mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
96 lines
2.6 KiB
YAML
96 lines
2.6 KiB
YAML
# infrastructure/percona-everest/values.yaml
|
|
# Percona Everest - Cloud-native database management platform
|
|
#
|
|
# Provides MySQL (PXC), MongoDB (PSMDB), and PostgreSQL operators
|
|
# with a unified web UI dashboard for managing database clusters.
|
|
#
|
|
# UI: https://everest.kube.huskypup.net
|
|
# DB Namespace: everest (managed databases go here)
|
|
# Operator Namespace: everest-system
|
|
# OLM Namespace: everest-olm
|
|
|
|
# Disable telemetry
|
|
telemetry: false
|
|
|
|
# Server configuration
|
|
server:
|
|
resources:
|
|
limits:
|
|
memory: 500Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 20Mi
|
|
service:
|
|
name: everest
|
|
type: ClusterIP
|
|
port: 8080
|
|
# RBAC - enabled for security
|
|
rbac:
|
|
enabled: true
|
|
policy: |
|
|
g, admin, role:admin
|
|
# OIDC configuration for Authentik SSO
|
|
# Everest validates OIDC at startup via the issuerUrl's .well-known endpoint.
|
|
# The ConfigMap key is "oidc.config" (YAML block with clientId, issuerUrl, scopes).
|
|
# The helm.sh/resource-policy: keep annotation preserves it across upgrades.
|
|
# On fresh install, OIDC may not be available yet (Authentik blueprint not processed).
|
|
# In that case, leave oidc empty here and patch the ConfigMap after Authentik is ready:
|
|
# kubectl -n everest-system patch configmap everest-settings --type=merge \
|
|
# -p '{"data":{"oidc.config":"clientId: percona-everest-oidc-client-id-static-2025\nissuerUrl: https://auth.kube.huskypup.net/application/o/percona-everest/\nscopes:\n - openid\n - profile\n - email\n"}}'
|
|
# kubectl -n everest-system rollout restart deployment/everest-server
|
|
oidc: {}
|
|
# TLS terminated at ingress layer - no need for server-side TLS
|
|
tls:
|
|
enabled: false
|
|
|
|
# Operator configuration
|
|
operator:
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 5m
|
|
memory: 64Mi
|
|
|
|
# Data importers - all three DB operators enabled
|
|
dataImporters:
|
|
perconaPGOperator:
|
|
enabled: true
|
|
perconaPXCOperator:
|
|
enabled: true
|
|
perconaPSMDBOperator:
|
|
enabled: true
|
|
|
|
# OLM is required for Everest operator management
|
|
olm:
|
|
install: true
|
|
namespace: "everest-olm"
|
|
namespaceOverride: "everest-olm"
|
|
|
|
# Database namespace - where managed DB clusters are deployed
|
|
dbNamespace:
|
|
enabled: true
|
|
namespaceOverride: "everest"
|
|
|
|
# =====================================================
|
|
# DISABLE ALL BUNDLED MONITORING
|
|
# We already have Prometheus + Grafana (Phase 5)
|
|
# =====================================================
|
|
kube-state-metrics:
|
|
enabled: false
|
|
|
|
monitoring:
|
|
enabled: false
|
|
|
|
createMonitoringResources: false
|
|
|
|
pmm:
|
|
enabled: false
|
|
|
|
pmm3:
|
|
enabled: false
|
|
|
|
# Ingress handled externally via percona-everest/ingress.yaml
|
|
ingress:
|
|
enabled: false
|