REFACTOR(crafty): use craftycontroller chart

- Replace custom manifests with craftycontroller Helm chart
- Update ArgoCD application source configuration

crafty/argocd.yaml

@@ -8,9 +8,9 @@ metadata:
 spec:
   project: default
   sources:
-  - repoURL: https://bjw-s-labs.github.io/helm-charts
+  - repoURL: https://drewburr-labs.github.io/helm-charts
-    chart: app-template
+    chart: craftycontroller
-    targetRevision: 3.6.1
+    targetRevision: 0.1.7
     helm:
       valueFiles:
       - $values/crafty/helm-values.yaml

crafty/helm-values.yaml

@@ -1,67 +1,78 @@
-# crafty - bjw-s/app-template values
+# craftycontroller Helm chart values
-# Minecraft server manager
+# Minecraft server manager - https://craftycontrol.com/
 
-defaultPodOptions:
+fullnameOverride: crafty
-  securityContext:
-    fsGroup: 0
 
-controllers:
-  main:
-    strategy: Recreate
-    initContainers:
-      init-permissions:
-        image:
-          repository: busybox
-          tag: latest
-        command:
-          - sh
-          - -c
-          - "chown -R 1000:0 /crafty && chmod -R g+rwX /crafty"
-        securityContext:
-          runAsUser: 0
-    containers:
-      main:
 image:
   repository: registry.gitlab.com/crafty-controller/crafty-4
   tag: latest
-        env:
+  pullPolicy: Always
-          TZ: Asia/Seoul
+
 resources:
   requests:
     cpu: 250m
     memory: 512Mi
   limits:
     memory: 2Gi
-        securityContext:
-          allowPrivilegeEscalation: false
 
-service:
+# Disable default probes (Crafty HTTPS needs time to initialize)
-  main:
+livenessProbe:
-    controller: main
+  initialDelaySeconds: 60
-    ports:
+  httpGet:
-      https:
+    path: /
-        port: 8443
+    port: https
-      dynmap:
+    scheme: HTTPS
-        port: 8123
+readinessProbe:
+  initialDelaySeconds: 60
+  periodSeconds: 10
+  failureThreshold: 30
+  httpGet:
+    path: /
+    port: https
+    scheme: HTTPS
 
+# Use existing PVCs (don't create new ones by omitting requests)
 persistence:
-  servers:
+  crafty-app-config:
+    enabled: false  # Using additionalVolumes for existing PVC
+  crafty-servers:
     enabled: true
-    type: persistentVolumeClaim
+    # No requests = don't create PVC, use existing one
-    existingClaim: crafty-servers
+
-    advancedMounts:
+# Mount existing crafty-config PVC
-      main:
+additionalVolumes:
-        init-permissions:
+  - name: crafty-config
-          - path: /crafty/servers
+    persistentVolumeClaim:
-        main:
+      claimName: crafty-config
-          - path: /crafty/servers
+
-  config:
+additionalVolumeMounts:
-    enabled: true
+  - name: crafty-config
-    type: persistentVolumeClaim
+    mountPath: /crafty/app/config
-    existingClaim: crafty-config
+
-    advancedMounts:
+# Services
-      main:
+services:
-        init-permissions:
+  https:
-          - path: /crafty/app/config
+    type: ClusterIP
-        main:
+    ports:
-          - path: /crafty/app/config
+      - name: https
+        port: 8443
+        protocol: TCP
+      - name: dynmap
+        port: 8123
+        protocol: TCP
+  # Minecraft service defined in manifests/minecraft-service.yaml (LoadBalancer)
+  minecraft:
+    type: ClusterIP
+    ports:
+      - name: minecraft
+        port: 25565
+        protocol: TCP
+
+# Security context
+podSecurityContext:
+  fsGroup: 0
+
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 1000
+  runAsGroup: 0

crafty/manifests/ingress.yaml

@@ -10,7 +10,7 @@ spec:
     - match: Host(`crafty0213.kro.kr`)
       kind: Rule
       services:
-        - name: crafty
+        - name: crafty-https
           port: 8443
           scheme: https
           serversTransport: crafty-insecure

crafty/manifests/minecraft-service.yaml

@@ -8,7 +8,8 @@ metadata:
 spec:
   type: LoadBalancer
   selector:
-    app.kubernetes.io/name: crafty
+    app.kubernetes.io/name: craftycontroller
+    app.kubernetes.io/instance: crafty
   ports:
   - name: bedrock
     port: 19132