Despliegue imágenes inicial

bookstack/bookstack/Chart.yaml

@@ -0,0 +1,12 @@
+apiVersion: v2
+appVersion: '25.7'
+description: A free and open-source, web-based platform designed for documenting information.
+name: bookstacktfm
+version: 2025.9.24
+sources:
+  - https://www.bookstackapp.com/
+  - https://hub.docker.com/r/linuxserver/bookstack
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

bookstack/bookstack/fleet.yaml

@@ -0,0 +1,9 @@
+namespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.5.22
+  releaseName: bookstacktfm
+  valuesFiles:
+    - values.yaml

bookstack/bookstack/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

bookstack/bookstack/values.yaml

@@ -0,0 +1,108 @@
+global:
+  fullnameOverride: bookstacktfm
+defaultPodOptions:
+  annotations:
+    diun.enable: 'true'
+    diun.watch_repo: 'true'
+    diun.max_tags: '10'
+    diun.sort_tags: semver
+    diun.exclude_tags: ''
+    diun.include_tags: '^\d+\.\d+\.\d+$' #Revisado
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: index.docker.io/solidnerd/bookstack # {"$imagescan": "bookstack-scan:name"}
+          tag: 25.7.2 # {"$imagescan": "bookstack-scan:tag"}
+          pullPolicy: IfNotPresent
+        envFrom:
+          - configMapRef:
+              identifier: config
+          - secretRef:
+              identifier: secret
+        resources:
+          limits:
+            memory: 512Mi
+          requests:
+            cpu: 100m
+            memory: 128Mi
+secrets:
+  secret:
+    enabled: true
+    stringData:
+      DB_PASSWORD: iXsL8pJq
+      APP_KEY: base64:ie0Ttwx54vW7s2FZ59OLp5rPLeDd+5W4xqmM1bvIMaE=
+configMaps:
+  config:
+    enabled: true
+    data:
+      TZ: Europe/Madrid
+      APP_ENV: local
+      APP_URL: https://bookstack.tfmuocdfcarvajal.duckdns.org/
+      DB_HOST: bookstacktfmbbdd-bbdd
+      DB_DATABASE: tfmuocdfcarvajal
+      DB_USERNAME: tfmuocdfcarvajalUser
+      MAIL_FROM: postmaster@bookstack.tfmuocdfcarvajal.duckdns.org
+      MAIL_HOST: SMTP
+      MAIL_PORT: "25"
+service:
+  web:
+    enabled: true
+    nameOverride: web
+    controller: main
+    primary: false
+    type: ClusterIP
+    ports:
+      web:
+        enabled: true
+        primary: true
+        port: 80
+        protocol: HTTP
+        targetPort: 8080
+ingress:
+  main:
+    enabled: true
+    nameOverride: web
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    labels:
+      use-http01-prod: "true"
+    hosts:
+      - host: bookstack.tfmuocdfcarvajal.duckdns.org
+        paths:
+          - path: /
+            pathType: Prefix
+            service:
+              name: bookstacktfm
+              identifier: bookstacktfm
+              port: 80
+    tls:
+      - hosts:
+          - bookstack.tfmuocdfcarvajal.duckdns.org
+        secretName: bookstacktfm-certificado-duckdns
+persistence:
+  store:
+    enabled: true
+    type: persistentVolumeClaim
+    name: store
+    accessMode: ReadWriteOnce
+    size: 1Gi
+    retain: yes
+    globalMounts:
+      - path: /var/www/bookstack/storage/uploads
+        readOnly: false
+  uploads:
+    enabled: true
+    type: persistentVolumeClaim
+    name: uploads
+    accessMode: ReadWriteOnce
+    size: 1Gi
+    retain: yes
+    globalMounts:
+      - path: /var/www/bookstack/public/uploads
+        readOnly: false

