Add sizer-collector config to dev garm
This commit is contained in:
Martin McCaffery
parent
c790fe44ee
commit
b8b92c21be
113 changed files with 7 additions and 8959 deletions
|
|
@ -15,10 +15,6 @@ ingress:
|
||||||
hosts:
|
hosts:
|
||||||
- garm.dev.t09.de
|
- garm.dev.t09.de
|
||||||
|
|
||||||
image:
|
|
||||||
repository: edp.buildth.ing/devfw-cicd/garm
|
|
||||||
tag: workflow-params-20260309
|
|
||||||
|
|
||||||
# Credentials and Secrets
|
# Credentials and Secrets
|
||||||
credentials:
|
credentials:
|
||||||
edgeConnect:
|
edgeConnect:
|
||||||
|
|
@ -28,6 +24,10 @@ credentials:
|
||||||
db:
|
db:
|
||||||
existingSecretName: garm-fixed-credentials
|
existingSecretName: garm-fixed-credentials
|
||||||
|
|
||||||
|
image:
|
||||||
|
repository: edp.buildth.ing/devfw-cicd/garm
|
||||||
|
tag: workflow-params-20260309
|
||||||
|
|
||||||
providerConfig:
|
providerConfig:
|
||||||
edgeConnect:
|
edgeConnect:
|
||||||
organization: edp2
|
organization: edp2
|
||||||
|
|
@ -36,6 +36,9 @@ providerConfig:
|
||||||
cloudlet:
|
cloudlet:
|
||||||
name: Hamburg
|
name: Hamburg
|
||||||
organization: TelekomOP
|
organization: TelekomOP
|
||||||
|
edgeConnectK8s:
|
||||||
|
sizer:
|
||||||
|
sidecarImage: edp.buildth.ing/devfw-cicd/forgejo-runner-sizer-collector:latest
|
||||||
|
|
||||||
garm:
|
garm:
|
||||||
logging:
|
logging:
|
||||||
|
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: edfbuilder
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/registry"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: coder-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/coder"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: core
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/core"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: docs-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: argocd-stack
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/website-and-documentation"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: forgejo
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/forgejo"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: garm-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/garm"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: observability-client
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/observability-client"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: observability
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/observability"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: otc
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/otc"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: terralist-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/edp.t09.de/stacks/terralist"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,32 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: coder
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: coder
|
|
||||||
sources:
|
|
||||||
- repoURL: https://helm.coder.com/v2
|
|
||||||
chart: coder
|
|
||||||
targetRevision: 2.28.3
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/coder/coder/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/coder/coder/manifests"
|
|
||||||
|
|
@ -1,38 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: postgresql.cnpg.io/v1
|
|
||||||
kind: Cluster
|
|
||||||
metadata:
|
|
||||||
name: coder-db
|
|
||||||
namespace: coder
|
|
||||||
spec:
|
|
||||||
instances: 1
|
|
||||||
primaryUpdateStrategy: unsupervised
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
memory: "1Gi"
|
|
||||||
cpu: "1"
|
|
||||||
limits:
|
|
||||||
memory: "1Gi"
|
|
||||||
cpu: "1"
|
|
||||||
managed:
|
|
||||||
roles:
|
|
||||||
- name: coder
|
|
||||||
createdb: true
|
|
||||||
login: true
|
|
||||||
passwordSecret:
|
|
||||||
name: coder-db-user
|
|
||||||
storage:
|
|
||||||
size: 10Gi
|
|
||||||
storageClass: csi-disk
|
|
||||||
---
|
|
||||||
apiVersion: postgresql.cnpg.io/v1
|
|
||||||
kind: Database
|
|
||||||
metadata:
|
|
||||||
name: coder
|
|
||||||
namespace: coder
|
|
||||||
spec:
|
|
||||||
cluster:
|
|
||||||
name: coder-db
|
|
||||||
name: coder
|
|
||||||
owner: coder
|
|
||||||
---
|
|
||||||
|
|
@ -1,61 +0,0 @@
|
||||||
coder:
