feat(release): Add configurations for Node-RED and Outline services in kustomization and release files

TheMeinerLP · TheMeinerLP · commit 6555a8a06e2c · 2025-10-05T19:26:43.000+02:00
diff --git a/apps/clusters/feathre-core/base-apps/kustomization.yaml b/apps/clusters/feathre-core/base-apps/kustomization.yaml
@@ -5,3 +5,5 @@ resources:
   - shlink
   - bluemap
   - harbor
+  - node-red
+  - outline
diff --git a/apps/clusters/feathre-core/base-apps/node-red/kustomization.yaml b/apps/clusters/feathre-core/base-apps/node-red/kustomization.yaml
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: node-red
+generatorOptions:
+  disableNameSuffixHash: true
+resources:
+  - ../../../../../apps/base/node-red/
+patches:
+  - path: release.yaml
+
+secretGenerator: []
+#  - name: minio-password-secret
+#    envs:
+#      - minio.env
diff --git a/apps/clusters/feathre-core/base-apps/node-red/release.yaml b/apps/clusters/feathre-core/base-apps/node-red/release.yaml
@@ -0,0 +1,33 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: node-red
+  namespace: node-red
+spec:
+  chart:
+    spec:
+      version: "*"
+  values:
+    persistence:
+      enabled: true
+    ingress:
+      annotations:
+        cert-manager.io/cluster-issuer: step-ca
+        ingress.kubernetes.io/proxy-body-size: 2G
+        nginx.ingress.kubernetes.io/proxy-body-size: 2G
+      className: nginx
+      enabled: true
+      hosts:
+        - host: node-red.apps.onelite.feather
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - certificate:
+            enabled: true
+            issuerRef:
+              kind: ClusterIssuer
+              name: step-ca
+          hosts:
+            - node-red.apps.onelite.feather
+          secretName: node-red-apps-onelite-feather-tls
diff --git a/apps/clusters/feathre-core/base-apps/outline/kustomization.yaml b/apps/clusters/feathre-core/base-apps/outline/kustomization.yaml
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: outline
+generatorOptions:
+  disableNameSuffixHash: true
+resources:
+  - ../../../../../apps/base/outline/
+patches:
+  - path: release.yaml
+
+secretGenerator:
+  - name: outline-secret
+    envs:
+      - outline.env
diff --git a/apps/clusters/feathre-core/base-apps/outline/outline.env b/apps/clusters/feathre-core/base-apps/outline/outline.env
@@ -0,0 +1,14 @@
+SECRET_KEY=ENC[AES256_GCM,data:MLQWo+qZJ/MNwK4UOzXufymv8ifw9m8o29XR3/b3NHrO7dFKDn2JWOWurD7cvxEG6QTdOAitBFan8HN8eVnGzg==,iv:xA+M+X6O5tsQKU9qkYp6n8SvA7jnt2HlUXqYGsGDETM=,tag:x0UtVLG1DOtGHC2VjNcn9w==,type:str]
+UTILS_SECRET=ENC[AES256_GCM,data:44hM28prGFC0WAlXNYisRSueRhoXLcpoyk2O9QZifKU82EFgyHeMV7ThQ0o7E4rJiZ14rMazVOi/HblXCmEh5Q==,iv:9AHbCBU+3J57m3oOCX52qlaiO1UpQRQnA3aVB9xDS4c=,tag:gLKhsbmcO27G0kAAKbwUZQ==,type:str]
+DATABASE_URL=ENC[AES256_GCM,data:CQAfTbDtuD1LCWFE+vmujSEOUp6Y3d7HpIdnSymPIkYGqSinRVaJ4+S8MYd9mcwOoUrI2VjDb3Z1sqVPtsuEj/1wWhSvmgH0A5PhXn1vGVHfIZT9wYJA+nGOQWyxuH9Oq9LWqYXRUVUQoZMNQ1DNI9BljHM=,iv:7/H75Hk07w7x94OEape6/dKE50oSj2Nh6r7sGIR5dec=,tag:tg6O77Io2SFFGzo88Q+Evg==,type:str]
+AWS_ACCESS_KEY_ID=ENC[AES256_GCM,data:yuMMPtp3VSitLdXgqdz4uY178P4=,iv:TApq/Hoz3uqq7aE7cbjUzh41sPDY6MAx6QPc9Os4h9o=,tag:mSzPVTDMOCHGbEOuqePUiw==,type:str]
+AWS_SECRET_ACCESS_KEY=ENC[AES256_GCM,data:E1QBjqkhQF4JeBPu+zqqp0lE5GXmn97OhWaAa62B8LsAbwCdchuAxw==,iv:ct7YqAnez/GirX8lzZI6yEARBtRIMP4xn3oZvFlUDCg=,tag:TKg7W/tEdnerNhNKm7ZUwg==,type:str]
+AZURE_CLIENT_SECRET=ENC[AES256_GCM,data:xn80o/zt6Qfuiu6UHEDM7GkUqfC1K6NatanbwVuqPb6x2fG4t9sJOg==,iv:Rmy/kxMClddyN/WmiTOOLcqev6MK2SN00j+fgxITZq8=,tag:9Ul2tA0vak/CZTM/U66fLQ==,type:str]
+REDIS_URL=ENC[AES256_GCM,data:A8Dg8trg/VydhSL4vTnTk1BZ9IOqOWVRCg4e3veb9EHcIP1X09TGr/g1fnc4zTgjC1uMrOlnV8pRYt1q8vpo2zWQdCAJhx3qeg0ITufaolggiIZITvE=,iv:K8xJ4bjPZfPLQCN5njH0Q9bmXWHcz/2MhHiYzr1X2Ec=,tag:L1o2/HGUlLaJISaHV7eSyw==,type:str]
+sops_lastmodified=2025-10-05T17:25:41Z
+sops_mac=ENC[AES256_GCM,data:HQj4wyGHWQ40pEo9NH7cCdM5IQeImbTZ+qmzBM+XYPrQsbSXpnX4fZeUENc6LMuEngq7HxJutFoMpt+AoM79JbiMOX2LFz7oXAt31KQZpJO94JNFCjROTzkZQc4VkVpovIabySchTVYs8jFC4uNOYDuWJSYHPptRUs5g6iZFHVw=,iv:l99D/GeHna4wRivNy6Kj0u1NbwLO765nu+Gd4GFBtGM=,tag:oZFDr6vowK65gIcwhDrDOA==,type:str]
+sops_pgp__list_0__map_created_at=2025-03-22T11:26:33Z
+sops_pgp__list_0__map_enc=-----BEGIN PGP MESSAGE-----\n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\nCr5zkJMW4w4z\n=wCnx\n-----END PGP MESSAGE-----
