mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
48 lines
1.1 KiB
YAML
48 lines
1.1 KiB
YAML
# apps/rancher/values.yaml
|
|
# Rancher - Kubernetes Management Platform with Authentik SSO
|
|
|
|
hostname: rancher.kube.huskypup.net
|
|
|
|
# Exposed via Istio edge Gateway + VirtualService (apps/rancher/istio-virtualservice.yaml)
|
|
ingress:
|
|
enabled: false
|
|
|
|
# TLS terminates at Istio ingressgateway
|
|
tls: external
|
|
|
|
# Single replica for homelab (scale up if needed)
|
|
replicas: 1
|
|
|
|
# Storage class for Rancher's internal state
|
|
# Note: Rancher itself is mostly stateless; state is in etcd/k8s
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 512Mi
|
|
limits:
|
|
memory: 2Gi
|
|
|
|
# Allow Rancher to manage the local cluster
|
|
addLocal: "true"
|
|
|
|
# Audit logging
|
|
auditLog:
|
|
level: 1
|
|
maxAge: 7
|
|
maxBackup: 3
|
|
maxSize: 100
|
|
|
|
# Bootstrap password - will be rotated post-deploy via Authentik SSO
|
|
# This is used only for initial access before SSO is configured
|
|
bootstrapPassword: "ChangeMe-BootstrapOnly"
|
|
|
|
# Extra environment variables (not used for OIDC - configured via AuthConfig CRD post-deploy)
|
|
extraEnv: []
|
|
|
|
# Disable Rancher's bundled cert-manager (we already have it)
|
|
certmanager:
|
|
version: ""
|
|
|
|
# Feature flags
|
|
features: "multi-cluster-management=true"
|