- Git do Root C3SL

[Git][root/k8s/fluxcd][main] feat: upgrade netbox
by Fernando K (＠fmkiotheka) 08 Ago '25

08 Ago '25

Fernando K pushed to branch main at Root / Kubernetes / FluxCD Commits: 23b47752 by Fernando Monteiro Kiotheka at 2025-08-08T10:22:33-03:00 feat: upgrade netbox - - - - - 1 changed file: - apps/base/netbox/helmrelease.yaml Changes: ===================================== apps/base/netbox/helmrelease.yaml ===================================== @@ -40,7 +40,7 @@ spec: registry: harbor.c3sl.ufpr.br repository: root/netbox pullPolicy: Always - digest: "sha256:7e8595fcfbb7bfc1f0a88cbff45389a2cd0d9a3d01f550f7f4ebfb98153a4604" + digest: "sha256:734fbf94e4e48cd32b1c2de5c75e191a2c902fe2ef8b807ea814346d1949deaa" allowedHosts: - netbox.k8sstage.c3sl.ufpr.br - netbox.c3sl.ufpr.br View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/23b4775238e3f5764f6061… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/23b4775238e3f5764f6061… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/netbox][main] feat: update stuffs
by Fernando K (＠fmkiotheka) 08 Ago '25

08 Ago '25

Fernando K pushed to branch main at Root / Serviços / Netbox Commits: 1e9b41e2 by Fernando Monteiro Kiotheka at 2025-08-08T10:10:08-03:00 feat: update stuffs - - - - - 2 changed files: - Containerfile - plugin-requirements.txt Changes: ===================================== Containerfile ===================================== @@ -1,4 +1,4 @@ -FROM ghcr.io/netbox-community/netbox:v4.3.2 +FROM ghcr.io/netbox-community/netbox:v4.3.5 RUN apt-get update && apt-get upgrade -y && apt-get install git -y ===================================== plugin-requirements.txt ===================================== @@ -1,4 +1,4 @@ -netbox-proxmox-sync @ git+https://gitlab.c3sl.ufpr.br/root/netbox-proxmox-sync.git@c75cf9329ad75c7ef58d707db2e6616379e71114 +netbox-proxmox-import @ git+https://gitlab.c3sl.ufpr.br/root/netbox-proxmox-import.git@34b0bb862255bb87cae54c079eb931a642cb9ce2 netbox-backups @ git+https://gitlab.c3sl.ufpr.br/root/netbox-backup-plugin.git@f3401ad1bd0e0645564f8602205e1d5bb8e9944e netbox-plugin-dns netbox-floorplan-plugin View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/netbox/-/commit/1e9b41e2791dc539f… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/netbox/-/commit/1e9b41e2791dc539f… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] fix(monitoring): move es before helmrelease
by yyvf22 (＠yyvf22) 08 Ago '25

08 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 3d1023a2 by yyvf at 2025-08-08T07:49:05-03:00 fix(monitoring): move es before helmrelease - - - - - 1 changed file: - monitoring/base/kube-prometheus-stack/kustomization.yaml Changes: ===================================== monitoring/base/kube-prometheus-stack/kustomization.yaml ===================================== @@ -2,6 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - ns.yaml + - es.yaml - helmrepo.yaml - helmrelease.yaml - - es.yaml View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3d1023a26f1570cc98374f… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3d1023a26f1570cc98374f… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/netbox-proxmox-sync][main] chore: update TODO (also closes #1)
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Netbox Proxmox Sync Plugin Commits: 34b0bb86 by marcusvrp at 2025-08-08T07:41:14-03:00 chore: update TODO (also closes #1) - - - - - 1 changed file: - TODO.md Changes: ===================================== TODO.md ===================================== @@ -1,5 +1,6 @@ # ToDo - [x] Rework log tables to look nicer +- [ ] Update `README`'s images' - [ ] Periodic full sync - [ ] Add "sync devices" option? (maybe) - [ ] Allow VM/Device ignore list View it on GitLab: https://gitlab.c3sl.ufpr.br/root/netbox-proxmox-sync/-/commit/34b0bb862255b… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/netbox-proxmox-sync/-/commit/34b0bb862255b… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/netbox-proxmox-sync][main] 2 commits: here comes the sun
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Netbox Proxmox Sync Plugin Commits: d255d649 by MarcusVRP at 2025-07-18T10:13:14-03:00 here comes the sun - - - - - 0b8ca209 by marcusvrp at 2025-08-08T07:40:18-03:00 chore: update - - - - - 45 changed files: - .gitignore - README.md - + TODO.md - − example.config.py - + images/creation.png - + images/sidebar.png - + images/vm_sync.png - + images/vmi_sync.png - + netbox_proxmox_import/__init__.py - netbox_proxmox_sync/api/__init__.py → netbox_proxmox_import/api/__init__.py - + netbox_proxmox_import/api/netbox/__init__.py - + netbox_proxmox_import/api/netbox/categorizer.py - + netbox_proxmox_import/api/netbox/parser.py - + netbox_proxmox_import/api/netbox/updater.py - + netbox_proxmox_import/api/proxmox/__init__.py - + netbox_proxmox_import/api/proxmox/connector.py - + netbox_proxmox_import/api/serializers.py - + netbox_proxmox_import/api/sync.py - + netbox_proxmox_import/api/urls.py - + netbox_proxmox_import/api/views.py - + netbox_proxmox_import/forms.py - + netbox_proxmox_import/migrations/0001_initial.py - + netbox_proxmox_import/migrations/__init__.py - + netbox_proxmox_import/models.py - + netbox_proxmox_import/navigation.py - + netbox_proxmox_import/netbox-plugin.yaml - + netbox_proxmox_import/tables.py - + netbox_proxmox_import/templates/netbox_proxmox_import/__init__.py - + netbox_proxmox_import/templates/netbox_proxmox_import/management_panel.html - + netbox_proxmox_import/templates/netbox_proxmox_import/proxmoxconnection.html - + netbox_proxmox_import/urls.py - + netbox_proxmox_import/views.py - − netbox_proxmox_sync/__init__.py - − netbox_proxmox_sync/api/config.py - − netbox_proxmox_sync/api/netbox/create.py - − netbox_proxmox_sync/api/netbox/delete.py - − netbox_proxmox_sync/api/netbox/extract.py - − netbox_proxmox_sync/api/netbox/update.py - − netbox_proxmox_sync/api/proxmox/extract.py - − netbox_proxmox_sync/api/urls.py - − netbox_proxmox_sync/api/utils/errors.py - − netbox_proxmox_sync/api/utils/models.py - − netbox_proxmox_sync/api/views.py - + pyproject.toml - − setup.py The diff was not included because it is too large. View it on GitLab: https://gitlab.c3sl.ufpr.br/root/netbox-proxmox-sync/-/compare/c75cf9329ad7… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/netbox-proxmox-sync/-/compare/c75cf9329ad7… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] fix(nextcloud): true -> false passwordless login
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: 7e386899 by marcusvrp at 2025-08-08T06:50:25-03:00 fix(nextcloud): true -> false passwordless login - - - - - 1 changed file: - apps/base/nextcloud/helmrelease.yaml Changes: ===================================== apps/base/nextcloud/helmrelease.yaml ===================================== @@ -47,7 +47,7 @@ spec: no-passwordless.config.php: | <?php $CONFIG = array ( - 'auth.webauthn.enabled' => true, + 'auth.webauthn.enabled' => false, ); extraEnv: - name: PGSSLMODE View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/7e3868998ce45c58b5b5d7… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/7e3868998ce45c58b5b5d7… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(nextcloud): migrate to new oidc app
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: 702138fd by marcusvrp at 2025-08-08T06:49:33-03:00 feat(nextcloud): migrate to new oidc app - - - - - 1 changed file: - apps/base/nextcloud/helmrelease.yaml Changes: ===================================== apps/base/nextcloud/helmrelease.yaml ===================================== @@ -44,33 +44,14 @@ spec: accessKey: s3AccessKey secretKey: s3SecretKey configs: - # https://github.com/pulsejet/nextcloud-oidc-login - oidc.config.php: | + no-passwordless.config.php: | <?php $CONFIG = array ( - 'allow_user_to_change_display_name' => false, - 'lost_password_link' => 'disabled', - 'oidc_login_provider_url' => 'https://keycloak.c3sl.ufpr.br/realms/DInfC3SL/', - 'oidc_login_client_id' => getenv('OIDC_CLIENT_ID'), - 'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'), - 'oidc_login_auto_redirect' => true, - 'oidc_login_button_text' => 'DInf/C3SL Login', - 'oidc_login_hide_password_form' => true, - 'oidc_login_disable_registration' => false, + 'auth.webauthn.enabled' => true, ); extraEnv: - name: PGSSLMODE value: require - - name: OIDC_CLIENT_ID - valueFrom: - secretKeyRef: - name: nextcloud - key: oidcClientID - - name: OIDC_CLIENT_SECRET - valueFrom: - secretKeyRef: - name: nextcloud - key: oidcClientSecret redis: enabled: true auth: View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/702138fd32c1f1b448d50a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/702138fd32c1f1b448d50a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] fix(nextcloud): nginx. closes #8
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: e9731114 by marcusvrp at 2025-08-08T05:49:05-03:00 fix(nextcloud): nginx. closes #8 - - - - - 1 changed file: - apps/base/nextcloud/helmrelease.yaml Changes: ===================================== apps/base/nextcloud/helmrelease.yaml ===================================== @@ -79,7 +79,7 @@ spec: enabled: true nginx: enabled: true - containerPort: 8080 + containerPort: 80 internalDatabase: enabled: false externalDatabase: View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/e973111470da359bde905b… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/e973111470da359bde905b… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] revert(nextcloud): waste of time
