58 lines
2.2 KiB
YAML
58 lines
2.2 KiB
YAML
contour:
|
|
# This is your live `helm get values contour -n projectcontour` output,
|
|
# verbatim. This is the ingress for everything else in this repo
|
|
# (Gitea, ArgoCD, Vault all route through it) — don't tune this without
|
|
# re-checking those still resolve afterward.
|
|
#
|
|
# hostPorts, not a Service type=LoadBalancer: claude.md issue #6 — MetalLB
|
|
# got a floating IP fine, but this VM's host (VMware Workstation, Bridged
|
|
# networking, over Wi-Fi) doesn't do true MAC-level bridging, so the IP
|
|
# was never reachable from outside the VM. hostPort on Envoy binds
|
|
# directly to the node's real NIC instead.
|
|
#
|
|
# Correction from an earlier version of this file: the keys below are
|
|
# NOT what `helm get values` showed as "user-supplied" on the live
|
|
# release (envoy.hostNetworking / envoy.hostPorts.enabled). Checked
|
|
# directly against this chart's own values.yaml — this version reads
|
|
# envoy.hostNetwork (singular) and envoy.useHostPort.http/https instead.
|
|
# Helm doesn't validate unknown keys, so the old ones were silent no-ops.
|
|
# hostPort on the live pods is actually coming from the raw `kubectl
|
|
# patch` in claude.md issue #7 ("the actual working solution" — that
|
|
# title is the tell), applied completely outside Helm. Getting the real
|
|
# keys into this file is what finally makes hostPort GitOps-managed
|
|
# instead of an unmanaged patch any future plain `helm upgrade` could
|
|
# silently wipe.
|
|
#
|
|
# This is also why ArgoCD's default Ingress health check needed
|
|
# overriding (see argocd-admin-prd/custom-values.yaml) — there's no
|
|
# Service type=LoadBalancer here to ever populate
|
|
# status.loadBalancer.ingress.
|
|
|
|
contour:
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
|
|
envoy:
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
hostNetwork: true
|
|
useHostPort:
|
|
http: true
|
|
https: true
|
|
# Already the chart default (80/443) — pinned explicitly anyway so a
|
|
# future chart bump changing its defaults can't silently change this.
|
|
hostPorts:
|
|
http: 80
|
|
https: 443
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
service:
|
|
type: ClusterIP
|