Skip to content

Commit f3a6002

Browse files
lukashankelnlukashankeln
committed
feat: adding the initial set of platform defaults
0 parents  commit f3a6002

11 files changed

Lines changed: 245 additions & 0 deletions

‎alloy.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://grafana.github.io/helm-charts chart=alloy
5+
version: 1.8.1
6+
valuesObject:
7+
8+
global:
9+
podSecurityContext:
10+
seccompProfile:
11+
type: RuntimeDefault
12+
13+
configReloader:
14+
resources:
15+
requests:
16+
cpu: 15m
17+
memory: 40Mi
18+
securityContext:
19+
allowPrivilegeEscalation: false
20+
capabilities:
21+
drop:
22+
- ALL

‎argocd.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://argoproj.github.io/argo-helm chart=argo-cd
5+
version: 9.5.11
6+
valuesObject:
7+
releaseName: argocd
8+
valuesObject:
9+
crds:
10+
install: true

‎cert-manager.yaml‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://charts.jetstack.io chart=cert-manager
5+
version: 1.20.0
6+
valuesObject:
7+
installCRDs: true
8+
9+
global:
10+
logLevel: 1 # Warning
11+
revisionHistoryLimit: 1
12+
13+
securityContext:
14+
runAsUser: 1000
15+
runAsGroup: 1000
16+
seccompProfile:
17+
type: RuntimeDefault
18+
containerSecurityContext:
19+
readOnlyRootFilesystem: true
20+
runAsNonRoot: true
21+
allowPrivilegeEscalation: false
22+
23+
config:
24+
enableGatewayAPI: true
25+
26+
extraArgs:
27+
- --logging-format=json
28+
resources:
29+
requests:
30+
cpu: 30m
31+
memory: 125Mi
32+
limits:
33+
cpu: 60m
34+
memory: 250Mi
35+
webhook:
36+
resources:
37+
requests:
38+
cpu: 20m
39+
memory: 80M
40+
limits:
41+
cpu: 20m
42+
memory: 80M
43+
securityContext:
44+
runAsUser: 1000
45+
runAsGroup: 1000
46+
seccompProfile:
47+
type: RuntimeDefault
48+
containerSecurityContext:
49+
readOnlyRootFilesystem: true
50+
runAsNonRoot: true
51+
allowPrivilegeEscalation: false
52+
extraArgs:
53+
- --logging-format=json
54+
cainjector:
55+
enabled: true
56+
securityContext:
57+
runAsUser: 1000
58+
runAsGroup: 1000
59+
containerSecurityContext:
60+
readOnlyRootFilesystem: true
61+
runAsNonRoot: true
62+
allowPrivilegeEscalation: false
63+
resources:
64+
requests:
65+
cpu: 10m
66+
memory: 100M
67+
startupapicheck:
68+
resources:
69+
requests:
70+
cpu: 10m
71+
memory: 100M
72+
securityContext:
73+
runAsUser: 1000
74+
runAsGroup: 1000
75+
containerSecurityContext:
76+
readOnlyRootFilesystem: true
77+
runAsNonRoot: true
78+
allowPrivilegeEscalation: false
79+
extraArgs:
80+
- --logging-format=json

‎external-dns.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://kubernetes-sigs.github.io/external-dns/ chart=external-dns
5+
version: 1.21.1
6+
valuesObject:
7+
revisionHistoryLimit: 1
8+
9+
podSecurityContext:
10+
runAsUser: 65534
11+
runAsGroup: 65534
12+
seccompProfile:
13+
type: RuntimeDefault
14+
securityContext:
15+
allowPrivilegeEscalation: false
16+
readOnlyRootFilesystem: true
17+
runAsNonRoot: true
18+
19+
logFormat: json
20+
logLevel: warning

‎external-secrets-operator.yaml‎

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://charts.external-secrets.io chart=external-secrets
5+
version: 2.6.0
6+
valuesObject:
7+
podSecurityContext:
8+
runAsUser: 1000
9+
runAsGroup: 1000
10+
seccompProfile:
11+
type: RuntimeDefault
12+
resources:
13+
requests:
14+
cpu: 30m
15+
memory: 120Mi
16+
limits:
17+
memory: 300Mi
18+
log:
19+
level: warn
20+
webhook:
21+
podSecurityContext:
22+
runAsUser: 1000
23+
runAsGroup: 1000
24+
seccompProfile:
25+
type: RuntimeDefault
26+
resources:
27+
requests:
28+
cpu: 10m
29+
memory: 80Mi
30+
limits:
31+
memory: 200Mi
32+
certController:
33+
podSecurityContext:
34+
runAsUser: 1000
35+
runAsGroup: 1000
36+
seccompProfile:
37+
type: RuntimeDefault
38+
resources:
39+
requests:
40+
cpu: 10m
41+
memory: 80Mi
42+
limits:
43+
memory: 150Mi

‎flux-operator.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://controlplane.github.io/charts chart=flux-operator
5+
version: 0.48.0
6+
valuesObject: {}

‎kube-prometheus-stack.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://prometheus-community.github.io/helm-charts chart=kube-prometheus-stack
5+
version: 84.5.0
6+
valuesObject: {}

‎loki.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=helm registryUrl=https://grafana.github.io/helm-charts chart=loki
5+
version: 13.6.1
6+
valuesObject: {}

‎renovate-operator.yaml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
apiVersion: mogenius.com/v1alpha1
2+
kind: PlatformDefault
3+
spec:
4+
# renovate: datasource=docker registryUrl=ghcr.io/mogenius/helm-charts chart=renovate-operator
5+
version: 4.7.1
6+
valuesObject:
7+
crd:
8+
mode: template
9+
fullnameOverride: renovate-operator
10+
11+
config:
12+
jobTTLSecondsAfterFinished: 3600
13+
deleteSuccessfulJobs: true
14+
logStorage:
15+
mode: memory
16+
17+
resources:
18+
requests:
19+
cpu: 20m
20+
memory: 64Mi
21+
limits:
22+
cpu: 50m
23+
memory: 128Mi

‎renovate.json‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
{
2+
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
3+
"regexManagers": [
4+
{
5+
"fileMatch": ["\\.yaml$"],
6+
"matchStrings": [
7+
"# renovate: datasource=(?<datasource>[^\\s]+) registryUrl=(?<registryUrl>[^\\s]+) chart=(?<depName>[^\\s]+)\\n\\s+version:\\s+(?<currentValue>[^\\s]+)"
8+
]
9+
}
10+
]
11+
}

0 commit comments

Comments
 (0)