yyvf22 pushed to branch main at Root / Kubernetes / FluxCD

Commits:

21 changed files:

Changes:

  • infrastructure/base/controllers/ceph-csi.yamlinfrastructure/base/ceph-csi/helmrelease.yaml
    1
    -apiVersion: v1
    
    2
    -kind: Namespace
    
    3
    -metadata:
    
    4
    -  name: ceph
    
    5
    -  labels:
    
    6
    -    pod-security.kubernetes.io/enforce: privileged
    
    7
    ----
    
    8
    -apiVersion: source.toolkit.fluxcd.io/v1
    
    9
    -kind: HelmRepository
    
    10
    -metadata:
    
    11
    -  name: ceph
    
    12
    -  namespace: ceph
    
    13
    -spec:
    
    14
    -  interval: 1m0s
    
    15
    -  url: https://ceph.github.io/csi-charts
    
    16
    ----
    
    17 1
     apiVersion: helm.toolkit.fluxcd.io/v2beta1
    
    18 2
     kind: HelmRelease
    
    19 3
     metadata:
    

  • infrastructure/base/ceph-csi/helmrepo.yaml
    1
    +apiVersion: source.toolkit.fluxcd.io/v1
    
    2
    +kind: HelmRepository
    
    3
    +metadata:
    
    4
    +  name: ceph
    
    5
    +  namespace: ceph
    
    6
    +spec:
    
    7
    +  interval: 1m0s
    
    8
    +  url: https://ceph.github.io/csi-charts

  • infrastructure/base/controllers/kustomization.yamlinfrastructure/base/ceph-csi/kustomization.yaml
    1 1
     apiVersion: kustomize.config.k8s.io/v1beta1
    
    2 2
     kind: Kustomization
    
    3 3
     resources:
    
    4
    -  - cert-manager.yaml
    
    5
    -  - cilium.yaml
    
    6
    -  - ceph-csi.yaml
    4
    +  - ns.yaml
    
    5
    +  - helmrepo.yaml
    
    6
    +  - helmrelease.yaml

  • infrastructure/base/ceph-csi/ns.yaml
    1
    +apiVersion: v1
    
    2
    +kind: Namespace
    
    3
    +metadata:
    
    4
    +  name: ceph
    
    5
    +  labels:
    
    6
    +    pod-security.kubernetes.io/enforce: privileged

  • infrastructure/base/configs/cluster-issuers.yamlinfrastructure/base/cert-manager/clusterissuer.yaml
    1 1
     apiVersion: cert-manager.io/v1
    
    2 2
     kind: ClusterIssuer
    
    3
    -metadata:
    
    4
    -  name: letsencrypt
    
    5
    -spec:
    
    6
    -  acme:
    
    7
    -    # The ACME server URL.
    
    8
    -    # This is replaced by /clusters/prod/infrastructure.yaml.
    
    9
    -    server: https://acme-v02.api.letsencrypt.org/directory
    
    10
    -    # Email address used for ACME registration
    
    11
    -    email: root@inf.ufpr.br
    
    12
    -    # Name of a secret used to store the ACME account private key
    
    13
    -    privateKeySecretRef:
    
    14
    -      name: letsencrypt
    
    15
    -    # Enable the HTTP-01 challenge provider
    
    16
    -    solvers:
    
    17
    -      - http01:
    
    18
    -          ingress:
    
    19
    -            ingressClassName: nginx
    
    20
    ----
    
    21
    -apiVersion: cert-manager.io/v1
    
    22
    -kind: ClusterIssuer
    
    23 3
     metadata:
    
    24 4
       name: letsencrypt-wildcard
    
    25 5
     spec:
    

  • infrastructure/base/controllers/cert-manager.yamlinfrastructure/base/cert-manager/helmrelease.yaml
    1
    -apiVersion: v1
    
    2
    -kind: Namespace
    
    3
    -metadata:
    
    4
    -  name: cert-manager
    
    5
    ----
    
    6
    -apiVersion: source.toolkit.fluxcd.io/v1
    
    7
    -kind: HelmRepository
    
    8
    -metadata:
    
    9
    -  name: cert-manager
    
    10
    -  namespace: cert-manager
    
    11
    -spec:
    
    12
    -  interval: 1m0s
    
    13
    -  url: https://charts.jetstack.io
    
    14
    ----
    
    15 1
     apiVersion: helm.toolkit.fluxcd.io/v2beta1
    
    16 2
     kind: HelmRelease
    
    17 3
     metadata:
    

  • infrastructure/base/cert-manager/helmrepo.yaml
    1
    +apiVersion: source.toolkit.fluxcd.io/v1
    