+sops_pgp__list_0__map_fp=0231831CB40B8E587B7353CBA3AF727721205A62
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.10.2
diff --git a/apps/clusters/feathre-core/base-apps/outline/release.yaml b/apps/clusters/feathre-core/base-apps/outline/release.yaml
@@ -0,0 +1,144 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: outline
+  namespace: outline
+spec:
+  values:
+    image:
+      repository: docker.getoutline.com/outlinewiki/outline
+      # This sets the pull policy for images.
+      pullPolicy: IfNotPresent
+      # Overrides the image tag whose default is the chart appVersion.
+      tag: "0.87.3"
+    replicaCount: 1
+    ingress:
+      enabled: true
+      className: "nginx"
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        ingress.kubernetes.io/proxy-body-size: "5G"
+        nginx.ingress.kubernetes.io/proxy-body-size: "5G"
+      hosts:
+        - host: outline.onelitefeather.dev
+          paths:
+            - path: /
+              pathType: ImplementationSpecific
+      tls:
+        - secretName: outline-onelitefeather-dev-tls
+          hosts:
+            - outline.onelitefeather.dev
+    livenessProbe:
+      initialDelaySeconds: 300
+      httpGet:
+        path: /_health
+        port: 3000
+    readinessProbe:
+      initialDelaySeconds: 300
+      httpGet:
+        path: /_health
+        port: 3000
+    outline:
+      # Generic Outline environment variables
+      general:
+        nodeEnv: production
+        url: "https://outline.onelitefeather.dev"
+        cdnUrl: ""
+        forceHttps: true
+        enableUpdates: true
+        webConcurrency: 5
+        maxImportSize: "5120000"
+        utilsSecret: ""
+        secretKey: ""
+        sslKey: ""
+        sslCert: ""
+        defaultLanguage: en_US
+        dropboxKey: ""
+        logLevel: verbose
+        existingSecret: "outline-secret"
+      rateLimiter:
+        enabled: false
+        requests: 1000
+        durationWindow: 60
+      sentry:
+        dsn: ""
+        environment: ""
+        existingSecret: ""
+      notion:
+        clientId: ""
+        clientSecret: ""
+        existingSecret: ""
+      database:
+        url: ""
+        connectionPoolMin: 5
+        connectionPoolMax: 15
+        pgSslMode: disable
+        existingSecret: "outline-secret"
+      slackChannel:
+        verificationToken: ""
+        appId: ""
+        messageActions: true
+        existingSecret: ""
+      redis:
+        url: ""
+        existingSecret: "outline-secret"
+      auth:
+        slack:
+          clientId: ""
+          clientSecret: ""
+          existingSecret: ""
+        google:
+          clientId: ""
+          clientSecret: ""
+          existingSecret: ""
+        azure:
+          clientId: "4ac7a2a9-4812-4745-b90b-71f0723d706e"
+          clientSecret: ""
+          resourceAppId: "00000003-0000-0000-c000-000000000000"
+          existingSecret: "outline-secret"
+        github:
+          clientId: ""
+          clientSecret: ""
+          appName: ""
+          appId: ""
+          appPrivateKey: ""
+          existingSecret: ""
+        discord:
+          clientId: ""
+          clientSecret: ""
+          serverId: ""
+          serverRoles: ""
+          existingSecret: ""
+        oidc:
+          clientId: ""
+          clientSecret: ""
+          redirectUri: ""
+          tokenUri: ""
+          userInfoUri: ""
+          logoutUri: ""
+          usernameClaim: "preferred_username"
+          scopes: "openid profile email"
+          displayName: "OIDC"
+          existingSecret: ""
+      fileStorage:
+        type: s3
+        uploadMaxSize: "26214400"
+        local:
+          rootDir: /var/lib/outline/data
+        s3:
+          region: "us-west-rack2"
+          uploadBucketUrl: "http://s3.onelite.feather:7480"
+          uploadBucketName: "outline"
+          forcePathStyle: true
+          acl: private
+          existingSecret: "outline-secret"
+      smtp:
+        host: ""
+        port: 587
+        username: ""
+        password: ""
+        fromEmail: ""
+        replyToEmail: ""
+        tlsCipher: ""
+        secure: true
+        existingSecret: ""

-Original file line number
+Diff line change
   - shlink
   - bluemap
   - harbor
 +  - node-red
 +  - outline