ingress dump

apps/children/kustomization.yaml

@@ -10,6 +10,8 @@ resources:
     - postgresql.yaml
     - searxng.yaml
     - browser.yaml
+    - policy.yaml
+    - policy-argo.yaml
 
 generatorOptions:
     disableNameSuffixHash: true

apps/children/openwebui.yaml

@@ -15,41 +15,8 @@ spec:
         chart: open-webui
         targetRevision: "*"
         helm:
-            values: |
+            valueFiles:
-                image:
+                - apps/values/openwebui.yaml
-                    repository: ghcr.io/open-webui/open-webui
-                    tag: "main"
-                    pullPolicy: IfNotPresent
-
-                service:
-                    type: ClusterIP
-
-                persistence:
-                    enabled: true
-                    size: 5Gi
-
-                ingress:
-                    enabled: true
-                    className: nginx
-                    hosts:
-                        - host: openwebui.local
-                          paths:
-                              - path: /
-                                pathType: Prefix
-                    tls: []
-
-                # NO SECRETS!!!
-                extraEnvVars:
-                    - name: OLLAMA_BASE_URL
-                      value: "https://mlep.ion606.com"
-                    - name: DATABASE_URL
-                      value: "postgresql://postgres:mypassword@postgresql-primary.ai.svc.cluster.local:5432/openwebui"
-                    - name: VECTOR_DB
-                      value: "pgvector"
-                    - name: PGVECTOR_DB_URL
-                      value: "postgresql://postgres:mypassword@postgresql-primary.ai.svc.cluster.local:5432/openwebui"
-                    - name: PGVECTOR_CREATE_EXTENSION
-                      value: "true"
     syncPolicy:
         automated:
             prune: true

apps/children/policy-argo.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+    name: policy-argo
+    namespace: ai
+    labels:
+        repo.ion606.com/ollama-plus: "true"
+spec:
+    project: ai-stack
+    destination:
+        server: https://kubernetes.default.svc
+        namespace: argo
+    source:
+        repoURL: https://git.ion606.com/ion606/ollama-plus
+        targetRevision: main
+        path: manifests/policy-argo
+    syncPolicy:
+        automated:
+            prune: true
+            selfHeal: true
+

apps/children/policy.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+    name: policy
+    namespace: ai
+    labels:
+        repo.ion606.com/ollama-plus: "true"
+spec:
+    project: ai-stack
+    destination:
+        server: https://kubernetes.default.svc
+        namespace: ai
+    source:
+        repoURL: https://git.ion606.com/ion606/ollama-plus
+        targetRevision: main
+        path: manifests/policy
+    syncPolicy:
+        automated:
+            prune: true
+            selfHeal: true
+

manifests/policy-argo/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+    - ../policy/allow-ollama-scheduler-ingress.yaml
+

manifests/policy/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+    - default-deny.yaml
+    - allow-openwebui-ingress.yaml
+    - allow-browser-ingress.yaml
+