ffa171bfb0
Removes the full Nextcloud stack (PostgreSQL/CNPG, Valkey, Caddy sidecar) and replaces it with oCIS at drive.tr1ceracop.de. oCIS is self-contained (no external DB/cache needed) with S3ng storage backend on Hetzner Object Storage (bucket: ocis-tr1ceracop). Chart sourced from git via vendir since it is not published to a Helm repo. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
41 lines
1.3 KiB
YAML
41 lines
1.3 KiB
YAML
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
annotations:
|
|
a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
|
|
argocd.argoproj.io/sync-options: Replace=true
|
|
name: ocis-secret-init
|
|
namespace: ocis
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
set -e
|
|
|
|
SECRET_NAME="ocis-s3-credentials"
|
|
|
|
if ! kubectl get secret "${SECRET_NAME}" -n ${NAMESPACE} >/dev/null 2>&1; then
|
|
echo "ERROR: Secret ${SECRET_NAME} does not exist in namespace ${NAMESPACE}."
|
|
echo "Please create it manually with keys 'accessKey' and 'secretKey':"
|
|
echo " kubectl create secret generic ${SECRET_NAME} -n ${NAMESPACE} \\"
|
|
echo " --from-literal=accessKey=<your-access-key> \\"
|
|
echo " --from-literal=secretKey=<your-secret-key>"
|
|
exit 1
|
|
else
|
|
echo "Secret ${SECRET_NAME} exists, OK"
|
|
fi
|
|
env:
|
|
- name: NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
image: alpine/k8s:1.32.3
|
|
name: init
|
|
restartPolicy: OnFailure
|
|
serviceAccountName: ocis-secret-init
|
|
ttlSecondsAfterFinished: 300
|