helmrelease.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: longhorn
  namespace: longhorn-system
spec:
  interval: 1h
  driftDetection:
    mode: enabled
  chart:
    spec:
      chart: longhorn
      version: 1.7.2
      sourceRef:
        kind: HelmRepository
        namespace: longhorn-system
        name: longhorn
      interval: 1h
  install:
    crds: Create
  upgrade:
    crds: CreateReplace
  values:
    persistence:
      defaultClassReplicaCount: 2
    defaultSettings:
      priorityClass: system-cluster-critical
      logLevel: Warn
    longhornManager:
      priorityClass: system-cluster-critical
    longhornDriver:
      priorityClass: system-cluster-critical
    ingress:
      enabled: true
      ingressClassName: nginx
      host: ${app_url}
      tls: true
      tlsSecret: ${certificate_name}
      annotations:
        nginx.ingress.kubernetes.io/auth-url: |-
          http://ak-outpost-gabernetes.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
        nginx.ingress.kubernetes.io/auth-signin: |-
          https://$host/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
        nginx.ingress.kubernetes.io/auth-response-headers: |-
          Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
        nginx.ingress.kubernetes.io/auth-snippet: |
          proxy_set_header X-Forwarded-Host $http_host;