|
|
||||||
# You can specify any environment variables you'd like to pass to Coder
|
|
||||||
# here. Coder consumes environment variables listed in
|
|
||||||
# `coder server --help`, and these environment variables are also passed
|
|
||||||
# to the workspace provisioner (so you can consume them in your Terraform
|
|
||||||
# templates for auth keys etc.).
|
|
||||||
#
|
|
||||||
# Please keep in mind that you should not set `CODER_HTTP_ADDRESS`,
|
|
||||||
# `CODER_TLS_ENABLE`, `CODER_TLS_CERT_FILE` or `CODER_TLS_KEY_FILE` as
|
|
||||||
# they are already set by the Helm chart and will cause conflicts.
|
|
||||||
env:
|
|
||||||
- name: CODER_ACCESS_URL
|
|
||||||
value: https://coder.edp.t09.de
|
|
||||||
- name: CODER_PG_CONNECTION_URL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
# You'll need to create a secret called coder-db-url with your
|
|
||||||
# Postgres connection URL like:
|
|
||||||
# postgres://coder:password@postgres:5432/coder?sslmode=disable
|
|
||||||
name: coder-db-user
|
|
||||||
key: url
|
|
||||||
# For production deployments, we recommend configuring your own GitHub
|
|
||||||
# OAuth2 provider and disabling the default one.
|
|
||||||
- name: CODER_OAUTH2_GITHUB_DEFAULT_PROVIDER_ENABLE
|
|
||||||
value: "false"
|
|
||||||
- name: EDGE_CONNECT_ENDPOINT
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: edge-credential
|
|
||||||
key: endpoint
|
|
||||||
- name: EDGE_CONNECT_USERNAME
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: edge-credential
|
|
||||||
key: username
|
|
||||||
- name: EDGE_CONNECT_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: edge-credential
|
|
||||||
key: password
|
|
||||||
|
|
||||||
# (Optional) For production deployments the access URL should be set.
|
|
||||||
# If you're just trying Coder, access the dashboard via the service IP.
|
|
||||||
# - name: CODER_ACCESS_URL
|
|
||||||
# value: "https://coder.example.com"
|
|
||||||
|
|
||||||
#tls:
|
|
||||||
# secretNames:
|
|
||||||
# - my-tls-secret-name
|
|
||||||
service:
|
|
||||||
type: ClusterIP
|
|
||||||
|
|
||||||
ingress:
|
|
||||||
enable: true
|
|
||||||
className: nginx
|
|
||||||
host: coder.edp.t09.de
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
tls:
|
|
||||||
enable: true
|
|
||||||
secretName: coder-tls-secret
|
|
||||||
|
|
@ -1,35 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: argocd
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
sources:
|
|
||||||
- repoURL: https://github.com/argoproj/argo-helm.git
|
|
||||||
path: charts/argo-cd
|
|
||||||
# TODO: RIRE Can be updated when https://github.com/argoproj/argo-cd/issues/20790 is fixed and merged
|
|
||||||
# As logout make problems, it is suggested to switch from path based routing to an own argocd domain,
|
|
||||||
# similar to the CNOE amazon reference implementation and in our case, Forgejo
|
|
||||||
targetRevision: argo-cd-9.1.5
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/core/argocd/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/core/argocd/manifests"
|
|
||||||
|
|
@ -1,27 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
nginx.ingress.kubernetes.io/backend-protocol: HTTP
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
|
|
||||||
name: argocd-server
|
|
||||||
namespace: argocd
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: argocd.edp.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: argocd-server
|
|
||||||
port:
|
|
||||||
number: 80
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- argocd.edp.t09.de
|
|
||||||
secretName: argocd-net-tls
|
|
||||||
|
|
@ -1,42 +0,0 @@
|
||||||
global:
|
|
||||||
domain: argocd.edp.t09.de
|
|
||||||
|
|
||||||
configs:
|
|
||||||
params:
|
|
||||||
server.insecure: true
|
|
||||||
cm:
|
|
||||||
oidc.config: |
|
|
||||||
name: FORGEJO
|
|
||||||
issuer: https://dex.edp.t09.de
|
|
||||||
clientID: controller-argocd-dex
|
|
||||||
clientSecret: $dex-argo-client:clientSecret
|
|
||||||
requestedScopes:
|
|
||||||
- openid
|
|
||||||
- profile
|
|
||||||
- email
|
|
||||||
- groups
|
|
||||||
application.resourceTrackingMethod: annotation
|
|
||||||
timeout.reconciliation: 60s
|
|
||||||
resource.exclusions: |
|
|
||||||
- apiGroups:
|
|
||||||
- "*"
|
|
||||||
kinds:
|
|
||||||
- ProviderConfigUsage
|
|
||||||
- apiGroups:
|
|
||||||
- cilium.io
|
|
||||||
kinds:
|
|
||||||
- CiliumIdentity
|
|
||||||
clusters:
|
|
||||||
- "*"
|
|
||||||
url: https://argocd.edp.t09.de
|
|
||||||
rbac:
|
|
||||||
policy.csv: 'g, DevFW, role:admin'
|
|
||||||
|
|
||||||
tls:
|
|
||||||
certificates:
|
|
||||||
|
|
||||||
notifications:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
dex:
|
|
||||||
enabled: false
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: cloudnative-pg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
- ServerSideApply=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: cloudnative-pg
|
|
||||||
sources:
|
|
||||||
- repoURL: https://cloudnative-pg.github.io/charts
|
|
||||||
chart: cloudnative-pg
|
|
||||||
targetRevision: 0.26.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/core/cloudnative-pg/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