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: baa6d3e8 by marcusvrp at 2025-08-08T05:04:21-03:00 revert(nextcloud): waste of time - - - - - 3 changed files: - apps/base/nextcloud/helmrelease.yaml - − infrastructure/base/controllers/ingress-nginx.yaml - infrastructure/stage/kustomization.yaml Changes: ===================================== apps/base/nextcloud/helmrelease.yaml ===================================== @@ -16,33 +16,9 @@ spec: flavor: fpm-alpine ingress: enabled: true - className: nginx + className: cilium annotations: cert-manager.io/cluster-issuer: letsencrypt-dns01 - nginx.ingress.kubernetes.io/server-snippet: |- - server_tokens off; - proxy_hide_header X-Powered-By; - rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last; - rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last; - rewrite ^/.well-known/host-meta /public.php?service=host-meta last; - rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json; - location = /.well-known/carddav { - return 301 $scheme://$host/remote.php/dav; - } - location = /.well-known/caldav { - return 301 $scheme://$host/remote.php/dav; - } - location = /robots.txt { - allow all; - log_not_found off; - access_log off; - } - location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ { - deny all; - } - location ~ ^/(?:autotest|occ|issue|indie|db_|console) { - deny all; - } tls: - secretName: nextcloud-tls hosts: ===================================== infrastructure/base/controllers/ingress-nginx.yaml deleted ===================================== @@ -1,664 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - labels: - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - name: ingress-nginx ---- -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx - namespace: ingress-nginx ---- -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission - namespace: ingress-nginx ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx - namespace: ingress-nginx -rules: - - apiGroups: - - "" - resources: - - namespaces - verbs: - - get - - apiGroups: - - "" - resources: - - configmaps - - pods - - secrets - - endpoints - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - services - verbs: - - get - - list - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - get - - list - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - networking.k8s.io - resources: - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resourceNames: - - ingress-nginx-leader - resources: - - leases - verbs: - - get - - update - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - list - - watch - - get ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission - namespace: ingress-nginx -rules: - - apiGroups: - - "" - resources: - - secrets - verbs: - - get - - create ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx -rules: - - apiGroups: - - "" - resources: - - configmaps - - endpoints - - nodes - - pods - - secrets - - namespaces - verbs: - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - apiGroups: - - "" - resources: - - services - verbs: - - get - - list - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - networking.k8s.io - resources: - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - list - - watch - - get ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission -rules: - - apiGroups: - - admissionregistration.k8s.io - resources: - - validatingwebhookconfigurations - verbs: - - get - - update ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx - namespace: ingress-nginx -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: ingress-nginx -subjects: - - kind: ServiceAccount - name: ingress-nginx - namespace: ingress-nginx ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission - namespace: ingress-nginx -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: ingress-nginx-admission -subjects: - - kind: ServiceAccount - name: ingress-nginx-admission - namespace: ingress-nginx ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: ingress-nginx -subjects: - - kind: ServiceAccount - name: ingress-nginx - namespace: ingress-nginx ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: ingress-nginx-admission -subjects: - - kind: ServiceAccount - name: ingress-nginx-admission - namespace: ingress-nginx ---- -apiVersion: v1 -data: null -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-controller - namespace: ingress-nginx ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-controller - namespace: ingress-nginx -spec: - ipFamilies: - - IPv4 - ipFamilyPolicy: SingleStack - ports: - - appProtocol: http - name: http - port: 80 - protocol: TCP - targetPort: http - - appProtocol: https - name: https - port: 443 - protocol: TCP - targetPort: https - selector: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - type: LoadBalancer ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-controller-admission - namespace: ingress-nginx -spec: - ports: - - appProtocol: https - name: https-webhook - port: 443 - targetPort: webhook - selector: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - type: ClusterIP ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-controller - namespace: ingress-nginx -spec: - replicas: 3 - minReadySeconds: 0 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - strategy: - rollingUpdate: - maxUnavailable: 1 - type: RollingUpdate - template: - metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - spec: - containers: - - args: - - /nginx-ingress-controller - - --election-id=ingress-nginx-leader - - --controller-class=k8s.io/ingress-nginx - - --ingress-class=nginx - - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller - - --validating-webhook=:8443 - - --validating-webhook-certificate=/usr/local/certificates/cert - - --validating-webhook-key=/usr/local/certificates/key - env: - - name: POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: LD_PRELOAD - value: /usr/local/lib/libmimalloc.so - image: registry.k8s.io/ingress-nginx/controller:v1.11.5@sha256:a1cbad75b0a7098bf9325132794dddf9eef917e8a7fe246749a4cea7ff6f01eb - imagePullPolicy: IfNotPresent - lifecycle: - preStop: - exec: - command: - - /wait-shutdown - livenessProbe: - failureThreshold: 5 - httpGet: - path: /healthz - port: 10254 - scheme: HTTP - initialDelaySeconds: 10 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 1 - name: controller - ports: - - containerPort: 80 - name: http - protocol: TCP - - containerPort: 443 - name: https - protocol: TCP - - containerPort: 8443 - name: webhook - protocol: TCP - readinessProbe: - failureThreshold: 3 - httpGet: - path: /healthz - port: 10254 - scheme: HTTP - initialDelaySeconds: 10 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 1 - resources: - requests: - cpu: 100m - memory: 90Mi - securityContext: - allowPrivilegeEscalation: false - capabilities: - add: - - NET_BIND_SERVICE - drop: - - ALL - readOnlyRootFilesystem: false - runAsGroup: 82 - runAsNonRoot: true - runAsUser: 101 - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /usr/local/certificates/ - name: webhook-cert - readOnly: true - dnsPolicy: ClusterFirst - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: ingress-nginx - terminationGracePeriodSeconds: 300 - volumes: - - name: webhook-cert - secret: - secretName: ingress-nginx-admission ---- -apiVersion: batch/v1 -kind: Job -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission-create - namespace: ingress-nginx -spec: - template: - metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission-create - spec: - containers: - - args: - - create - - --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc - - --namespace=$(POD_NAMESPACE) - - --secret-name=ingress-nginx-admission - env: - - name: POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 - imagePullPolicy: IfNotPresent - name: create - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - restartPolicy: OnFailure - serviceAccountName: ingress-nginx-admission ---- -apiVersion: batch/v1 -kind: Job -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission-patch - namespace: ingress-nginx -spec: - template: - metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission-patch - spec: - containers: - - args: - - patch - - --webhook-name=ingress-nginx-admission - - --namespace=$(POD_NAMESPACE) - - --patch-mutating=false - - --secret-name=ingress-nginx-admission - - --patch-failure-policy=Fail - env: - - name: POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 - imagePullPolicy: IfNotPresent - name: patch - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - restartPolicy: OnFailure - serviceAccountName: ingress-nginx-admission ---- -apiVersion: networking.k8s.io/v1 -kind: IngressClass -metadata: - labels: - app.kubernetes.io/component: controller - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: nginx -spec: - controller: k8s.io/ingress-nginx ---- -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - labels: - app.kubernetes.io/component: admission-webhook - app.kubernetes.io/instance: ingress-nginx - app.kubernetes.io/name: ingress-nginx - app.kubernetes.io/part-of: ingress-nginx - app.kubernetes.io/version: 1.12.0 - name: ingress-nginx-admission -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: ingress-nginx-controller-admission - namespace: ingress-nginx - path: /networking/v1/ingresses - port: 443 - failurePolicy: Fail - matchPolicy: Equivalent - name: validate.nginx.ingress.kubernetes.io - rules: - - apiGroups: - - networking.k8s.io - apiVersions: - - v1 - operations: - - CREATE - - UPDATE - resources: - - ingresses - sideEffects: None ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -1,8 +1,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../base/cilium - - ../base/controllers/ingress-nginx.yaml - ../base/cilium - ./cilium/ippool.yaml - ../base/ceph-csi View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/baa6d3e83bb6989f8a1d48… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/baa6d3e83bb6989f8a1d48… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(ingress-nginx): temporarily enable on stage cluster for testing
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: afb4a0eb by marcusvrp at 2025-08-08T04:55:14-03:00 feat(ingress-nginx): temporarily enable on stage cluster for testing - - - - - 1 changed file: - infrastructure/stage/kustomization.yaml Changes: ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -1,6 +1,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: + - ../base/cilium + - ../base/controllers/ingress-nginx.yaml - ../base/cilium - ./cilium/ippool.yaml - ../base/ceph-csi View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/afb4a0eb9c95679b046134… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/afb4a0eb9c95679b046134… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0