mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
Scooby Husky
a8b16fa4cb
apps/nextcloud/manifests/redis-cr.yaml used redis.redis.opstreelabs.in/v1beta2 (guessed, flagged as unverified when written) - the actually-installed CRD only has v1beta1. ArgoCD validates all resource API groups/versions before syncing anything, so this one bad apiVersion blocked the ENTIRE nextcloud Application from syncing at all (every resource showed OutOfSync, not just this one). Also fixed against the live CRD schema: redisSecret belongs nested under kubernetesConfig, not top-level, and redisExporter.image is required by the schema even when enabled: false. Verified live: kubectl apply succeeded and the Redis resource was created before committing this.
77 lines
2.2 KiB
YAML
77 lines
2.2 KiB
YAML
---
|
|
# Standalone Redis via the ot-container-kit redis-operator that's already
|
|
# deployed as infra (argocd-apps/infrastructure/redis-operator.yaml) but
|
|
# currently unused - GitLab's Redis is a hand-rolled StatefulSet instead
|
|
# (apps/gitlab/manifests/redis-cluster.yaml), not this operator. This is the
|
|
# first real consumer of it in the repo.
|
|
#
|
|
# Verified against the live CRD (redis.redis.redis.opstreelabs.in) 2026-08-17:
|
|
# apiVersion is v1beta1, not v1beta2 as originally guessed here (blocked
|
|
# ArgoCD from syncing the *entire* nextcloud Application - it validates all
|
|
# resource types up front, so one unknown apiVersion blocks everything, not
|
|
# just this resource). redisSecret also belongs nested under
|
|
# kubernetesConfig, not top-level.
|
|
apiVersion: generators.external-secrets.io/v1alpha1
|
|
kind: Password
|
|
metadata:
|
|
name: nextcloud-redis-password
|
|
namespace: nextcloud
|
|
spec:
|
|
length: 32
|
|
digits: 5
|
|
symbols: 0
|
|
noUpper: false
|
|
allowRepeat: true
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: nextcloud-redis-password
|
|
namespace: nextcloud
|
|
spec:
|
|
refreshInterval: "0" # generate once, don't rotate (Redis CR reads this at pod start only)
|
|
target:
|
|
name: redis-nextcloud-secret
|
|
creationPolicy: Owner
|
|
template:
|
|
data:
|
|
password: "{{ .password }}"
|
|
dataFrom:
|
|
- sourceRef:
|
|
generatorRef:
|
|
apiVersion: generators.external-secrets.io/v1alpha1
|
|
kind: Password
|
|
name: nextcloud-redis-password
|
|
---
|
|
apiVersion: redis.redis.opstreelabs.in/v1beta1
|
|
kind: Redis
|
|
metadata:
|
|
name: redis-nextcloud
|
|
namespace: nextcloud
|
|
spec:
|
|
kubernetesConfig:
|
|
image: quay.io/opstree/redis:v7.0.12
|
|
imagePullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 25m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
redisSecret:
|
|
name: redis-nextcloud-secret
|
|
key: password
|
|
redisExporter:
|
|
# image is required by the CRD schema even when enabled: false
|
|
enabled: false
|
|
image: quay.io/opstree/redis-exporter:v1.44.0
|
|
storage:
|
|
volumeClaimTemplate:
|
|
spec:
|
|
accessModes: ["ReadWriteOnce"]
|
|
storageClassName: rook-ceph-block
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|