Update dashboard VolSync Dashboard ( 1 → 3 )

kubernetes/apps/database/influxdb/app/helmrelease.yaml

@@ -1,19 +1,18 @@
 ---
-# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
+# yaml-language-server: $schema=https://ks.hsn.dev/helm.toolkit.fluxcd.io/helmrelease_v2.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: &app influxdb
-  namespace: monitoring
 spec:
   interval: 30m
   chart:
     spec:
-      chart: app-template
-      version: 3.5.1
+      chart: influxdb2
+      version: 2.1.2
       sourceRef:
         kind: HelmRepository
-        name: bjw-s
+        name: influxdata
         namespace: flux-system
   install:
     remediation:
@@ -21,67 +20,35 @@ spec:
   upgrade:
     cleanupOnFail: true
     remediation:
-      retries: 3
       strategy: rollback
+      retries: 3
   values:
-    controllers:
-      influxdb:
-        annotations:
-          reloader.stakater.com/auto: "true"
-        containers:
-          app:
-            image:
-              repository: docker.io/influxdb
-              tag: 2.7.10-alpine
-              pullPolicy: IfNotPresent
-            env:
-              INFLUXDB_ADMIN_USER_PASSWORD: "admin"
-              INFLUXDB_ADMIN_USER_TOKEN: ""
-              INFLUXD_REPORTING_DISABLED: true
-            probes:
-              liveness: &probe
-                type: "HTTP"
-                path: "/health"
-                port: &port 8086
-                spec:
-                  initialDelaySeconds: 0
-                  periodSeconds: 10
-                  timeoutSeconds: 1
-                  failureThreshold: 3
-
-              readiness: *probe
-
-              startup:
-                enabled: false
-            resources:
-              limits:
-                cpu: 10m
-                memory: 50Mi
-
-    service:
-      app:
-        controller: influxdb
-        ports:
-          http:
-            port: *port
-
-    ingress:
-      main:
-        className: internal-nginx
-        hosts:
-          - host: &host "{{ Release.Name }}.jahanson.tech"
-            paths:
-              - path: /
-                service:
-                  identifier: app
-                  port: http
-        tls:
-          - hosts:
-              - *host
-
+    fullnameOverride: *app
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities: { drop: ["ALL"] }
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      readOnlyRootFilesystem: true
+      runAsNonRoot: true
+      runAsUser: 568
+      runAsGroup: 568
+      seccompProfile: { type: RuntimeDefault }
+    env:
+      - name: INFLUXD_REPORTING_DISABLED
+        value: "true"
     persistence:
-      config:
-        enabled: true
-        existingClaim: *app
-        globalMounts:
-          - path: /var/lib/influxdb2
+      storageClass: ceph-block
+      size: 50Gi
+    volumes:
+      - name: tmp
+        emptyDir: {}
+    mountPoints:
+      - name: tmp
+        mountPath: /tmp
+    service:
+      port: 8086
+    ingress:
+      enabled: true
+      className: internal-nginx
+      hostname: "{{ Release.Name }}.jahanson.tech"