bookstack/bookstackbbdd/Chart.yaml

@@ -0,0 +1,12 @@
+apiVersion: v2
+appVersion: "11.8"
+description: A free and open-source relational database management system, designed as a fork of MySQL
+name: bookstacktfmbbdd
+version: 2025.9.24
+sources:
+  - https://mariadb.org/
+  - https://hub.docker.com/_/mariadb
+dependencies:
+  - name: common
+    version: 3.7.3
+    repository: https://bjw-s-labs.github.io/helm-charts/

bookstack/bookstackbbdd/fleet.yaml

@@ -0,0 +1,9 @@
+namespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.9.24
+  releaseName: bookstacktfmbbdd
+  valuesFiles:
+    - values.yaml

bookstack/bookstackbbdd/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

bookstack/bookstackbbdd/values.yaml

@@ -0,0 +1,72 @@
+---
+global:
+  fullnameOverride: bookstacktfmbbdd
+defaultPodOptions:
+  annotations:
+    diun.enable: "false"
+    diun.include_tags: \d\d.\d(.\d)?-apache
+    diun.watch_repo: "true"
+
+controllers:
+   main:
+     enabled: true
+     type: deployment
+     replicas: 1
+     strategy: Recreate
+
+     containers:
+       main:
+         image:
+           repository: mariadb
+           tag: "11.8"
+           pullPolicy: IfNotPresent
+         envFrom:
+          - config: config
+          - secret: secret
+         resources:
+            limits:
+              memory: 512Mi
+            requests:
+              cpu: 100m
+              memory: 128Mi
+secrets:
+  secret:
+   enabled: true
+   stringData:
+    DB_DATABASE: tfmuocdfcarvajal
+    DB_USER: tfmuocdfcarvajalUser
+    DB_PASSWORD: iXsL8pJq
+    MYSQL_PASSWORD: iXsL8pJq
+    MYSQL_ROOT_PASSWORD: TFM12
+configMaps:
+  config:
+   enabled: true
+   data:
+    TZ: Europe/Madrid
+    MARIADB_AUTO_UPGRADE: "1"
+service:
+   bbdd:
+     enabled: true
+     nameOverride: bbdd
+     controller: main
+     primary: false
+     type: ClusterIP
+     ports:
+       bbdd:
+         enabled: true
+         primary: true
+         port: 3306
+         protocol: TCP
+         targetPort: 3306
+
+persistence:
+   data:
+     enabled: true
+     type: persistentVolumeClaim
+     name: data
+     accessMode: ReadWriteOnce
+     size: 1Gi
+     retain: yes
+     globalMounts:
+         - path: /var/lib/mysql
+           readOnly: false

geoserver/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+appVersion: "2.27.2"
+description: GeoServer.
+name: geoserver
+version: 2025.9.24
+sources:
+  - https://github.com/geoserver/docker
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

geoserver/fleet.yaml

@@ -0,0 +1,9 @@
+defaultNamespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.9.24
+  releaseName: geoserver
+  valuesFiles:
+    - values.yaml

geoserver/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

geoserver/values.yaml

@@ -0,0 +1,83 @@
+global:
+  fullnameOverride: geoserver
+defaultPodOptions:
+  annotations:
+    diun.enable: "false"
+    diun.include_tags: '^\d{1,2}\.\d{1,3}\.\d{1,3}$'
+    diun.watch_repo: "true"
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: docker.osgeo.org/geoserver
+          tag: 2.27.2
+          pullPolicy: IfNotPresent
+        env:
+          PROXY_BASE_URL: https://geoserver.tfmuocdfcarvajal.duckdns.org/
+          SKIP_DEMO_DATA: true
+          WEBAPP_CONTEXT: ""
+          EXTRA_JAVA_OPTS: -Xms256m -Xmx256m
+          GEOSERVER_ADMIN_USER: admin
+          GEOSERVER_ADMIN_PASSWORD: tfmuocdfcarvajal
+        probes:
+          liveness:
+            enabled: true
+          readiness:
+            enabled: true
+        resources:
+          limits:
+            memory: 512Mi
+          requests:
+            cpu: 100m
+            memory: 128Mi
+persistence:
+  data:
+    enabled: true
+    type: persistentVolumeClaim
+    name: data
+    accessMode: ReadWriteOnce
+    size: 10Gi
+    retain: yes
+    globalMounts:
+      - path: /opt/geoserver_data/
+        readOnly: false
+service:
+  main:
+    enabled: true
+    nameOverride: web
+    controller: main
+    primary: true
+    type: ClusterIP
+    ports:
+      web:
+        enabled: true
+        primary: true
+        port: 80
+        protocol: HTTP
+        targetPort: 8080
+ingress:
+  main:
+    enabled: true
+    nameOverride: web
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    labels:
+      use-http01-prod: "true"
+    hosts:
+      - host: geoserver.tfmuocdfcarvajal.duckdns.org
+        paths:
+          - path: /
+            pathType: Prefix
+            service:
+              name: geoserver
+              identifier: geoserver
+              port: 80
+    tls:
+      - hosts:
+          - geoserver.tfmuocdfcarvajal.duckdns.org
+        secretName: geoserver-certificado-duckdns

