fix: add example app template for argocd

Part-of: <http://gitlab.vnc.biz/uxf/vnctalk-prosody/-/merge_requests/3>
This commit is contained in:
2026-07-15 17:58:02 +02:00
parent 2ae1f8e480
commit 3918ec59e9
+132
View File
@@ -0,0 +1,132 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: prosody
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
server: https://kubernetes.default.svc
namespace: prosody
project: default
source:
# example for a Helm chart from a Git repository
path: charts/prosody
repoURL: git@gitlab.example.com:helmcharts.git
targetRevision: HEAD
helm:
parameters:
- name: nameOverride
value: "prosody"
values: |
imagePullSecrets:
- name: gcr-json-key
securityContext:
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1001
image:
repository: eu.gcr.io/vnc-development/vnctalk-prosody
pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion.
tag: release-13.0.6-vnc
tlsUpdates:
enabled: true
secretName: prosody-tls
ingress:
annotations:
cert-manager.io/cluster-issuer: lets-encrypt
kubernetes.io/tls-acme: "true"
nginx.ingress.kubernetes.io/proxy-read-timeout: "900"
nginx.ingress.kubernetes.io/proxy-body-size: 100m
kubernetes.io/ingress.class: "public"
enabled: true
hosts:
- host: "xmpp.example.com"
paths: ["/xmpp-websocket"]
pathType: ImplementationSpecific
service:
name: http
port:
number: 5280
- host: "example.com"
paths: ["/"]
pathType: ImplementationSpecific
service:
name: web2
port:
number: 8080
- host: "conference.example.com"
paths: ["/"]
pathType: ImplementationSpecific
service:
name: web2
port:
number: 8080
tls:
- hosts:
- "xmpp.example.com"
- "example.com"
- "conference.example.com"
secretName: prosody-tls
ingress_additional_host:
enabled: true
annotations:
cert-manager.io/cluster-issuer: lets-encrypt
kubernetes.io/tls-acme: "true"
kubernetes.io/ingress.class: "public"
nginx.ingress.kubernetes.io/auth-type: basic
nginx.ingress.kubernetes.io/auth-secret: prosody-basic-auth
nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
nginx.ingress.kubernetes.io/upstream-vhost: "example.com"
host: "xmpprest.example.com"
hosts:
- host: "xmpprest.example.com"
paths: ["/rest"]
pathType: ImplementationSpecific
service:
name: http
port:
number: 5280
tls:
- hosts:
- "xmpprest.example.com"
secretName: prosody-tls-rest
autoscaling:
minReplicas: 1
maxReplicas: 1
resources:
requests:
cpu: 500m
memory: 512Mi
env:
PROSODY_DEBUG: false
prosodyDBhost: 10.20.20.115
prosodyDBname: prosody
prosodyDBuser: prosody
prosodyDBpass: CHANGEME_DB_PASS
prosodyDBport: 5432
prosodyDomain: example.com
hybridaAuthUrl: "http://api.hybridauth.svc.cluster.local:80/"
fcmApiKey: "CHANGEME_FCM_API_KEY"
fcm_api_url: "http://vnctalk-notificationproxy.vnctalk.svc.cluster.local:3898/notify"
del_api_url: "http://vnctalk-notificationproxy.vnctalk.svc.cluster.local:3898/delete"
fileShareBaseUrl: "https://vnc-fileshare.example.com/share.php/"
fileShareSecret: "CHANGEME_FILESHARE_SECRET"
avatarUploadUrl: "https://avatar.vnc.biz/avatarupload/"
avatarUploadUser: avatar
avatarUploadPass: CHANGEME_AVATAR_UPLOAD_PASS
log_slow_events_threshold: 2.0
secretTestName: prosody-tls
syncPolicy:
automated:
prune: true
selfHeal: true