v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions Packages Projects Releases Activity

cleanup flux

Browse source
This commit is contained in:
Vivian 2022-12-28 15:59:15 +01:00
parent 13af8093e4
commit 43edb223d3
21 changed files with 0 additions and 428 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
flux/cluster/apps/gitops/drone/external-secret.yaml
View file

@ -1,27 +0,0 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: drone
namespace: gitops
spec:
refreshInterval: "5m"
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: drone
data:
- secretKey: DRONE_RPC_SECRET
remoteRef:
key: gitops/drone
property: drone_rpc_secret
- secretKey: DRONE_GITEA_CLIENT_ID
remoteRef:
key: gitops/drone
property: drone_gitea_client_id
- secretKey: DRONE_GITEA_CLIENT_SECRET
remoteRef:
key: gitops/drone
property: drone_gitea_client_secret

6
flux/cluster/apps/gitops/drone/kustomization.yaml
View file

@ -1,6 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- server.yaml
- runner.yaml
- external-secret.yaml

30
flux/cluster/apps/gitops/drone/runner.yaml
View file

@ -1,30 +0,0 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: drone-runner-kube
namespace: gitops
spec:
interval: 1h
chart:
spec:
chart: drone-runner-kube
version: 0.1.10
sourceRef:
kind: HelmRepository
name: drone-charts
namespace: flux-system
valuesFrom:
- kind: Secret
name: drone
valuesKey: DRONE_RPC_SECRET
targetPath: env.DRONE_RPC_SECRET
values:
image:
repository: drone/drone-runner-kube
tag: 1.0.0-rc.3
rbac:
buildNamespaces:
- drone-build
env:
DRONE_NAMESPACE_DEFAULT: drone-build
DRONE_RPC_HOST: "drone:8080"

37
flux/cluster/apps/gitops/drone/server.yaml
View file

@ -1,37 +0,0 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: drone
namespace: gitops
spec:
interval: 1h
chart:
spec:
chart: drone
version: 0.5.0
sourceRef:
kind: HelmRepository
name: drone-charts
namespace: flux-system
values:
image:
repository: drone/drone
tag: 2.12.1
ingress:
enabled: true
hosts:
- host: drone.0x76.dev
paths:
- path: /
pathType: Prefix
persistentVolume:
enabled: false
extraSecretNamesForEnvFrom:
- drone
env:
DRONE_DATABASE_DRIVER: postgres
DRONE_DATABASE_DATASOURCE: postgres://drone@10.42.42.26/drone?sslmode=disable
DRONE_GIT_ALWAYS_AUTH: true
DRONE_GITEA_SERVER: https://git.0x76.dev
DRONE_SERVER_HOST: drone.0x76.dev
DRONE_SERVER_PROTO: https

1
flux/cluster/apps/gitops/kustomization.yaml
View file

@ -2,4 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- renovate
- drone

1
flux/cluster/apps/kustomization.yaml
View file

@ -4,5 +4,4 @@ resources:
- networking
- presidential-paradise
- gitops
- monitoring
- olympus

22
flux/cluster/apps/monitoring/goldilocks/helm-release.yaml
View file

@ -1,22 +0,0 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: goldilocks
namespace: monitoring
spec:
interval: 5m
chart:
spec:
chart: goldilocks
version: 6.1.4
sourceRef:
kind: HelmRepository
name: fairwinds-charts
namespace: flux-system
interval: 5m
timeout: 20m
values:
dashboard:
replicaCount: 1
ingress:
enabled: false

4
flux/cluster/apps/monitoring/goldilocks/kustomization.yaml
View file

@ -1,4 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- helm-release.yaml

6
flux/cluster/apps/monitoring/kustomization.yaml
View file

@ -1,6 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- vpa
- goldilocks
- polaris

21
flux/cluster/apps/monitoring/polaris/helm-release.yaml
View file

@ -1,21 +0,0 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: polaris
namespace: monitoring
spec:
interval: 5m
chart:
spec:
chart: polaris
version: 5.4.1
sourceRef:
kind: HelmRepository
name: fairwinds-charts
namespace: flux-system
interval: 5m
timeout: 20m
values:
dashboard:
replicas: 1
enable: true

4
flux/cluster/apps/monitoring/polaris/kustomization.yaml
View file

@ -1,4 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- helm-release.yaml

24
flux/cluster/apps/monitoring/vpa/helm-release.yaml
View file

@ -1,24 +0,0 @@
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: vpa
namespace: monitoring
spec:
interval: 5m
chart:
spec:
chart: vpa
version: 1.4.0
sourceRef:
kind: HelmRepository
name: fairwinds-charts
namespace: flux-system
interval: 5m
timeout: 20m
values:
recommender:
enabled: true
updater:
enabled: false
admissionController:
enabled: false