gitea/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+appVersion: AUTOBUMP
+description: Self-Hosted Git service.
+name: giteatfm
+version: 2025.9.24
+sources:
+  - https://github.com/go-gitea/gitea
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

gitea/fleet.yaml

@@ -0,0 +1,9 @@
+defaultNamespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.9.24
+  releaseName: giteatfm
+  valuesFiles:
+    - values.yaml

gitea/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

gitea/values.yaml

@@ -0,0 +1,91 @@
+global:
+  fullnameOverride: giteatfm
+defaultPodOptions:
+  annotations:
+    diun.enable: "false"
+    diun.include_tags: '^\d{1,2}\.\d{1,3}\.\d{1,3}$'
+    diun.watch_repo: "true"
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: index.docker.io/gitea/gitea # {"$imagescan": "gitea-scan:name"}
+          tag: 1.24.6 # {"$imagescan": "gitea-scan:tag"}
+          pullPolicy: IfNotPresent
+        env:
+          GITEA_CUSTOM: /data/gitea
+          ROOT_URL: https://gitea.tfmuocdfcarvajal.duckdns.org/
+          USER: git
+          USER_GID: "1000"
+          USER_UID: "1000"
+          RUN_MOD: prod
+          SSH_DOMAIN: https://gitea.tfmuocdfcarvajal.duckdns.org/
+        envFrom:
+          - secret: gitea-secret
+        probes:
+          liveness:
+            enabled: true
+          readiness:
+            enabled: true
+        resources:
+          limits:
+            memory: 256Mi
+          requests:
+            cpu: 100m
+            memory: 128Mi
+secrets:
+  gitea-secret:
+    enabled: true
+    stringData:
+      SECRET_KEY: 01ee62b84fc46dea5f1740dc00ea89c6b228f753c3ef1b12d73a3761201c978a98e63f6b932fc3e2834cbaf29ad504b5e7fb13005f04936844ee21c553399555
+persistence:
+  data:
+    enabled: true
+    type: persistentVolumeClaim
+    name: data
+    accessMode: ReadWriteOnce
+    size: 1Gi
+    retain: yes
+    globalMounts:
+      - path: /data
+        readOnly: false
+service:
+  main:
+    enabled: true
+    nameOverride: web
+    controller: main
+    primary: true
+    type: ClusterIP
+    ports:
+      web:
+        enabled: true
+        primary: true
+        port: 80
+        protocol: HTTP
+        targetPort: 3000
+ingress:
+  main:
+    enabled: true
+    nameOverride: web
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    labels:
+      use-http01-prod: "true"
+    hosts:
+      - host: gitea.tfmuocdfcarvajal.duckdns.org
+        paths:
+          - path: /
+            pathType: Prefix
+            service:
+              name: giteatfm
+              identifier: giteatfm
+              port: 80
+    tls:
+      - hosts:
+          - gitea.tfmuocdfcarvajal.duckdns.org
+        secretName: giteatfm-certificado-duckdns

mongodb/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+appVersion: '4.4'
+description: Mongodb Database.
+name: mongodb
+version: 2025.11.12
+sources:
+  - https://mongodb.com/
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

