A lowly tech priest's attempt to please Mars
chore: remove old single pihole installation
-117
-117
kubernetes/apps/network/pihole/helmrelease.yaml
-117
kubernetes/apps/network/pihole/helmrelease.yaml
···
20
20
21
21
values:
22
22
controllers:
23
-
pihole:
24
-
annotations:
25
-
reloader.stakater.com/auto: "true"
26
-
containers:
27
-
app:
28
-
image:
29
-
pullPolicy: IfNotPresent
30
-
repository: codeberg.org/bgotink/pihole
31
-
tag: 6.2.3@sha256:06c2447be76cdf3cb56f6a28dc70ab86a29661b2c547a308f4271f738c683445
32
-
env:
33
-
TZ: ${TIMEZONE}
34
-
FTLCONF_dns_domainNeeded: "true"
35
-
FTLCONF_dns_listeningMode: ALL
36
-
FTLCONF_webserver_domain: dns.${SECRET_HOST}
37
-
FTLCONF_dns_upstreams: 1.1.1.1;8.8.4.4
38
-
probes:
39
-
liveness: &probe
40
-
enabled: true
41
-
custom: true
42
-
spec:
43
-
exec: &probeExec
44
-
command:
45
-
- dig
46
-
- +short
47
-
- +norecurse
48
-
- +retry=0
49
-
- "@127.0.0.1"
50
-
- pi.hole
51
-
failureThreshold: 1
52
-
periodSeconds: 10
53
-
readiness: *probe
54
-
startup:
55
-
enabled: true
56
-
custom: true
57
-
spec:
58
-
exec: *probeExec
59
-
failureThreshold: 30
60
-
periodSeconds: 10
61
-
securityContext:
62
-
allowPrivilegeEscalation: false
63
-
capabilities:
64
-
drop: [ ALL ]
65
-
add: [ NET_BIND_SERVICE ]
66
-
resources:
67
-
requests:
68
-
cpu: 250m
69
-
memory: 128Mi
70
-
limits:
71
-
cpu: 500m
72
-
memory: 128Mi
73
-
74
23
dns:
75
24
type: statefulset
76
25
replicas: 2
···
165
114
seccompProfile: { type: RuntimeDefault }
166
115
167
116
service:
168
-
http:
169
-
controller: pihole
170
-
ports:
171
-
http:
172
-
port: 80
173
-
protocol: HTTP
174
-
tcp:
175
-
type: LoadBalancer
176
-
annotations:
177
-
metallb.io/address-pool: manual-pool
178
-
metallb.io/loadBalancerIPs: ${IP_ADDR_INGRESS}
179
-
metallb.io/allow-shared-ip: share-${IP_ADDR_INGRESS}
180
-
controller: pihole
181
-
ports:
182
-
devicecom:
183
-
port: 53
184
-
protocol: TCP
185
-
udp:
186
-
type: LoadBalancer
187
-
annotations:
188
-
metallb.io/address-pool: manual-pool
189
-
metallb.io/loadBalancerIPs: ${IP_ADDR_INGRESS}
190
-
metallb.io/allow-shared-ip: share-${IP_ADDR_INGRESS}
191
-
controller: pihole
192
-
ports:
193
-
apdiscovery:
194
-
port: 53
195
-
protocol: UDP
196
-
197
117
dns0-http:
198
118
controller: dns
199
119
extraSelectorLabels:
···
246
166
protocol: UDP
247
167
248
168
route:
249
-
pihole:
250
-
annotations:
251
-
route.proteus/redirect-http: 'true'
252
-
parentRefs:
253
-
- name: ingress-gateway
254
-
namespace: ingress
255
-
sectionName: https
256
-
hostnames:
257
-
- "dns.${SECRET_HOST}"
258
-
rules:
259
-
- backendRefs:
260
-
- identifier: http
261
-
port: 80
262
169
dns0:
263
170
annotations:
264
171
route.proteus/redirect-http: 'true'
···
287
194
port: 80
288
195
289
196
persistence:
290
-
etc:
291
-
type: persistentVolumeClaim
292
-
accessMode: ReadWriteOnce
293
-
size: 512Mi
294
-
advancedMounts:
295
-
pihole:
296
-
app:
297
-
- path: /etc/pihole
298
-
state:
299
-
type: persistentVolumeClaim
300
-
accessMode: ReadWriteOnce
301
-
size: 1Gi
302
-
advancedMounts:
303
-
pihole:
304
-
app:
305
-
- path: /var/lib/pihole
306
-
logs:
307
-
type: persistentVolumeClaim
308
-
accessMode: ReadWriteOnce
309
-
size: 1Gi
310
-
advancedMounts:
311
-
pihole:
312
-
app:
313
-
- path: /var/log/pihole
314
197
dnsmasq:
315
198
type: custom
316
199
volumeSpec: