apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: rancher
  namespace: flux-system
spec:
  interval: 10m
  targetNamespace: cattle-system
  chart:
    spec:
      chart: rancher
      version: "2.13.3"
      sourceRef:
        kind: HelmRepository
        name: rancher-stable
        namespace: flux-system
  install:
    createNamespace: true
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    hostname: k8s-cluster-cp-1-1.silverside-gopher.ts.net
    tls: external
    replicas: 1
    extraEnv:
      - name: CATTLE_DB_CATTLE_HOST
        value: cnpg-cluster-rw.cnpg-cluster.svc
      - name: CATTLE_DB_CATTLE_PORT
        value: "5432"
      - name: CATTLE_DB_CATTLE_DATABASE
        value: postgres
      - name: CATTLE_DB_CATTLE_USERNAME
        value: postgres
      - name: CATTLE_DB_CATTLE_PASSWORD
        valueFrom:
          secretKeyRef:
            name: rancher-db-password
            key: password
      - name: CATTLE_PROMETHEUS_METRICS
        value: "true"
    resources:
      requests:
        cpu: 500m
        memory: 512Mi
      limits:
        cpu: 1000m
        memory: 1Gi
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
            - matchExpressions:
                - key: node-role.kubernetes.io/control-plane
                  operator: DoesNotExist