nilsandClaude Opus 5.5
59ee2cae3b
- kustomization pins mg4-server 2.1.0 by digest; server.yaml sets PUBLIC_URL for the pairing QR code; the secrets template gains APPROVAL_PASSWORD. - Filled-in Secrets now go into k8s/secrets.yaml, which is gitignored; the template stays on placeholders. This follows a leak where real values typed into the template were committed and pushed (amended and force-pushed since; both values regenerated). - SPECS.md records pairing and the incident. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
33 lines
1015 B
YAML
33 lines
1015 B
YAML
# Render with `kustomize build k8s/` (or `kubectl kustomize k8s/`) and apply it yourself.
|
|
# The Secrets are not included: create them from secrets.example.yaml first.
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- namespace.yaml
|
|
- influxdb.yaml
|
|
- server.yaml
|
|
- grafana.yaml
|
|
- ingress.yaml
|
|
images:
|
|
- name: git.stinnesbeck.com/nils/mg4-server
|
|
# 2.1.0, pinned by digest so a re-pushed tag cannot change what runs.
|
|
digest: sha256:e5f6e2d2ef9dc2650055a0823a3f86d8903e46918a76e990540482edf819766d
|
|
generatorOptions:
|
|
labels:
|
|
app.kubernetes.io/part-of: mg4
|
|
configMapGenerator:
|
|
- name: grafana-datasources
|
|
namespace: mg4
|
|
files:
|
|
- mg4.yaml=grafana/datasources.yaml
|
|
- name: grafana-dashboard-provider
|
|
namespace: mg4
|
|
files:
|
|
- mg4.yaml=grafana/dashboards.yaml
|
|
- name: grafana-dashboards
|
|
namespace: mg4
|
|
files:
|
|
- grafana/dashboards/live.json
|
|
- grafana/dashboards/consumption.json
|
|
- grafana/dashboards/charging.json
|