    2
    +kind: HelmRepository
    
    3
    +metadata:
    
    4
    +  name: cert-manager
    
    5
    +  namespace: cert-manager
    
    6
    +spec:
    
    7
    +  interval: 1m0s
    
    8
    +  url: https://charts.jetstack.io

  • infrastructure/base/cert-manager/kustomization.yaml
    1
    +apiVersion: kustomize.config.k8s.io/v1beta1
    
    2
    +kind: Kustomization
    
    3
    +resources:
    
    4
    +  - ns.yaml
    
    5
    +  - helmrepo.yaml
    
    6
    +  - helmrelease.yaml
    
    7
    +  - clusterissuer.yaml

  • infrastructure/base/cert-manager/ns.yaml
    1
    +apiVersion: v1
    
    2
    +kind: Namespace
    
    3
    +metadata:
    
    4
    +  name: cert-manager

  • infrastructure/base/controllers/cilium.yamlinfrastructure/base/cilium/helmrelease.yaml
    1
    -apiVersion: source.toolkit.fluxcd.io/v1
    
    2
    -kind: HelmRepository
    
    3
    -metadata:
    
    4
    -  name: cilium
    
    5
    -  namespace: kube-system
    
    6
    -spec:
    
    7
    -  interval: 1h
    
    8
    -  url: https://helm.cilium.io/
    
    9
    ----
    
    10 1
     apiVersion: helm.toolkit.fluxcd.io/v2
    
    11 2
     kind: HelmRelease
    
    12 3
     metadata:
    

  • infrastructure/base/cilium/helmrepo.yaml
    1
    +apiVersion: source.toolkit.fluxcd.io/v1
    
    2
    +kind: HelmRepository
    
    3
    +metadata:
    
    4
    +  name: cilium
    
    5
    +  namespace: kube-system
    
    6
    +spec:
    
    7
    +  interval: 1h
    
    8
    +  url: https://helm.cilium.io/

  • infrastructure/base/configs/kustomization.yamlinfrastructure/base/cilium/kustomization.yaml
    1 1
     apiVersion: kustomize.config.k8s.io/v1beta1
    
    2 2
     kind: Kustomization
    
    3 3
     resources:
    
    4
    -  - cluster-issuers.yaml
    
    4
    +  - helmrepo.yaml
    
    5
    +  - helmrelease.yaml
    
    5 6
       - l2announcement.yaml

  • infrastructure/base/configs/l2announcement.yamlinfrastructure/base/cilium/l2announcement.yaml

  • infrastructure/prod/kustomization.yaml
    1 1
     apiVersion: kustomize.config.k8s.io/v1beta1
    
    2 2
     kind: Kustomization
    
    3 3
     resources:
    
    4
    -  - ../base/controllers
    
    5
    -  - ../base/configs
    
    4
    +  - ../base/cilium
    
    5
    +  - ../base/ceph-csi
    
    6
    +  - ../base/cert-manager
    
    6 7
       - ./ippool.yaml

  • infrastructure/stage/kustomization.yaml
    1 1
     apiVersion: kustomize.config.k8s.io/v1beta1
    
    2 2
     kind: Kustomization
    
    3 3
     resources:
    
    4
    -  - ../base/controllers
    
    5
    -  - ../base/configs
    
    4
    +  - ../base/cilium
    
    5
    +  - ../base/ceph-csi
    
    6
    +  - ../base/cert-manager
    
    6 7
       - ./ippool.yaml

  • monitoring/base/controllers/kube-prometheus-stack/es.yamlmonitoring/base/kube-prometheus-stack/es.yaml

  • monitoring/base/controllers/kube-prometheus-stack/helmrelease.yamlmonitoring/base/kube-prometheus-stack/helmrelease.yaml

  • monitoring/base/controllers/kube-prometheus-stack/helmrepo.yamlmonitoring/base/kube-prometheus-stack/helmrepo.yaml

  • monitoring/base/controllers/kube-prometheus-stack/kustomization.yamlmonitoring/base/kube-prometheus-stack/kustomization.yaml

  • monitoring/base/controllers/kube-prometheus-stack/ns.yamlmonitoring/base/kube-prometheus-stack/ns.yaml

  • monitoring/stage/kustomization.yaml
    1 1
     apiVersion: kustomize.config.k8s.io/v1beta1
    
    2 2
     kind: Kustomization
    
    3 3
     resources:
    
    4
    -  - ../base/controllers/kube-prometheus-stack
    4
    +  - ../base/kube-prometheus-stack