Initial commit

2026-08-20 23:16:49 +00:00 · 2026-03-09 20:21:35 -05:00
commit aacb8eebbe
314 changed files with 21766 additions and 0 deletions
@@ -0,0 +1,112 @@
+# Teslamate - Tesla data logger
+# Uses CNPG PostgreSQL with auto-rotating passwords via ESO
+
+image:
+  repository: teslamate/teslamate
+  tag: 1.30.1
+  pullPolicy: IfNotPresent
+
+env:
+  TZ: America/Chicago
+  
+  # PostgreSQL configuration (uses CNPG-managed database)
+  DATABASE_HOST: pg-teslamate-rw.teslamate.svc
+  DATABASE_USER: teslamate
+  DATABASE_NAME: teslamate
+  
+  # Database password from CNPG-generated secret
+  DATABASE_PASS:
+    valueFrom:
+      secretKeyRef:
+        name: pg-teslamate-app
+        key: password
+  
+  # Encryption key from Vault
+  ENCRYPTION_KEY:
+    valueFrom:
+      secretKeyRef:
+        name: teslamate-config-secret
+        key: encryption-key
+  
+  # MQTT settings (disabled by default, can enable later)
+  DISABLE_MQTT: "true"
+  
+  # Virtual host for proper URL generation
+  VIRTUAL_HOST: teslamate.kube.huskypup.net
+  
+  # Port configuration
+  PORT: "4000"
+
+service:
+  main:
+    ports:
+      http:
+        port: 4000
+
+# Ingress disabled - Istio VirtualService handles routing
+ingress:
+  main:
+    enabled: false
+
+persistence:
+  import:
+    enabled: false
+
+# Disable built-in postgresql (we use CNPG)
+postgresql:
+  enabled: false
+
+securityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+
+# Resource limits
+resources:
+  requests:
+    memory: "256Mi"
+    cpu: "50m"
+  limits:
+    cpu: "500m"
+    memory: "512Mi"
+
+# Health probes
+probes:
+  liveness:
+    enabled: true
+    custom: true
+    spec:
+      httpGet:
+        path: /
+        port: 4000
+      initialDelaySeconds: 10
+      periodSeconds: 10
+      timeoutSeconds: 5
+      failureThreshold: 3
+  readiness:
+    enabled: true
+    custom: true
+    spec:
+      httpGet:
+        path: /
+        port: 4000
+      initialDelaySeconds: 5
+      periodSeconds: 5
+      timeoutSeconds: 3
+      failureThreshold: 2
+  startup:
+    enabled: true
+    custom: true
+    spec:
+      httpGet:
+        path: /
+        port: 4000
+      initialDelaySeconds: 10
+      periodSeconds: 5
+      timeoutSeconds: 3
+      failureThreshold: 12
+
+# Reloader annotations for auto-restart on secret changes
+podAnnotations:
+  secret.reloader.stakater.com/reload: "pg-teslamate-app,teslamate-config-secret"