MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD

Commits:

3 changed files:

Changes:

  • apps/base/nextcloud/helmrelease.yaml
    ... ... @@ -16,33 +16,9 @@ spec:
    16 16 
           flavor: fpm-alpine
    17 17 
         ingress:
    18 18 
           enabled: true
    19 
    -      className: nginx
    19 
    +      className: cilium
    20 20 
           annotations:
    21 21 
             cert-manager.io/cluster-issuer: letsencrypt-dns01
    22 
    -        nginx.ingress.kubernetes.io/server-snippet: |-
    23 
    -          server_tokens off;
    24 
    -          proxy_hide_header X-Powered-By;
    25 
    -          rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
    26 
    -          rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
    27 
    -          rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
    28 
    -          rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
    29 
    -          location = /.well-known/carddav {
    30 
    -            return 301 $scheme://$host/remote.php/dav;
    31 
    -          }
    32 
    -          location = /.well-known/caldav {
    33 
    -            return 301 $scheme://$host/remote.php/dav;
    34 
    -          }
    35 
    -          location = /robots.txt {
    36 
    -            allow all;
    37 
    -            log_not_found off;
    38 
    -            access_log off;
    39 
    -          }
    40 
    -          location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
    41 
    -            deny all;
    42 
    -          }
    43 
    -          location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
    44 
    -            deny all;
    45 
    -          }
    46 22 
           tls:
    47 23 
             - secretName: nextcloud-tls
    48 24 
               hosts:

  • infrastructure/base/controllers/ingress-nginx.yaml deleted
    1 
    -apiVersion: v1
    2 
    -kind: Namespace
    3 
    -metadata:
    4 
    -  labels:
    5 
    -    app.kubernetes.io/instance: ingress-nginx
    6 
    -    app.kubernetes.io/name: ingress-nginx
    7 
    -  name: ingress-nginx
    8 
    ----
    9 
    -apiVersion: v1
    10 
    -automountServiceAccountToken: true
    11 
    -kind: ServiceAccount
    12 
    -metadata:
    13 
    -  labels:
    14 
    -    app.kubernetes.io/component: controller
    15 
    -    app.kubernetes.io/instance: ingress-nginx
    16 
    -    app.kubernetes.io/name: ingress-nginx
    17 
    -    app.kubernetes.io/part-of: ingress-nginx
    18 
    -    app.kubernetes.io/version: 1.12.0
    19 
    -  name: ingress-nginx
    20 
    -  namespace: ingress-nginx
    21 
    ----
    22 
    -apiVersion: v1
    23 
    -automountServiceAccountToken: true
    24 
    -kind: ServiceAccount
    25 
    -metadata:
    26 
    -  labels:
    27 
    -    app.kubernetes.io/component: admission-webhook
    28 
    -    app.kubernetes.io/instance: ingress-nginx
    29 
    -    app.kubernetes.io/name: ingress-nginx
    30 
    -    app.kubernetes.io/part-of: ingress-nginx
    31 
    -    app.kubernetes.io/version: 1.12.0
    32 
    -  name: ingress-nginx-admission
    33 
    -  namespace: ingress-nginx
    34 
    ----
    35 
    -apiVersion: rbac.authorization.k8s.io/v1
    36 
    -kind: Role
    37 
    -metadata:
    38 
    -  labels:
    39 
    -    app.kubernetes.io/component: controller
    40 
    -    app.kubernetes.io/instance: ingress-nginx
    41 
    -    app.kubernetes.io/name: ingress-nginx
    42 
    -    app.kubernetes.io/part-of: ingress-nginx
    43 
    -    app.kubernetes.io/version: 1.12.0
    44 
    -  name: ingress-nginx
    45 
    -  namespace: ingress-nginx
    46 
    -rules:
    47 
    -  - apiGroups:
    48 
    -      - ""
    49 
    -    resources:
    50 
    -      - namespaces
    51 
    -    verbs:
    52 
    -      - get
    53 
    -  - apiGroups:
    54 
    -      - ""
    55 
    -    resources:
    56 
    -      - configmaps
    57 
    -      - pods
    58 
    -      - secrets
    59 
    -      - endpoints
