
+spec:
+  ingressClassName: haproxy
+  rules:
+    - host: upterm.hel1.obx
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: uptermd
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - upterm.hel1.obx
+      secretName: uptermd-tls
@@ -0,0 +1,37 @@
+{{- if .Values.clusterConfig.argo.enabled }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: uptermd
+  namespace: argocd
+spec:
+  destination:
+    namespace: uptermd
+    server: 'https://kubernetes.default.svc'
+  sources:
+  - repoURL: {{ .Values.clusterConfig.manifests }}
+    targetRevision: HEAD
+    path: helmfile.d
+    plugin:
+      name: helmfile-cmp
+      env:
+      - name: CLUSTER_NAME
+        value: {{ .Values.clusterConfig.cluster }}
+      - name: HELMFILE_ENVIRONMENT
+        value: default
+      - name: HELMFILE_FILE_PATH
+        value: uptermd.yaml.gotmpl
+  project: sys
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: sys
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      - ServerSideApply=true
+    {{- if .Values.uptermd.autosync }}
+    automated:
+      prune: true
+    {{- end }}
+{{- end }}
@@ -0,0 +1,20 @@
+replicaCount: 1
+
+websocket:
+  enabled: true
+
+service:
+  type: ClusterIP
+
+resources:
+  limits:
+    memory: 512Mi
+  requests:
+    cpu: 100m
+    memory: 512Mi
+
+# No SSH host key is provided, so uptermd generates an ephemeral one on each
+# pod start
+host_keys: {}
+
+authorized_keys: []