mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
113 lines
2.1 KiB
YAML
113 lines
2.1 KiB
YAML
# Teslamate - Tesla data logger
|
|
# Uses CNPG PostgreSQL with auto-rotating passwords via ESO
|
|
|
|
image:
|
|
repository: teslamate/teslamate
|
|
tag: 1.30.1
|
|
pullPolicy: IfNotPresent
|
|
|
|
env:
|
|
TZ: America/Chicago
|
|
|
|
# PostgreSQL configuration (uses CNPG-managed database)
|
|
DATABASE_HOST: pg-teslamate-rw.teslamate.svc
|
|
DATABASE_USER: teslamate
|
|
DATABASE_NAME: teslamate
|
|
|
|
# Database password from CNPG-generated secret
|
|
DATABASE_PASS:
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: pg-teslamate-app
|
|
key: password
|
|
|
|
# Encryption key from Vault
|
|
ENCRYPTION_KEY:
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: teslamate-config-secret
|
|
key: encryption-key
|
|
|
|
# MQTT settings (disabled by default, can enable later)
|
|
DISABLE_MQTT: "true"
|
|
|
|
# Virtual host for proper URL generation
|
|
VIRTUAL_HOST: teslamate.kube.huskypup.net
|
|
|
|
# Port configuration
|
|
PORT: "4000"
|
|
|
|
service:
|
|
main:
|
|
ports:
|
|
http:
|
|
port: 4000
|
|
|
|
# Ingress disabled - Istio VirtualService handles routing
|
|
ingress:
|
|
main:
|
|
enabled: false
|
|
|
|
persistence:
|
|
import:
|
|
enabled: false
|
|
|
|
# Disable built-in postgresql (we use CNPG)
|
|
postgresql:
|
|
enabled: false
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
|
|
# Resource limits
|
|
resources:
|
|
requests:
|
|
memory: "256Mi"
|
|
cpu: "50m"
|
|
limits:
|
|
cpu: "500m"
|
|
memory: "512Mi"
|
|
|
|
# Health probes
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /
|
|
port: 4000
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
readiness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /
|
|
port: 4000
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 3
|
|
failureThreshold: 2
|
|
startup:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /
|
|
port: 4000
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 5
|
|
timeoutSeconds: 3
|
|
failureThreshold: 12
|
|
|
|
# Reloader annotations for auto-restart on secret changes
|
|
podAnnotations:
|
|
secret.reloader.stakater.com/reload: "pg-teslamate-app,teslamate-config-secret"
|