Initial commit

apps/n8n/values.yaml

@@ -0,0 +1,161 @@
+# kubernetes/apps/n8n/values.yaml
+# n8n workflow automation platform
+# Using chart: https://riatlas.github.io/chart__n8n
+
+# --- n8n image ---
+image:
+  repository: n8nio/n8n
+  tag: "2.0.3"
+
+# --- n8n encryption key (loaded from secret) ---
+n8n:
+  encryption_key: # Will be set via extraEnv from n8n-config-secret
+
+# --- n8n configuration ---
+config:
+  database:
+    type: postgresdb
+    postgresdb:
+      host: pg-n8n-rw  # CNPG read-write service
+      port: 5432
+      database: n8n
+      user: n8n
+      schema: public
+  generic:
+    timezone: America/New_York
+  path: /
+  host: n8n.kube.huskypup.net
+  port: 5678
+  protocol: https
+  executions:
+    mode: regular
+    saveDataOnError: all
+    saveDataOnSuccess: all
+    saveDataManualExecutions: true
+    pruneData: true
+    pruneDataMaxAge: 3760  # 1 year in hours
+
+# --- Secret values (passwords, etc.) ---
+# Note: password is injected via extraEnvSecrets below
+secret: {}
+
+# --- Deployment replicas ---
+# Increased to 2 for high availability and faster response times
+replicaCount: 2
+
+# --- Service configuration ---
+service:
+  type: ClusterIP
+  port: 80
+
+# --- Security context ---
+securityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+  seccompProfile:
+    type: RuntimeDefault
+
+# --- Ingress disabled - Istio VirtualService handles routing ---
+ingress:
+  enabled: false
+
+# --- Persistence for workflows and data ---
+persistence:
+  enabled: true
+  type: existing
+  existingClaim: n8n-main-persistence
+  storageClass: rook-ceph-block
+  accessModes:
+    - ReadWriteOnce
+  size: 10Gi
+
+# --- Resources ---
+# No CPU limits (burst allowed). Keep requests minimal for scheduling.
+resources:
+  requests:
+    cpu: 100m
+    memory: 512Mi
+
+# --- Startup probe ---
+# Allows app to start without being killed by liveness probe
+startupProbe:
+  httpGet:
+    path: /healthz
+    port: http
+  initialDelaySeconds: 10
+  periodSeconds: 5
+  timeoutSeconds: 3
+  failureThreshold: 12  # 60 seconds total startup time
+
+# --- Readiness probe ---
+readinessProbe:
+  httpGet:
+    path: /healthz
+    port: http
+  initialDelaySeconds: 5
+  periodSeconds: 5
+  timeoutSeconds: 3
+  failureThreshold: 2
+
+# --- Liveness probe ---
+livenessProbe:
+  httpGet:
+    path: /healthz
+    port: http
+  initialDelaySeconds: 10
+  periodSeconds: 10
+  timeoutSeconds: 5
+  failureThreshold: 3
+
+# --- Extra environment variables (from secrets) ---
+# Secrets are loaded from Kubernetes secrets
+extraEnvSecrets:
+  # Database password from CNPG-managed secret
+  DB_POSTGRESDB_PASSWORD:
+    name: pg-n8n-app
+    key: password
+
+  # n8n encryption key
+  N8N_ENCRYPTION_KEY:
+    name: n8n-config-secret
+    key: encryption-key
+
+# --- Extra environment variables (plain values) ---
+extraEnv:
+  # Webhook & Editor URLs
+  WEBHOOK_URL: https://n8n.kube.huskypup.net/
+  N8N_EDITOR_BASE_URL: https://n8n.kube.huskypup.net
+
+  # Logging
+  N8N_LOG_LEVEL: error
+
+# --- Disable built-in PostgreSQL (we'll deploy it separately with Bitnami) ---
+postgresql:
+  enabled: false
+
+# --- Disable Redis (not needed for single instance) ---
+redis:
+  enabled: false
+
+# --- Scaling (disabled for single instance) ---
+scaling:
+  enabled: false
+
+# --- Extra volumes ---
+extraVolumes: []
+
+# --- Extra volume mounts ---
+extraVolumeMounts: []
+
+
+
+# --- Node selector ---
+nodeSelector: {}
+
+# --- Tolerations ---
+tolerations: []
+
+# --- Affinity ---
+affinity: {}