mongodb/fleet.yaml

@@ -0,0 +1,9 @@
+defaultNamespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.11.12
+  releaseName: mongodb
+  valuesFiles:
+    - values.yaml

mongodb/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

mongodb/values.yaml

@@ -0,0 +1,59 @@
+global:
+  fullnameOverride: mongodb
+defaultPodOptions:
+  annotations:
+    diun.enable: 'false'
+    diun.watch_repo: 'true'
+    diun.max_tags: '10'
+    diun.sort_tags: semver
+    diun.exclude_tags: ''
+    diun.include_tags: '^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$' #Revisado
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: mongo
+          tag: "4.4"
+          pullPolicy: Always
+        env:
+          MONGO_INITDB_ROOT_USERNAME: root
+          MONGO_INITDB_ROOT_PASSWORD: password
+        resources:
+          limits:
+            memory: 1024Mi
+          requests:
+            cpu: 100m
+            memory: 512Mi
+persistence:
+  data:
+    enabled: true
+    type: persistentVolumeClaim
+    name: data
+    accessMode: ReadWriteOnce
+    size: 5Gi
+    retain: yes
+    globalMounts:
+    - path: /data/db
+      readOnly: false
+service:
+  main:
+    enabled: true
+    nameOverride: bbdd
+    controller: main
+    primary: true
+    type: LoadBalancer
+    externalTrafficPolicy: Local
+    annotations:
+      metallb.universe.tf/loadBalancerIPs: 10.10.5.33
+    ports:
+      bbdd:
+        enabled: true
+        primary: true
+        port: 27017
+        protocol: TCP
+        targetPort: 27017

noderedlab/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+appVersion: '3.0.2'
+description: Nodered - Versión de Laboratorio.
+name: noderedlabtfm
+version: 2025.9.24
+sources:
+  - https://github.com/node-red/node-red
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

noderedlab/fleet.yaml

@@ -0,0 +1,9 @@
+defaultNamespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.9.24
+  releaseName: noderedlabtfm
+  valuesFiles:
+    - values.yaml

noderedlab/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

noderedlab/values.yaml

@@ -0,0 +1,93 @@
+global:
+  fullnameOverride: noderedlabtfm
+defaultPodOptions:
+  annotations:
+    diun.enable: 'true'
+    diun.watch_repo: 'true'
+    diun.max_tags: '10'
+    diun.sort_tags: semver
+    diun.exclude_tags: ''
+    diun.include_tags: '^\d+\.\d+\.\d+$' #Revisado
+  SecurityContext:
+    runAsUser: 1000
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: index.docker.io/nodered/node-red # {"$imagescan": "noderedlab-scan:name"}
+          tag: "4.1" # {"$imagescan": "noderedlab-scan:tag"}
+          pullPolicy: IfNotPresent
+        env:
+          TZ: "Europe/Madrid"
+          NODE_TLS_REJECT_UNAUTHORIZED: "0"
+        resources:
+          limits:
+            memory: 512Mi
+          requests:
+            cpu: 100m
+            memory: 128Mi
+persistence:
+  data:
+    enabled: true
+    type: persistentVolumeClaim
+    name: data
+    accessMode: ReadWriteOnce
+    size: 2Gi
+    retain: yes
+    globalMounts:
+      - path: /data
+        readOnly: false
+service:
+  web:
+    enabled: true
+    nameOverride: web
+    controller: main
+    primary: false
+    type: ClusterIP
+    ports:
+      web:
+        enabled: true
+        primary: true
+        port: 1880
+        protocol: HTTP
+ingress:
+  local:
+    enabled: true
+    annotations:
+      traefik.ingress.kubernetes.io/router.entrypoints: web
+    nameOverride: ingress-local
+    hosts:
+      - host: noderedlabtfm.k3
+        paths:
+          - path: /
+            pathType: Prefix
+            service:
+              name: noderedlabtfm
+              identifier: noderedlabtfm
+              port: 1880
+  main:
+    enabled: true
+    nameOverride: web
+    annotations:
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    labels:
+      use-http01-prod: "true"
+    hosts:
+      - host: noderedlab.tfmuocdfcarvajal.duckdns.org
+        paths:
+          - path: /
+            pathType: Prefix
+            service:
+              name: noderedlabtfm
+              identifier: noderedlabtfm
+              port: 1880
+    tls:
+      - hosts:
+          - noderedlab.tfmuocdfcarvajal.duckdns.org
+        secretName: noderedlabtfm-certificado-duckdns

postgis/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+appVersion: '17-3.5-alpine'
+description: PostGIS Database.
+name: postGIS
+version: 2025.9.25
+sources:
+  - https://postgis.net/
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

postgis/fleet.yaml

@@ -0,0 +1,9 @@
+defaultNamespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.9.25
+  releaseName: postgis
+  valuesFiles:
+    - values.yaml

postgis/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

postgis/values.yaml

@@ -0,0 +1,63 @@
+global:
+  fullnameOverride: postgis
+defaultPodOptions:
+  annotations:
+    diun.enable: 'false'
+    diun.watch_repo: 'true'
+    diun.max_tags: '10'
+    diun.sort_tags: semver
+    diun.exclude_tags: ''
+    diun.include_tags: '^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$' #Revisado
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: ivanlonel/postgis-with-extensions
+          tag: latest
+          pullPolicy: Always
+        env:
+          POSTGRES_DATABASE: postgisdb
+          POSTGRES_PASSWORD: tfmuocdfcarvajal
+          POSTGRES_USERNAME: postgis
+          POSTGRES_INITDB_ARGS: '--data-checksums'
+          DB_STORAGE_TYPE: 'HDD'
+        resources:
+          limits:
+            memory: 1024Mi
+          requests:
+            cpu: 100m
+            memory: 512Mi
+persistence:
+  data:
+    enabled: true
+    type: persistentVolumeClaim
+    name: data
+    accessMode: ReadWriteOnce
+    size: 5Gi
+    retain: yes
+    globalMounts:
+    - path: /var/lib/postgresql/data
+      subPath: postgres
+      readOnly: false
+service:
+  main:
+    enabled: true
+    nameOverride: bbdd
+    controller: main
+    primary: true
+    type: LoadBalancer
+    externalTrafficPolicy: Local
+    annotations:
+      metallb.universe.tf/loadBalancerIPs: 10.10.5.32
+    ports:
+      bbdd:
+        enabled: true
+        primary: true
+        port: 5432
+        protocol: TCP
+        targetPort: 5432

python/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+appVersion: 'slim'
+description: Python server.
+name: python
+version: 2025.11.13
+sources:
+  - https://es.python.org/
+dependencies:
+  - name: common
+    version: 4.1.2
+    repository: https://bjw-s-labs.github.io/helm-charts/

python/fleet.yaml

@@ -0,0 +1,9 @@
+defaultNamespace: tfm
+
+helm:
+  chart: .
+  repo: ""
+  version: 2025.11.12
+  releaseName: python
+  valuesFiles:
+    - values.yaml

python/templates/common.yaml

@@ -0,0 +1,5 @@
+---
+{{/* Render the templates */}}
+{{- include "bjw-s.common.loader.init" . }}
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

python/values.yaml

@@ -0,0 +1,28 @@
+global:
+  fullnameOverride: python
+defaultPodOptions:
+  annotations:
+    diun.enable: 'false'
+    diun.watch_repo: 'true'
+    diun.max_tags: '10'
+    diun.sort_tags: semver
+    diun.exclude_tags: ''
+    diun.include_tags: '^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$' #Revisado
+controllers:
+  main:
+    enabled: true
+    type: deployment
+    replicas: 1
+    strategy: Recreate
+    containers:
+      main:
+        image:
+          repository: python
+          tag: slim
+          pullPolicy: Always
+        resources:
+          limits:
+            memory: 1024Mi
+          requests:
+            cpu: 100m
+            memory: 512Mi