    60 
    -    verbs:
    61 
    -      - get
    62 
    -      - list
    63 
    -      - watch
    64 
    -  - apiGroups:
    65 
    -      - ""
    66 
    -    resources:
    67 
    -      - services
    68 
    -    verbs:
    69 
    -      - get
    70 
    -      - list
    71 
    -      - watch
    72 
    -  - apiGroups:
    73 
    -      - networking.k8s.io
    74 
    -    resources:
    75 
    -      - ingresses
    76 
    -    verbs:
    77 
    -      - get
    78 
    -      - list
    79 
    -      - watch
    80 
    -  - apiGroups:
    81 
    -      - networking.k8s.io
    82 
    -    resources:
    83 
    -      - ingresses/status
    84 
    -    verbs:
    85 
    -      - update
    86 
    -  - apiGroups:
    87 
    -      - networking.k8s.io
    88 
    -    resources:
    89 
    -      - ingressclasses
    90 
    -    verbs:
    91 
    -      - get
    92 
    -      - list
    93 
    -      - watch
    94 
    -  - apiGroups:
    95 
    -      - coordination.k8s.io
    96 
    -    resourceNames:
    97 
    -      - ingress-nginx-leader
    98 
    -    resources:
    99 
    -      - leases
    100 
    -    verbs:
    101 
    -      - get
    102 
    -      - update
    103 
    -  - apiGroups:
    104 
    -      - coordination.k8s.io
    105 
    -    resources:
    106 
    -      - leases
    107 
    -    verbs:
    108 
    -      - create
    109 
    -  - apiGroups:
    110 
    -      - ""
    111 
    -    resources:
    112 
    -      - events
    113 
    -    verbs:
    114 
    -      - create
    115 
    -      - patch
    116 
    -  - apiGroups:
    117 
    -      - discovery.k8s.io
    118 
    -    resources:
    119 
    -      - endpointslices
    120 
    -    verbs:
    121 
    -      - list
    122 
    -      - watch
    123 
    -      - get
    124 
    ----
    125 
    -apiVersion: rbac.authorization.k8s.io/v1
    126 
    -kind: Role
    127 
    -metadata:
    128 
    -  labels:
    129 
    -    app.kubernetes.io/component: admission-webhook
    130 
    -    app.kubernetes.io/instance: ingress-nginx
    131 
    -    app.kubernetes.io/name: ingress-nginx
    132 
    -    app.kubernetes.io/part-of: ingress-nginx
    133 
    -    app.kubernetes.io/version: 1.12.0
    134 
    -  name: ingress-nginx-admission
    135 
    -  namespace: ingress-nginx
    136 
    -rules:
    137 
    -  - apiGroups:
    138 
    -      - ""
    139 
    -    resources:
    140 
    -      - secrets
    141 
    -    verbs:
    142 
    -      - get
    143 
    -      - create
    144 
    ----
    145 
    -apiVersion: rbac.authorization.k8s.io/v1
    146 
    -kind: ClusterRole
    147 
    -metadata:
    148 
    -  labels:
    149 
    -    app.kubernetes.io/instance: ingress-nginx
    150 
    -    app.kubernetes.io/name: ingress-nginx
    151 
    -    app.kubernetes.io/part-of: ingress-nginx
    152 
    -    app.kubernetes.io/version: 1.12.0
    153 
    -  name: ingress-nginx
    154 
    -rules:
    155 
    -  - apiGroups:
    156 
    -      - ""
    157 
    -    resources:
    158 
    -      - configmaps
    159 
    -      - endpoints
    160 
    -      - nodes
    161 
    -      - pods
    162 
    -      - secrets
    163 
    -      - namespaces
    164 
    -    verbs:
    165 
    -      - list
    166 
    -      - watch
    167 
    -  - apiGroups:
    168 
    -      - coordination.k8s.io
    169 
    -    resources:
    170 
    -      - leases
    171 
    -    verbs:
    172 
    -      - list
    173 
    -      - watch
    174 
    -  - apiGroups:
    175 
    -      - ""
    176 
    -    resources:
    177 
    -      - nodes
    178 
    -    verbs:
    179 
    -      - get
    180 
    -  - apiGroups:
    181 
    -      - ""
    182 
    -    resources:
    183 
    -      - services
    184 
    -    verbs:
    185 
    -      - get
    186 
    -      - list
    187 
    -      - watch
    188 
    -  - apiGroups:
    189 
    -      - networking.k8s.io
    190 
    -    resources:
    191 
