[PR #2049] Reorg kustomize resources to be used as a remote resource #1959

New issue

Open

opened 2026-03-02 11:59:56 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 11:59:56 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/karakeep-app/karakeep/pull/2049
Author: @SnoFox
Created: 10/16/2025
Status: 🔄 Open

Base: main ← Head: main

📝 Commits (2)

d8fd17b fix(kustomize): Move .env_sample to .env; add docs
0bd8807 docfix: name of secrets file for Kustomize setup

📊 Changes

4 files changed (+34 additions, -8 deletions)

View changed files

📝 kubernetes/.env (+2 -1)
➕ kubernetes/.secrets (+5 -0)
➖ kubernetes/.secrets_sample (+0 -4)
📝 kubernetes/README.md (+27 -3)

📄 Description

This allows users to track Karakeep as a remote resource based on git tags. This also enables use of tools like Renovate to (semi-)automatically do security patches with one extra config to match the env file in a users setup.

This change does not remove or change existing uses of the repo - the previous method of cloning the repo and using the Makefile still works, and documentation amended to account for both options.

Maintenance of this shouldn't be high - the resource will be versioned by the same git tag used today to release Karakeep.

Here's an example of how I'm using it in my fork:

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: karakeep

configMapGenerator:
  - envs:
    - env
    name: karakeep-configuration
    behavior: replace

generatorOptions:
  disableNameSuffixHash: true

resources:
  - https://github.com/SnoFox/karakeep//kubernetes?ref=v0.27.2
  - ingress.yaml
  - secrets.yaml

patches:
  - patch: |-
      - op: replace
        path: /spec/storageClassName
        value: freenas-iscsi-csi
    target:
      kind: PersistentVolumeClaim
  - patch: |-
      - op: replace
        path: /spec/type
        value: ClusterIP
    target:
      kind: Service
      name: web
  - patch: |-
      $patch: delete
      apiVersion: v1
      kind: Secret
      metadata:
        name: karakeep-secrets
        namespace: karakeep

Full application definition is available here: https://gitlab.com/SnoFox/kubernetes/-/tree/master/apps/karakeep

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/karakeep-app/karakeep/pull/2049 **Author:** [@SnoFox](https://github.com/SnoFox) **Created:** 10/16/2025 **Status:** 🔄 Open **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (2) - [`d8fd17b`](https://github.com/karakeep-app/karakeep/commit/d8fd17b48412b03d774fb70640e1710dd7615c17) fix(kustomize): Move .env_sample to .env; add docs - [`0bd8807`](https://github.com/karakeep-app/karakeep/commit/0bd8807c5fffd7f8f324d5e129911b3b73b82846) docfix: name of secrets file for Kustomize setup ### 📊 Changes **4 files changed** (+34 additions, -8 deletions) <details> <summary>View changed files</summary> 📝 `kubernetes/.env` (+2 -1) ➕ `kubernetes/.secrets` (+5 -0) ➖ `kubernetes/.secrets_sample` (+0 -4) 📝 `kubernetes/README.md` (+27 -3) </details> ### 📄 Description This allows users to track Karakeep as a remote resource based on git tags. This also enables use of tools like Renovate to (semi-)automatically do security patches with one extra config to match the `env` file in a users setup. This change does not remove or change existing uses of the repo - the previous method of cloning the repo and using the Makefile still works, and documentation amended to account for both options. Maintenance of this shouldn't be high - the resource will be versioned by the same git tag used today to release Karakeep. Here's an example of how I'm using it in my fork: ``` apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: karakeep configMapGenerator: - envs: - env name: karakeep-configuration behavior: replace generatorOptions: disableNameSuffixHash: true resources: - https://github.com/SnoFox/karakeep//kubernetes?ref=v0.27.2 - ingress.yaml - secrets.yaml patches: - patch: |- - op: replace path: /spec/storageClassName value: freenas-iscsi-csi target: kind: PersistentVolumeClaim - patch: |- - op: replace path: /spec/type value: ClusterIP target: kind: Service name: web - patch: |- $patch: delete apiVersion: v1 kind: Secret metadata: name: karakeep-secrets namespace: karakeep ``` Full application definition is available here: https://gitlab.com/SnoFox/kubernetes/-/tree/master/apps/karakeep --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

kerem added the

pull-request

label

2026-03-02 11:59:56 +03:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/karakeep#1959

No description provided.

Rows
Columns