Skip to content

feat/define-app-opr-poc - #2

Open
mdinumonte wants to merge 3 commits into
mainfrom
proof-of-concept
Open

feat/define-app-opr-poc#2
mdinumonte wants to merge 3 commits into
mainfrom
proof-of-concept

Conversation

@mdinumonte

Copy link
Copy Markdown
Collaborator

This PR aims at initializing the argocd app responsible for deploying OpenProject in its own namespace.

Note: the default admin password only makes sense at first login and must be changed during this first login
Note2: the app is only accessible from our VPNs (Maia + wireguard) and from the IP@ which Christophe connect from.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request initializes an OpenProject POC deployment in the opr-poc namespace using Helmfile.

Changes:

  • Adds the OpenProject Helm release.
  • Configures POC ingress, storage, S3, scaling, monitoring, and resources.
  • Adds encrypted S3 credentials and SOPS recipient rules.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 5 comments.

File Summary and review findings
helmfile.yaml.gotmpl Defines the opr-poc release, but namespace creation is disabled without a Namespace manifest.
environments/poc/values.yaml Configures deployment settings; contains a plaintext admin password, an incorrect temporary storage class key, and incompatible RWO persistence with S3 and multiple replicas.
environments/poc/secrets.enc.yaml Stores encrypted S3 credentials.
.sops.yaml Defines encryption recipients, but omits a recipient already present in the encrypted POC file.
Suppressed comments (1)

environments/poc/values.yaml:90

  • The chart reads openproject.tmpVolumesStorage (plural), so tmpVolumeStorage is ignored and the ephemeral /tmp and /app/tmp claims use the chart default (5Gi) instead of the requested 10Gi. Please use the chart's key name.
  tmpVolumeStorage: "10Gi"

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .sops.yaml

- key_groups:
- age:
- age18hnsrz7twfcecjgzu97gs6pcs5xe3vg3swfwz827833yx2qs6stsjer0aq # Mickael
Comment on lines +93 to +94
persistence:
enabled: true

useTmpVolumes: true
tmpVolumeStorage: "10Gi"
tmpVolumeStorageClassName: "bsu-gp2"
hsts: true

admin_user:
password: "admin"
Comment thread helmfile.yaml.gotmpl
chart: openproject/openproject
version: 13.10.2
installed: true
createNamespace: false
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants