k8s-and-chill/rendered/envs/production/ocis/serviceaccount-ocis-secret-init.yaml at 88fa8c4df38a8ae5a87d8d597ecce70b648c6b79 - gitea_admin/k8s-and-chill - Forgejo: Beyond coding. We forge.

gitea_admin/k8s-and-chill

Felix Wolf 4e48df73d3 feat(ocis): Transition to oCIS and enhance deployment

Removes the full Nextcloud stack (PostgreSQL/CNPG, Valkey, Caddy) and
  deploys oCIS at drive.tr1ceracop.de. oCIS is self-contained — no
  external database or cache needed.

  Key design decisions:
  - S3ng storage backend on Hetzner Object Storage (ocis-tr1ceracop)
  - Chart fetched via vendir git source (not published to a Helm repo)
  - All secrets generated in-cluster via PreSync init Job (never in git)
  - Memory requests on all pods to prevent node overcommit
  - Persistence on local-path for metadata (idm, nats, search, storage)

  Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 14:01:55 +02:00

10 lines

265 B

YAML

Raw Blame History

 apiVersion: v1
 kind: ServiceAccount
 metadata:
   annotations:
     a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
     argocd.argoproj.io/hook: PreSync
     argocd.argoproj.io/sync-wave: "-2"
   name: ocis-secret-init
   namespace: ocis