    -      - ingresses
    192 
    -    verbs:
    193 
    -      - get
    194 
    -      - list
    195 
    -      - watch
    196 
    -  - apiGroups:
    197 
    -      - ""
    198 
    -    resources:
    199 
    -      - events
    200 
    -    verbs:
    201 
    -      - create
    202 
    -      - patch
    203 
    -  - apiGroups:
    204 
    -      - networking.k8s.io
    205 
    -    resources:
    206 
    -      - ingresses/status
    207 
    -    verbs:
    208 
    -      - update
    209 
    -  - apiGroups:
    210 
    -      - networking.k8s.io
    211 
    -    resources:
    212 
    -      - ingressclasses
    213 
    -    verbs:
    214 
    -      - get
    215 
    -      - list
    216 
    -      - watch
    217 
    -  - apiGroups:
    218 
    -      - discovery.k8s.io
    219 
    -    resources:
    220 
    -      - endpointslices
    221 
    -    verbs:
    222 
    -      - list
    223 
    -      - watch
    224 
    -      - get
    225 
    ----
    226 
    -apiVersion: rbac.authorization.k8s.io/v1
    227 
    -kind: ClusterRole
    228 
    -metadata:
    229 
    -  labels:
    230 
    -    app.kubernetes.io/component: admission-webhook
    231 
    -    app.kubernetes.io/instance: ingress-nginx
    232 
    -    app.kubernetes.io/name: ingress-nginx
    233 
    -    app.kubernetes.io/part-of: ingress-nginx
    234 
    -    app.kubernetes.io/version: 1.12.0
    235 
    -  name: ingress-nginx-admission
    236 
    -rules:
    237 
    -  - apiGroups:
    238 
    -      - admissionregistration.k8s.io
    239 
    -    resources:
    240 
    -      - validatingwebhookconfigurations
    241 
    -    verbs:
    242 
    -      - get
    243 
    -      - update
    244 
    ----
    245 
    -apiVersion: rbac.authorization.k8s.io/v1
    246 
    -kind: RoleBinding
    247 
    -metadata:
    248 
    -  labels:
    249 
    -    app.kubernetes.io/component: controller
    250 
    -    app.kubernetes.io/instance: ingress-nginx
    251 
    -    app.kubernetes.io/name: ingress-nginx
    252 
    -    app.kubernetes.io/part-of: ingress-nginx
    253 
    -    app.kubernetes.io/version: 1.12.0
    254 
    -  name: ingress-nginx
    255 
    -  namespace: ingress-nginx
    256 
    -roleRef:
    257 
    -  apiGroup: rbac.authorization.k8s.io
    258 
    -  kind: Role
    259 
    -  name: ingress-nginx
    260 
    -subjects:
    261 
    -  - kind: ServiceAccount
    262 
    -    name: ingress-nginx
    263 
    -    namespace: ingress-nginx
    264 
    ----
    265 
    -apiVersion: rbac.authorization.k8s.io/v1
    266 
    -kind: RoleBinding
    267 
    -metadata:
    268 
    -  labels:
    269 
    -    app.kubernetes.io/component: admission-webhook
    270 
    -    app.kubernetes.io/instance: ingress-nginx
    271 
    -    app.kubernetes.io/name: ingress-nginx
    272 
    -    app.kubernetes.io/part-of: ingress-nginx
    273 
    -    app.kubernetes.io/version: 1.12.0
    274 
    -  name: ingress-nginx-admission
    275 
    -  namespace: ingress-nginx
    276 
    -roleRef:
    277 
    -  apiGroup: rbac.authorization.k8s.io
    278 
    -  kind: Role
    279 
    -  name: ingress-nginx-admission
    280 
    -subjects:
    281 
    -  - kind: ServiceAccount
    282 
    -    name: ingress-nginx-admission
    283 
    -    namespace: ingress-nginx
    284 
    ----
    285 
    -apiVersion: rbac.authorization.k8s.io/v1
    286 
    -kind: ClusterRoleBinding
    287 
    -metadata:
    288 
    -  labels:
    289 
    -    app.kubernetes.io/instance: ingress-nginx
    290 
    -    app.kubernetes.io/name: ingress-nginx
    291 
    -    app.kubernetes.io/part-of: ingress-nginx
    292 
    -    app.kubernetes.io/version: 1.12.0
    293 
    -  name: ingress-nginx
    294 
    -roleRef:
    295 
    -  apiGroup: rbac.authorization.k8s.io
    296 
    -  kind: ClusterRole
    297 
    -  name: ingress-nginx
    298 
    -subjects:
    299 
    -  - kind: ServiceAccount
    300 
    -    name: ingress-nginx
    301 
    -    namespace: ingress-nginx
