feat: add n8n Helm chart for Kubernetes on Raspberry Pi (ARM64)

- n8nio/n8n 2.19.2 (multi-arch, linux/arm64 ready) - Single-container deployment with persistent storage - SQLite default / PostgreSQL option - Basic auth, encryption key via Secret - Ingress, HPA, PDB, NetworkPolicy support - Gitea CI: weekly auto-update + release workflow Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-02 09:37:35 +09:00
parent 4490781aec
commit 0b6b542f77
15 changed files with 1006 additions and 0 deletions
@@ -0,0 +1,149 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "n8n.fullname" . }}
+  labels:
+    {{- include "n8n.labels" . | nindent 4 }}
+spec:
+  {{- if not .Values.autoscaling.enabled }}
+  replicas: {{ .Values.replicaCount }}
+  {{- end }}
+  selector:
+    matchLabels:
+      {{- include "n8n.selectorLabels" . | nindent 6 }}
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      annotations:
+        checksum/secret: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
+        {{- with .Values.podAnnotations }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
+      labels:
+        {{- include "n8n.selectorLabels" . | nindent 8 }}
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      serviceAccountName: {{ include "n8n.serviceAccountName" . }}
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      containers:
+      - name: n8n
+        securityContext:
+          {{- toYaml .Values.securityContext | nindent 10 }}
+        image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        ports:
+        - name: http
+          containerPort: 5678
+          protocol: TCP
+        env:
+        - name: N8N_PORT
+          value: "5678"
+        - name: N8N_PROTOCOL
+          value: {{ .Values.n8n.protocol | quote }}
+        - name: N8N_HOST
+          value: {{ .Values.n8n.host | quote }}
+        {{- if .Values.n8n.webhookUrl }}
+        - name: WEBHOOK_URL
+          value: {{ .Values.n8n.webhookUrl | quote }}
+        {{- end }}
+        - name: GENERIC_TIMEZONE
+          value: {{ .Values.n8n.timezone | quote }}
+        - name: N8N_LOG_LEVEL
+          value: {{ .Values.n8n.logLevel | quote }}
+        - name: N8N_USER_FOLDER
+          value: "/home/node/.n8n"
+        - name: N8N_ENCRYPTION_KEY
+          valueFrom:
+            secretKeyRef:
+              name: {{ include "n8n.secretName" . }}
+              key: encryption-key
+        {{- if .Values.n8n.basicAuth.enabled }}
+        - name: N8N_BASIC_AUTH_ACTIVE
+          value: "true"
+        - name: N8N_BASIC_AUTH_USER
+          value: {{ .Values.n8n.basicAuth.user | quote }}
+        - name: N8N_BASIC_AUTH_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.n8n.basicAuth.existingSecret | default (include "n8n.fullname" .) }}
+              key: {{ .Values.n8n.basicAuth.passwordKey }}
+        {{- end }}
+        - name: EXECUTIONS_DATA_PRUNE
+          value: {{ .Values.n8n.executions.pruneData | quote }}
+        - name: EXECUTIONS_DATA_MAX_AGE
+          value: {{ .Values.n8n.executions.pruneDataMaxAge | quote }}
+        - name: EXECUTIONS_DATA_MAX_COUNT
+          value: {{ .Values.n8n.executions.pruneDataMaxCount | quote }}
+        - name: DB_TYPE
+          value: {{ .Values.n8n.database.type | quote }}
+        {{- if eq .Values.n8n.database.type "postgresdb" }}
+        - name: DB_POSTGRESDB_HOST
+          value: {{ .Values.n8n.database.postgresdb.host | quote }}
+        - name: DB_POSTGRESDB_PORT
+          value: {{ .Values.n8n.database.postgresdb.port | quote }}
+        - name: DB_POSTGRESDB_DATABASE
+          value: {{ .Values.n8n.database.postgresdb.database | quote }}
+        - name: DB_POSTGRESDB_USER
+          value: {{ .Values.n8n.database.postgresdb.user | quote }}
+        - name: DB_POSTGRESDB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.n8n.database.postgresdb.existingSecret | default (include "n8n.fullname" .) }}
+              key: {{ .Values.n8n.database.postgresdb.passwordKey }}
+        {{- end }}
+        {{- range $key, $val := .Values.n8n.extraEnv }}
+        - name: {{ $key }}
+          value: {{ $val | quote }}
+        {{- end }}
+        {{- if .Values.livenessProbe.enabled }}
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: http
+          initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
+          periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
+          timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
+          failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
+          successThreshold: {{ .Values.livenessProbe.successThreshold }}
+        {{- end }}
+        {{- if .Values.readinessProbe.enabled }}
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: http
+          initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }}
+          periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
+          timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
+          failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
+          successThreshold: {{ .Values.readinessProbe.successThreshold }}
+        {{- end }}
+        resources:
+          {{- toYaml .Values.resources | nindent 10 }}
+        volumeMounts:
+        - name: data
+          mountPath: /home/node/.n8n
+      volumes:
+      - name: data
+        {{- if .Values.persistence.enabled }}
+        persistentVolumeClaim:
+          claimName: {{ include "n8n.pvcName" . }}
+        {{- else }}
+        emptyDir: {}
+        {{- end }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}