update

infra/portainer/Chart.yaml

@@ -0,0 +1,12 @@
+apiVersion: v2
+name: portainer
+description: A Helm chart for Kubernetes
+type: application
+
+version: 0.1.0
+appVersion: "1.16.0"
+
+dependencies:
+  - name: portainer
+    repository: https://portainer.github.io/k8s/
+    version: 2.33.5

infra/portainer/values.yaml

@@ -0,0 +1,78 @@
+portainer:
+  replicaCount: 1
+  image:
+    repository: registry.durp.info/portainer/portainer-ce
+    tag: 2.33.5
+    pullPolicy: Always
+
+  imagePullSecrets: []
+
+  nodeSelector: {}
+  tolerations: []
+
+  serviceAccount:
+    annotations: {}
+    name: portainer-sa-clusteradmin
+
+  # This flag provides the ability to enable or disable RBAC-related resources during the deployment of the Portainer application
+  # If you are using Portainer to manage the K8s cluster it is deployed to, this flag must be set to true
+  localMgmt: true
+
+  service:
+    # Set the httpNodePort and edgeNodePort only if the type is NodePort
+    # For Ingress, set the type to be ClusterIP and set ingress.enabled to true
+    # For Cloud Providers, set the type to be LoadBalancer
+    type: NodePort
+    httpPort: 9000
+    httpsPort: 9443
+    httpNodePort: 30777
+    httpsNodePort: 30779
+    edgePort: 8000
+    edgeNodePort: 30776
+    annotations: {}
+
+  tls:
+    # If set, Portainer will be configured to use TLS only
+    force: false
+    # If set, will mount the existing secret into the pod
+    existingSecret: ""
+
+  trusted_origins:
+    # If set, Portainer will be configured to trust the domains specified in domains
+      enabled: false
+        # specify (in a comma-separated list) the domain(s) used to access Portainer when it is behind a reverse proxy
+          # example: portainer.mydomain.com,portainer.example.com
+      domains: ""
+
+  mtls:
+    # If set, Portainer will be configured to use mTLS only
+    enable: false
+    # If set, will mount the existing secret into the pod
+    existingSecret: ""
+
+  feature:
+    flags: []
+
+  ingress:
+    enabled: false
+    ingressClassName: ""
+    annotations: {}
+      # kubernetes.io/ingress.class: nginx
+      # Only use below if tls.force=true
+      # nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+    # Note: Hosts and paths are of type array
+    hosts:
+      - host:
+        paths: []
+        # - path: "/"
+    tls: []
+
+  resources: {}
+
+  persistence:
+    enabled: true
+    size: "10Gi"
+    annotations: {}
+    storageClass: longhorn
+    existingClaim:
+