    302 
    ----
    303 
    -apiVersion: rbac.authorization.k8s.io/v1
    304 
    -kind: ClusterRoleBinding
    305 
    -metadata:
    306 
    -  labels:
    307 
    -    app.kubernetes.io/component: admission-webhook
    308 
    -    app.kubernetes.io/instance: ingress-nginx
    309 
    -    app.kubernetes.io/name: ingress-nginx
    310 
    -    app.kubernetes.io/part-of: ingress-nginx
    311 
    -    app.kubernetes.io/version: 1.12.0
    312 
    -  name: ingress-nginx-admission
    313 
    -roleRef:
    314 
    -  apiGroup: rbac.authorization.k8s.io
    315 
    -  kind: ClusterRole
    316 
    -  name: ingress-nginx-admission
    317 
    -subjects:
    318 
    -  - kind: ServiceAccount
    319 
    -    name: ingress-nginx-admission
    320 
    -    namespace: ingress-nginx
    321 
    ----
    322 
    -apiVersion: v1
    323 
    -data: null
    324 
    -kind: ConfigMap
    325 
    -metadata:
    326 
    -  labels:
    327 
    -    app.kubernetes.io/component: controller
    328 
    -    app.kubernetes.io/instance: ingress-nginx
    329 
    -    app.kubernetes.io/name: ingress-nginx
    330 
    -    app.kubernetes.io/part-of: ingress-nginx
    331 
    -    app.kubernetes.io/version: 1.12.0
    332 
    -  name: ingress-nginx-controller
    333 
    -  namespace: ingress-nginx
    334 
    ----
    335 
    -apiVersion: v1
    336 
    -kind: Service
    337 
    -metadata:
    338 
    -  labels:
    339 
    -    app.kubernetes.io/component: controller
    340 
    -    app.kubernetes.io/instance: ingress-nginx
    341 
    -    app.kubernetes.io/name: ingress-nginx
    342 
    -    app.kubernetes.io/part-of: ingress-nginx
    343 
    -    app.kubernetes.io/version: 1.12.0
    344 
    -  name: ingress-nginx-controller
    345 
    -  namespace: ingress-nginx
    346 
    -spec:
    347 
    -  ipFamilies:
    348 
    -    - IPv4
    349 
    -  ipFamilyPolicy: SingleStack
    350 
    -  ports:
    351 
    -    - appProtocol: http
    352 
    -      name: http
    353 
    -      port: 80
    354 
    -      protocol: TCP
    355 
    -      targetPort: http
    356 
    -    - appProtocol: https
    357 
    -      name: https
    358 
    -      port: 443
    359 
    -      protocol: TCP
    360 
    -      targetPort: https
    361 
    -  selector:
    362 
    -    app.kubernetes.io/component: controller
    363 
    -    app.kubernetes.io/instance: ingress-nginx
    364 
    -    app.kubernetes.io/name: ingress-nginx
    365 
    -  type: LoadBalancer
    366 
    ----
    367 
    -apiVersion: v1
    368 
    -kind: Service
    369 
    -metadata:
    370 
    -  labels:
    371 
    -    app.kubernetes.io/component: controller
    372 
    -    app.kubernetes.io/instance: ingress-nginx
    373 
    -    app.kubernetes.io/name: ingress-nginx
    374 
    -    app.kubernetes.io/part-of: ingress-nginx
    375 
    -    app.kubernetes.io/version: 1.12.0
    376 
    -  name: ingress-nginx-controller-admission
    377 
    -  namespace: ingress-nginx
    378 
    -spec:
    379 
    -  ports:
    380 
    -    - appProtocol: https
    381 
    -      name: https-webhook
    382 
    -      port: 443
    383 
    -      targetPort: webhook
    384 
    -  selector:
    385 
    -    app.kubernetes.io/component: controller
    386 
    -    app.kubernetes.io/instance: ingress-nginx
    387 
    -    app.kubernetes.io/name: ingress-nginx
    388 
    -  type: ClusterIP
    389 
    ----
    390 
    -apiVersion: apps/v1
    391 
    -kind: Deployment
    392 
    -metadata:
    393 
    -  labels:
    394 
    -    app.kubernetes.io/component: controller
    395 
    -    app.kubernetes.io/instance: ingress-nginx
    396 
    -    app.kubernetes.io/name: ingress-nginx
    397 
    -    app.kubernetes.io/part-of: ingress-nginx
    398 
    -    app.kubernetes.io/version: 1.12.0
    399 
    -  name: ingress-nginx-controller
    400 
    -  namespace: ingress-nginx
    401 
    -spec:
    402 
    -  replicas: 3
    403 
    -  minReadySeconds: 0
    404 
    -  revisionHistoryLimit: 10