4
flux/cluster/apps/monitoring/vpa/kustomization.yaml
View file

@ -1,4 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- helm-release.yaml

2
flux/cluster/apps/presidential-paradise/kustomization.yaml
View file

@ -3,5 +3,3 @@ kind: Kustomization
resources:
- xirion-registry-creds.yaml
- 0x76dev
- wooloofanclub
- zookeeper

4
flux/cluster/apps/presidential-paradise/wooloofanclub/kustomization.yaml
View file

@ -1,4 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- wooloo.yaml

98
flux/cluster/apps/presidential-paradise/wooloofanclub/wooloo.yaml
View file

@ -1,98 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: wooloofan-club
namespace: presidential-paradise
labels:
app: wooloofan-club
spec:
replicas: 1
selector:
matchLabels:
app: wooloofan-club
template:
metadata:
labels:
app: wooloofan-club
spec:
containers:
- name: wooloofan-club
image: 0x76/wooloofan.club
ports:
- containerPort: 80
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: wooloofan-club-whoami
namespace: presidential-paradise
labels:
app: wooloofan-club-whoami
spec:
replicas: 1
selector:
matchLabels:
app: wooloofan-club-whoami
template:
metadata:
labels:
app: wooloofan-club-whoami
spec:
containers:
- name: wooloofan-club-whoami
image: containous/whoami
ports:
- containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
name: wooloofan-club-service
namespace: presidential-paradise
spec:
selector:
app: wooloofan-club
ports:
- protocol: TCP
port: 80
---
apiVersion: v1
kind: Service
metadata:
name: wooloofan-club-whoami-service
namespace: presidential-paradise
spec:
selector:
app: wooloofan-club-whoami
ports:
- protocol: TCP
port: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: wooloofan-club-ingress
namespace: presidential-paradise
spec:
ingressClassName: "traefik"
rules:
- host: "wooloofan.club"
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: wooloofan-club-service
port:
number: 80
- host: "whoami.wooloofan.club"
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: wooloofan-club-whoami-service
port:
number: 80

53
flux/cluster/apps/presidential-paradise/zookeeper/deployment.yaml
View file

@ -1,53 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: zookeeper
namespace: presidential-paradise
labels:
app: zookeeper
spec:
replicas: 1
selector:
matchLabels:
app: zookeeper
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 34%
maxUnavailable: 34%
template:
metadata:
name: zookeeper
labels:
app: zookeeper
spec:
imagePullSecrets:
- name: xirion-registry-creds
containers:
- name: zookeeper
image: registry.xirion.net/library/zookeeper:0.3.1 # {"$imagepolicy": "flux-system:zookeeper"}
ports:
- name: web
containerPort: 8085
- name: epmd
containerPort: 4369
envFrom:
- secretRef:
name: zookeeper
env:
- name: LANG
value: C.UTF-8
- name: HOSTNAME
valueFrom:
fieldRef:
fieldPath: status.podIP
- name: SERVICE_NAME
value: zookeeper-private.presidential-paradise.svc.cluster.local
resources: {}
securityContext:
privileged: false
procMount: Default
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
dnsPolicy: ClusterFirst
terminationGracePeriodSeconds: 30

33
flux/cluster/apps/presidential-paradise/zookeeper/external-secret.yaml
View file

@ -1,33 +0,0 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: zookeeper
namespace: presidential-paradise
spec:
refreshInterval: "5m"
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: zookeeper
data:
- secretKey: DISCORD_APP_ID
remoteRef:
key: presidential-paradise/zookeeper
property: discord_app_id
- secretKey: DISCORD_PUBLIC_KEY
remoteRef:
key: presidential-paradise/zookeeper
property: discord_public_key
- secretKey: DISCORD_TOKEN
remoteRef:
key: presidential-paradise/zookeeper
property: discord_token
- secretKey: TWITTER_TOKEN
remoteRef:
key: presidential-paradise/zookeeper
property: twitter_token
- secretKey: RELEASE_COOKIE
remoteRef:
key: presidential-paradise/zookeeper
property: erlang_cookie

17
flux/cluster/apps/presidential-paradise/zookeeper/ingress.yaml
View file

@ -1,17 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: zookeeper
namespace: presidential-paradise
spec:
rules:
- host: "zookeeper.0x76.dev"
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: zookeeper
port:
number: 8085

7
flux/cluster/apps/presidential-paradise/zookeeper/kustomization.yaml
View file

@ -1,7 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- external-secret.yaml
- deployment.yaml
- svc.yaml
- ingress.yaml

27
flux/cluster/apps/presidential-paradise/zookeeper/svc.yaml
View file

@ -1,27 +0,0 @@
apiVersion: v1
kind: Service
metadata:
name: zookeeper-private
namespace: presidential-paradise
spec:
clusterIP: None
ports:
- name: epmd
port: 4369
targetPort: epmd
protocol: TCP
selector:
app: zookeeper
---
apiVersion: v1
kind: Service
metadata:
name: zookeeper
namespace: presidential-paradise
spec:
ports:
- name: http
targetPort: web
port: 8085
selector:
app: zookeeper