Add OneLab Helm chart, Argo CD Application, and GitOps values for k3s

Made-with: Cursor

gitops/charts/onelab/values.yaml

@@ -0,0 +1,187 @@
+# Default values for onelab — override per environment (see gitops/values/).
+
+nameOverride: ""
+fullnameOverride: ""
+
+images:
+  registry: hub.andrewalliance.com/releases
+  tag: "1.27.0"
+  nginx: nginx
+  nginxTag: "1.29.5-alpine"
+  postgres: postgres
+  postgresTag: "17.8"
+  redis: redis
+  redisTag: "7.4.7-alpine"
+  rabbitmq: rabbitmq
+  rabbitmqTag: "3.13.7"
+
+imagePullSecrets: []
+# - name: hub-andrewalliance
+
+# hostPath: matches typical single-node Swarm-style install (shared /data and /logs).
+# Use persistence.mode: pvc + a ReadWriteMany class for multi-node shared storage.
+persistence:
+  mode: hostPath
+  storageClass: ""
+  hostPath:
+    data: /opt/onelab/data
+    logs: /opt/onelab/logs
+  postgres:
+    size: 20Gi
+  rabbitmq:
+    size: 5Gi
+
+postgresql:
+  auth:
+    password: "changeme-use-strong-password"
+  resources: {}
+
+redis:
+  resources: {}
+
+rabbitmq:
+  resources: {}
+  # TLS: create Secret `onelab-rabbit-tls` in the release namespace (see README), or set embed: true.
+  tls:
+    secretName: onelab-rabbit-tls
+    embed: false
+    crt: ""
+    key: ""
+    fullchain: ""
+
+syncWaves:
+  postgres: "-3"
+  statefulDeps: "-2"
+  apps: "0"
+
+onelab:
+  domain: "https://localhost"
+  mailer:
+    noreply: "no-reply@andrewalliance.com"
+  secrets:
+    authTokenKey: "replace-auth-token-key"
+    monitoringToken: "replace-monitoring-token"
+    rabbitToken: "replace-rabbit-token"
+  intercom:
+    appid: ""
+    secret: "replace-intercom-secret"
+
+features:
+  ldapWorker: false
+  mailerWorker: false
+
+website:
+  ssr: true
+
+revproxy:
+  serviceType: NodePort
+  nodePort: 30080
+  ipv6Listen: true
+
+# Replica counts (api.apidevice etc. override defaults in templates/workloads.yaml via this map)
+replicas:
+  api: 2
+  apidevice: 1
+  apirabbit: 1
+  devices: 1
+  experiments: 1
+  images: 1
+  manual: 1
+  ws: 1
+  ldap: 1
+  mailer: 1
+
+resources: {}
+
+workloads:
+  - name: supervisor
+    image: onelab-supervisor-worker
+    replicas: 1
+    port: 0
+    config: true
+    mounts: [logs, data]
+  - name: file-worker
+    image: onelab-file-worker
+    replicas: 1
+    port: 0
+    config: true
+    mounts: [logs, data, shared]
+  - name: api
+    image: onelab-api
+    replicaKey: api
+    port: 3000
+    config: true
+    mounts: [logs, data]
+  - name: api-device
+    image: onelab-api-device
+    replicaKey: apidevice
+    port: 3000
+    config: true
+    mounts: [logs, data]
+  - name: api-rabbit
+    image: onelab-api-rabbit
+    replicaKey: apirabbit
+    port: 3000
+    config: true
+    mounts: [logs, data]
+  - name: devices-worker
+    image: onelab-devices-worker
+    replicaKey: devices
+    port: 0
+    config: true
+    mounts: [logs, data]
+  - name: experiments-worker
+    image: onelab-experiments-worker
+    replicaKey: experiments
+    port: 0
+    config: true
+    mounts: [logs]
+  - name: images-worker
+    image: onelab-images-worker
+    replicaKey: images
+    port: 0
+    config: true
+    mounts: [logs, data]
+  - name: manual-worker
+    image: onelab-manual-worker
+    replicaKey: manual
+    port: 0
+    config: true
+    mounts: [logs]
+  - name: websocket-worker
+    image: onelab-websocket-worker
+    replicaKey: ws
+    port: 3030
+    config: true
+    mounts: [logs]
+  - name: static
+    image: onelab-static
+    replicas: 1
+    port: 80
+    config: false
+    mounts: []
+  - name: main
+    image: onelab-main
+    replicas: 1
+    port: 80
+    config: false
+    mounts: []
+  - name: designer
+    image: onelab-designer
+    replicas: 1
+    port: 80
+    config: false
+    mounts: []
+  - name: runner
+    image: onelab-runner
+    replicas: 1
+    port: 80
+    config: false
+    mounts: []
+  - name: website
+    image: onelab-website
+    replicas: 1
+    port: 4000
+    config: false
+    mounts: []
+    website: true