# No need for values here.
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: dex
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: dex
|
|
||||||
sources:
|
|
||||||
- repoURL: https://charts.dexidp.io
|
|
||||||
chart: dex
|
|
||||||
targetRevision: 0.23.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/core/dex/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,76 +0,0 @@
|
||||||
ingress:
|
|
||||||
enabled: true
|
|
||||||
className: nginx
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
hosts:
|
|
||||||
- host: dex.edp.t09.de
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- dex.edp.t09.de
|
|
||||||
secretName: dex-cert
|
|
||||||
|
|
||||||
envVars:
|
|
||||||
- name: FORGEJO_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-forgejo-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: FORGEJO_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-forgejo-client
|
|
||||||
key: clientID
|
|
||||||
- name: OIDC_DEX_GRAFANA_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-grafana-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: OIDC_DEX_ARGO_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-argo-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: LOG_LEVEL
|
|
||||||
value: debug
|
|
||||||
|
|
||||||
config:
|
|
||||||
# Set it to a valid URL
|
|
||||||
issuer: https://dex.edp.t09.de
|
|
||||||
|
|
||||||
# See https://dexidp.io/docs/storage/ for more options
|
|
||||||
storage:
|
|
||||||
type: memory
|
|
||||||
|
|
||||||
oauth2:
|
|
||||||
skipApprovalScreen: true
|
|
||||||
alwaysShowLoginScreen: false
|
|
||||||
|
|
||||||
connectors:
|
|
||||||
- type: gitea
|
|
||||||
id: gitea
|
|
||||||
name: Forgejo
|
|
||||||
config:
|
|
||||||
clientID: "$FORGEJO_CLIENT_ID"
|
|
||||||
clientSecret: "$FORGEJO_CLIENT_SECRET"
|
|
||||||
redirectURI: https://dex.edp.t09.de/callback
|
|
||||||
baseURL: https://edp.buildth.ing
|
|
||||||
# loadAllGroups: true
|
|
||||||
orgs:
|
|
||||||
- name: DevFW
|
|
||||||
enablePasswordDB: false
|
|
||||||
|
|
||||||
staticClients:
|
|
||||||
- id: controller-argocd-dex
|
|
||||||
name: ArgoCD Client
|
|
||||||
redirectURIs:
|
|
||||||
- "https://argocd.edp.t09.de/auth/callback"
|
|
||||||
secretEnv: "OIDC_DEX_ARGO_CLIENT_SECRET"
|
|
||||||
- id: grafana
|
|
||||||
redirectURIs:
|
|
||||||
- "https://grafana.edp.t09.de/login/generic_oauth"
|
|
||||||
name: "Grafana"
|
|
||||||
secretEnv: "OIDC_DEX_GRAFANA_CLIENT_SECRET"
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: forgejo-runner
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
server: "https://kubernetes.default.svc"
|
|
||||||
source:
|
|
||||||
repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/forgejo/forgejo-runner"
|
|
||||||
|
|
@ -1,104 +0,0 @@
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: forgejo-runner
|
|
||||||
name: forgejo-runner
|
|
||||||
namespace: gitea
|
|
||||||
spec:
|
|
||||||
# Two replicas means that if one is busy, the other can pick up jobs.
|
|
||||||
replicas: 3
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: forgejo-runner
|
|
||||||
strategy: {}
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
labels:
|
|
||||||
app: forgejo-runner
|
|
||||||
spec:
|
|
||||||
restartPolicy: Always
|
|
||||||
volumes:
|
|
||||||
- name: docker-certs
|
|
||||||
emptyDir: {}
|
|
||||||
- name: runner-data
|
|
||||||
emptyDir: {}
|
|
||||||
# Initialise our configuration file using offline registration
|
|
||||||
# https://forgejo.org/docs/v1.21/admin/actions/#offline-registration
|
|
||||||
initContainers:
|
|
||||||
- name: runner-register
|
|
||||||
image: code.forgejo.org/forgejo/runner:6.4.0
|
|
||||||
command:
|
|
||||||
- "sh"
|
|
||||||
- "-c"
|
|
||||||
- |
|
|
||||||
forgejo-runner \
|
|
||||||
register \
|
|
||||||
--no-interactive \
|
|
||||||
--token ${RUNNER_SECRET} \
|
|
||||||
--name ${RUNNER_NAME} \
|
|
||||||
--instance ${FORGEJO_INSTANCE_URL} \
|
|
||||||
--labels docker:docker://node:20-bookworm,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
env:
|
|
||||||
- name: RUNNER_NAME
|
|
||||||
valueFrom:
|
|
||||||
fieldRef:
|
|
||||||
fieldPath: metadata.name
|
|
||||||
- name: RUNNER_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-runner-token
|
|
||||||
key: token
|
|
||||||
- name: FORGEJO_INSTANCE_URL
|
|
||||||
value: https://edp.t09.de
|
|
||||||
volumeMounts:
|
|
||||||
- name: runner-data
|
|
||||||
mountPath: /data
|
|
||||||
containers:
|
|
||||||
- name: runner
|
|
||||||
image: code.forgejo.org/forgejo/runner:6.4.0
|
|
||||||
command:
|
|
||||||
- "sh"
|
|
||||||
- "-c"
|
|
||||||
- |
|
|
||||||
while ! nc -z 127.0.0.1 2376 </dev/null; do
|
|
||||||
echo 'waiting for docker daemon...';
|
|
||||||
sleep 5;
|
|
||||||
done
|
|
||||||
forgejo-runner generate-config > config.yml ;
|
|
||||||
sed -i -e "s|privileged: .*|privileged: true|" config.yml
|
|
||||||
sed -i -e "s|network: .*|network: host|" config.yml ;
|
|
||||||
sed -i -e "s|^ envs:$$| envs:\n DOCKER_HOST: tcp://127.0.0.1:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client|" config.yml ;
|
|
||||||
sed -i -e "s|^ options:| options: -v /certs/client:/certs/client|" config.yml ;
|
|
||||||
sed -i -e "s| valid_volumes: \[\]$$| valid_volumes:\n - /certs/client|" config.yml ;
|
|
||||||
/bin/forgejo-runner --config config.yml daemon
|
|
||||||
securityContext:
|
|
||||||
allowPrivilegeEscalation: true
|
|
||||||
privileged: true
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
runAsGroup: 0
|
|
||||||
runAsNonRoot: false
|
|
||||||
runAsUser: 0
|
|
||||||
env:
|
|
||||||
- name: DOCKER_HOST
|
|
||||||
value: tcp://localhost:2376
|
|
||||||
- name: DOCKER_CERT_PATH
|
|
||||||
value: /certs/client
|
|
||||||
- name: DOCKER_TLS_VERIFY
|
|
||||||
value: "1"
|
|
||||||
volumeMounts:
|
|
||||||
- name: docker-certs
|
|
||||||
mountPath: /certs
|
|
||||||
- name: runner-data
|
|
||||||
mountPath: /data
|
|
||||||
- name: daemon
|
|
||||||
image: docker:28.0.4-dind
|
|
||||||
env:
|
|
||||||
- name: DOCKER_TLS_CERTDIR
|
|
||||||
value: /certs
|
|
||||||
securityContext:
|
|
||||||
privileged: true
|
|
||||||
volumeMounts:
|
|
||||||
- name: docker-certs
|
|
||||||
mountPath: /certs
|
|
||||||
|
|
@ -1,32 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: forgejo-server
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: gitea
|
|
||||||
sources:
|
|
||||||
- repoURL: https://code.forgejo.org/forgejo-helm/forgejo-helm.git
|
|
||||||
path: .
