Add n8n for liron

argocd-apps/n8n-liron.yaml

@@ -0,0 +1,38 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: n8n-liron
+  namespace: argocd
+  labels:
+    env: dev-tools
+spec:
+  project: dev-tools
+  source:
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local:2222/dvirlabs/dev-tools.git
+    targetRevision: HEAD
+    path: charts/n8n
+    helm:
+      valueFiles:
+        - ../../manifests/n8n-liron/values.yaml
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dev-tools
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - PrunePropagationPolicy=foreground
+      - RespectIgnoreDifferences=true
+  ignoreDifferences:
+    - kind: PersistentVolumeClaim
+      namespace: dev-tools
+      jsonPointers:
+        - /status
+        - /spec/volumeName
+    - kind: Service
+      namespace: dev-tools
+      jsonPointers:
+        - /spec/clusterIP
+        - /spec/clusterIPs

manifests/n8n-liron/values.yaml

@@ -0,0 +1,66 @@
+# N8N Manifest Values
+# This file overrides chart defaults for the dev-tools namespace deployment
+
+image:
+  repository: n8nio/n8n
+  tag: latest
+  pullPolicy: IfNotPresent
+
+nodeSelector:
+  workload: general
+
+config:
+  N8N_HOST: n8n-liron.dvirlabs.com
+  N8N_PROTOCOL: https
+  WEBHOOK_URL: https://n8n-liron.dvirlabs.com
+  GENERIC_TIMEZONE: Asia/Jerusalem
+  N8N_SECURE_COOKIE: "true"
+  DB_TYPE: sqlite
+  DB_SQLITE_FILE: /root/.n8n/database.db
+
+ingress:
+  enabled: true
+  className: traefik
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.entrypoints: web
+  hosts:
+    - host: n8n-liron.dvirlabs.com
+      paths:
+        - path: /
+          pathType: Prefix
+  tls: []
+
+persistence:
+  enabled: true
+  storageClass: nfs-client
+  size: 10Gi
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 500m
+    memory: 512Mi
+
+env:
+  N8N_BLOCK_ENV_ACCESS_IN_NODE: "false"
+  N8N_RUNNERS_ENABLED: "true"
+  N8N_RUNNERS_MODE: external
+  N8N_RUNNERS_BROKER_LISTEN_ADDRESS: 0.0.0.0
+
+runners:
+  enabled: true
+  image:
+    repository: n8nio/runners
+    tag: latest
+    pullPolicy: IfNotPresent
+  authSecretName: n8n-secrets
+  authSecretKey: N8N_ENCRYPTION_KEY
+  envSecretName: n8n-secrets
+
+# Sensitive environment variables are injected from the n8n-secrets Secret
+# Expected keys in n8n-secrets:
+# - N8N_ENCRYPTION_KEY: Encryption key for n8n data
+# - TELEGRAM_BOT_TOKEN: Telegram bot token for integrations