    405 
    -  selector:
    406 
    -    matchLabels:
    407 
    -      app.kubernetes.io/component: controller
    408 
    -      app.kubernetes.io/instance: ingress-nginx
    409 
    -      app.kubernetes.io/name: ingress-nginx
    410 
    -  strategy:
    411 
    -    rollingUpdate:
    412 
    -      maxUnavailable: 1
    413 
    -    type: RollingUpdate
    414 
    -  template:
    415 
    -    metadata:
    416 
    -      labels:
    417 
    -        app.kubernetes.io/component: controller
    418 
    -        app.kubernetes.io/instance: ingress-nginx
    419 
    -        app.kubernetes.io/name: ingress-nginx
    420 
    -        app.kubernetes.io/part-of: ingress-nginx
    421 
    -        app.kubernetes.io/version: 1.12.0
    422 
    -    spec:
    423 
    -      containers:
    424 
    -        - args:
    425 
    -            - /nginx-ingress-controller
    426 
    -            - --election-id=ingress-nginx-leader
    427 
    -            - --controller-class=k8s.io/ingress-nginx
    428 
    -            - --ingress-class=nginx
    429 
    -            - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
    430 
    -            - --validating-webhook=:8443
    431 
    -            - --validating-webhook-certificate=/usr/local/certificates/cert
    432 
    -            - --validating-webhook-key=/usr/local/certificates/key
    433 
    -          env:
    434 
    -            - name: POD_NAME
    435 
    -              valueFrom:
    436 
    -                fieldRef:
    437 
    -                  fieldPath: metadata.name
    438 
    -            - name: POD_NAMESPACE
    439 
    -              valueFrom:
    440 
    -                fieldRef:
    441 
    -                  fieldPath: metadata.namespace
    442 
    -            - name: LD_PRELOAD
    443 
    -              value: /usr/local/lib/libmimalloc.so
    444 
    -          image: registry.k8s.io/ingress-nginx/controller:v1.11.5@sha256:a1cbad75b0a7098bf9325132794dddf9eef917e8a7fe246749a4cea7ff6f01eb
    445 
    -          imagePullPolicy: IfNotPresent
    446 
    -          lifecycle:
    447 
    -            preStop:
    448 
    -              exec:
    449 
    -                command:
    450 
    -                  - /wait-shutdown
    451 
    -          livenessProbe:
    452 
    -            failureThreshold: 5
    453 
    -            httpGet:
    454 
    -              path: /healthz
    455 
    -              port: 10254
    456 
    -              scheme: HTTP
    457 
    -            initialDelaySeconds: 10
    458 
    -            periodSeconds: 10
    459 
    -            successThreshold: 1
    460 
    -            timeoutSeconds: 1
    461 
    -          name: controller
    462 
    -          ports:
    463 
    -            - containerPort: 80
    464 
    -              name: http
    465 
    -              protocol: TCP
    466 
    -            - containerPort: 443
    467 
    -              name: https
    468 
    -              protocol: TCP
    469 
    -            - containerPort: 8443
    470 
    -              name: webhook
    471 
    -              protocol: TCP
    472 
    -          readinessProbe:
    473 
    -            failureThreshold: 3
    474 
    -            httpGet:
    475 
    -              path: /healthz
    476 
    -              port: 10254
    477 
    -              scheme: HTTP
    478 
    -            initialDelaySeconds: 10
    479 
    -            periodSeconds: 10
    480 
    -            successThreshold: 1
    481 
    -            timeoutSeconds: 1
    482 
    -          resources:
    483 
    -            requests:
    484 
    -              cpu: 100m
    485 
    -              memory: 90Mi
    486 
    -          securityContext:
    487 
    -            allowPrivilegeEscalation: false
    488 
    -            capabilities:
    489 
    -              add:
    490 
    -                - NET_BIND_SERVICE
    491 
    -              drop:
    492 
    -                - ALL
    493 
    -            readOnlyRootFilesystem: false
    494 
    -            runAsGroup: 82
    495 
    -            runAsNonRoot: true
    496 
    -            runAsUser: 101
    497 
    -            seccompProfile:
    498 
    -              type: RuntimeDefault
    499 
    -          volumeMounts:
    500 
    -            - mountPath: /usr/local/certificates/
    501 
    -              name: webhook-cert
    502 
    -              readOnly: true
    503 
    -      dnsPolicy: ClusterFirst
    504 
    -      nodeSelector:
    505 
    -        kubernetes.io/os: linux
    506 
    -      serviceAccountName: ingress-nginx
    507 
    -      terminationGracePeriodSeconds: 300
    508 
    -      volumes:
    509 
    -        - name: webhook-cert
    510 
    -          secret:
    511 
    -            secretName: ingress-nginx-admission
    512 
    ----
    513 
    -apiVersion: batch/v1
    514 
    -kind: Job
    515 
    -metadata:
    516 
    -  labels:
    517 
    -    app.kubernetes.io/component: admission-webhook
    518 
    -    app.kubernetes.io/instance: ingress-nginx
    519 
    -    app.kubernetes.io/name: ingress-nginx
    520 
    -    app.kubernetes.io/part-of: ingress-nginx
    521 
    -    app.kubernetes.io/version: 1.12.0
    522 
    -  name: ingress-nginx-admission-create
    523 
    -  namespace: ingress-nginx
    524 
    -spec:
    525 
    -  template:
    526 
    -    metadata:
    527 
    -      labels:
    528 
    -        app.kubernetes.io/component: admission-webhook
    529 
    -        app.kubernetes.io/instance: ingress-nginx
    530 
    -        app.kubernetes.io/name: ingress-nginx
    531 
    -        app.kubernetes.io/part-of: ingress-nginx
    532 
    -        app.kubernetes.io/version: 1.12.0
    533 
    -      name: ingress-nginx-admission-create
    534 
    -    spec:
    535 
    -      containers:
    536 
    -        - args:
    537 
    -            - create
    538 
    -            - --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc
    539 
    -            - --namespace=$(POD_NAMESPACE)
    540 
    -            - --secret-name=ingress-nginx-admission
    541 
    -          env:
    542 
    -            - name: POD_NAMESPACE
    543 
    -              valueFrom:
    544 
    -                fieldRef:
    545 
    -                  fieldPath: metadata.namespace
    546 
    -          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4
    547 
    -          imagePullPolicy: IfNotPresent
    548 
    -          name: create
    549 
    -          securityContext:
    550 
    -            allowPrivilegeEscalation: false
    551 
    -            capabilities:
    552 
    -              drop:
    553 
    -                - ALL
    554 
    -            readOnlyRootFilesystem: true
    555 
    -            runAsGroup: 65532
    556 
    -            runAsNonRoot: true
    557 
    -            runAsUser: 65532
    558 
    -            seccompProfile:
    559 
    -              type: RuntimeDefault
    560 
    -      nodeSelector:
    561 
    -        kubernetes.io/os: linux
    562 
    -      restartPolicy: OnFailure
    563 
    -      serviceAccountName: ingress-nginx-admission
    564 
    ----
    565 
    -apiVersion: batch/v1
    566 
    -kind: Job
    567 
    -metadata:
    568 
    -  labels:
    569 
    -    app.kubernetes.io/component: admission-webhook
    570 
    -    app.kubernetes.io/instance: ingress-nginx
    571 
    -    app.kubernetes.io/name: ingress-nginx
    572 
    -    app.kubernetes.io/part-of: ingress-nginx
    573 
    -    app.kubernetes.io/version: 1.12.0
    574 
    -  name: ingress-nginx-admission-patch
    575 
    -  namespace: ingress-nginx
    576 
    -spec:
    577 
    -  template:
    578 
    -    metadata:
    579 
    -      labels:
    580 
    -        app.kubernetes.io/component: admission-webhook
    581 
    -        app.kubernetes.io/instance: ingress-nginx
    582 
    -        app.kubernetes.io/name: ingress-nginx
    583 
    -        app.kubernetes.io/part-of: ingress-nginx
    584 
    -        app.kubernetes.io/version: 1.12.0
    585 
    -      name: ingress-nginx-admission-patch
    586 
    -    spec:
    587 
    -      containers:
    588 
    -        - args:
    589 
    -            - patch
    590 
    -            - --webhook-name=ingress-nginx-admission
    591 
    -            - --namespace=$(POD_NAMESPACE)
    592 
    -            - --patch-mutating=false
    593 
    -            - --secret-name=ingress-nginx-admission
    594 
    -            - --patch-failure-policy=Fail
    595 
    -          env:
    596 
    -            - name: POD_NAMESPACE
    597 
    -              valueFrom:
    598 
    -                fieldRef:
    599 
    -                  fieldPath: metadata.namespace
    600 
    -          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4
    601 
    -          imagePullPolicy: IfNotPresent
    602 
    -          name: patch
    603 
    -          securityContext:
    604 
    -            allowPrivilegeEscalation: false
    605 
    -            capabilities:
    606 
    -              drop:
    607 
    -                - ALL
    608 
    -            readOnlyRootFilesystem: true
    609 
    -            runAsGroup: 65532
    610 
    -            runAsNonRoot: true
    611 
    -            runAsUser: 65532
    612 
    -            seccompProfile:
    613 
    -              type: RuntimeDefault
    614 
    -      nodeSelector:
    615 
    -        kubernetes.io/os: linux
    616 
    -      restartPolicy: OnFailure
    617 
    -      serviceAccountName: ingress-nginx-admission
    618 
    ----
    619 
    -apiVersion: networking.k8s.io/v1
    620 
    -kind: IngressClass
    621 
    -metadata:
    622 
    -  labels:
    623 
    -    app.kubernetes.io/component: controller
    624 
    -    app.kubernetes.io/instance: ingress-nginx
    625 
    -    app.kubernetes.io/name: ingress-nginx
    626 
    -    app.kubernetes.io/part-of: ingress-nginx
    627 
    -    app.kubernetes.io/version: 1.12.0
    628 
    -  name: nginx
    629 
    -spec:
    630 
    -  controller: k8s.io/ingress-nginx
    631 
    ----
    632 
    -apiVersion: admissionregistration.k8s.io/v1
    633 
    -kind: ValidatingWebhookConfiguration
    634 
    -metadata:
    635 
    -  labels:
    636 
    -    app.kubernetes.io/component: admission-webhook
    637 
    -    app.kubernetes.io/instance: ingress-nginx
    638 
    -    app.kubernetes.io/name: ingress-nginx
    639 
    -    app.kubernetes.io/part-of: ingress-nginx
    640 
    -    app.kubernetes.io/version: 1.12.0
    641 
    -  name: ingress-nginx-admission
    642 
    -webhooks:
    643 
    -  - admissionReviewVersions:
    644 
    -      - v1
    645 
    -    clientConfig:
    646 
    -      service:
    647 
    -        name: ingress-nginx-controller-admission
    648 
    -        namespace: ingress-nginx
    649 
    -        path: /networking/v1/ingresses
    650 
    -        port: 443
    651 
    -    failurePolicy: Fail
    652 
    -    matchPolicy: Equivalent
    653 
    -    name: validate.nginx.ingress.kubernetes.io
    654 
    -    rules:
    655 
    -      - apiGroups:
    656 
    -          - networking.k8s.io
    657 
    -        apiVersions:
    658 
    -          - v1
    659 
    -        operations:
    660 
    -          - CREATE
    661 
    -          - UPDATE
    662 
    -        resources:
    663 
    -          - ingresses
    664 
    -    sideEffects: None

  • infrastructure/stage/kustomization.yaml
    1 1 
     apiVersion: kustomize.config.k8s.io/v1beta1
    2 2 
     kind: Kustomization
    3 3 
     resources:
    4 
    -  - ../base/cilium
    5 
    -  - ../base/controllers/ingress-nginx.yaml
    6 4 
       - ../base/cilium
    7 5 
       - ./cilium/ippool.yaml
    8 6 
       - ../base/ceph-csi

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.c3sl.ufpr.br. Manage all notifications · Help Notification message regarding https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/baa6d3e83bb6989f8a1d48ff5bfbd6be55080cb2 at 1754640271