|
|
||||||
targetRevision: v12.0.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/forgejo/forgejo-server/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/forgejo/forgejo-server/manifests"
|
|
||||||
|
|
@ -1,27 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
nginx.ingress.kubernetes.io/proxy-body-size: 512m
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
|
|
||||||
name: forgejo-server
|
|
||||||
namespace: gitea
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: edp.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: forgejo-server-http
|
|
||||||
port:
|
|
||||||
number: 3000
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- edp.t09.de
|
|
||||||
secretName: forgejo-net-tls
|
|
||||||
|
|
@ -1,91 +0,0 @@
|
||||||
apiVersion: batch/v1
|
|
||||||
kind: CronJob
|
|
||||||
metadata:
|
|
||||||
name: forgejo-s3-backup
|
|
||||||
namespace: gitea
|
|
||||||
spec:
|
|
||||||
schedule: "0 1 * * *"
|
|
||||||
concurrencyPolicy: "Forbid"
|
|
||||||
successfulJobsHistoryLimit: 5
|
|
||||||
failedJobsHistoryLimit: 5
|
|
||||||
startingDeadlineSeconds: 600 # 10 minutes
|
|
||||||
jobTemplate:
|
|
||||||
spec:
|
|
||||||
# 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
|
|
||||||
activeDeadlineSeconds: 1350
|
|
||||||
backoffLimit: 2
|
|
||||||
ttlSecondsAfterFinished: 259200 #
|
|
||||||
template:
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: rclone
|
|
||||||
image: rclone/rclone:1.70
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
env:
|
|
||||||
- name: SOURCE_BUCKET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: bucket-name
|
|
||||||
- name: AWS_ACCESS_KEY_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: access-key
|
|
||||||
- name: AWS_SECRET_ACCESS_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: secret-key
|
|
||||||
volumeMounts:
|
|
||||||
- name: rclone-config
|
|
||||||
mountPath: /config/rclone
|
|
||||||
readOnly: true
|
|
||||||
- name: backup-dir
|
|
||||||
mountPath: /backup
|
|
||||||
readOnly: false
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- |
|
|
||||||
rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
|
|
||||||
restartPolicy: OnFailure
|
|
||||||
volumes:
|
|
||||||
- name: rclone-config
|
|
||||||
secret:
|
|
||||||
secretName: forgejo-s3-backup
|
|
||||||
- name: backup-dir
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: s3-backup
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: s3-backup
|
|
||||||
namespace: gitea
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
everest.io/crypt-key-id: d4d60877-cb5b-4c01-90a9-9de4a2a9ff6d
|
|
||||||
spec:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 100Gi
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: forgejo-s3-backup
|
|
||||||
namespace: gitea
|
|
||||||
type: Opaque
|
|
||||||
stringData:
|
|
||||||
rclone.conf: |
|
|
||||||
[source]
|
|
||||||
type = s3
|
|
||||||
provider = HuaweiOBS
|
|
||||||
env_auth = true
|
|
||||||
endpoint = obs.eu-de.otc.t-systems.com
|
|
||||||
region = eu-de
|
|
||||||
acl = private
|
|
||||||
|
|
@ -1,191 +0,0 @@
|
||||||
# This is only used for deploying older versions of infra-catalogue where the bucket name is not an output of the terragrunt modules# We use recreate to make sure only one instance with one version is running, because Forgejo might break or data gets inconsistant.
|
|
||||||
strategy:
|
|
||||||
type: Recreate
|
|
||||||
|
|
||||||
redis-cluster:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
redis:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
postgresql:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
postgresql-ha:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
persistence:
|
|
||||||
enabled: true
|
|
||||||
size: 200Gi
|
|
||||||
storageClass: csi-disk
|
|
||||||
annotations:
|
|
||||||
everest.io/crypt-key-id: d4d60877-cb5b-4c01-90a9-9de4a2a9ff6d
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
|
|
||||||
test:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
deployment:
|
|
||||||
env:
|
|
||||||
- name: SSL_CERT_DIR
|
|
||||||
value: /etc/ssl/forgejo
|
|
||||||
|
|
||||||
extraVolumeMounts:
|
|
||||||
- mountPath: /etc/ssl/forgejo
|
|
||||||
name: custom-database-certs-volume
|
|
||||||
readOnly: true
|
|
||||||
|
|
||||||
extraVolumes:
|
|
||||||
- name: custom-database-certs-volume
|
|
||||||
secret:
|
|
||||||
secretName: custom-database-certs
|
|
||||||
|
|
||||||
gitea:
|
|
||||||
metrics:
|
|
||||||
enabled: true
|
|
||||||
serviceMonitor:
|
|
||||||
enabled: true
|
|
||||||
additionalConfigFromEnvs:
|
|
||||||
- name: FORGEJO__storage__MINIO_ACCESS_KEY_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: access-key
|
|
||||||
- name: FORGEJO__storage__MINIO_SECRET_ACCESS_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: secret-key
|
|
||||||
- name: FORGEJO__queue__CONN_STR
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: redis-forgejo-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__session__PROVIDER_CONFIG
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: redis-forgejo-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__cache__HOST
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: redis-forgejo-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__database__HOST
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: host_port
|
|
||||||
- name: FORGEJO__database__NAME
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: database
|
|
||||||
- name: FORGEJO__database__USER
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: username
|
|
||||||
- name: FORGEJO__database__PASSWD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: password
|
|
||||||
# Either 'elasticsearch' or 'bleve' (go in memory search engine)
|
|
||||||
- name: FORGEJO__indexer__ISSUE_INDEXER_TYPE
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: elasticsearch-cloud-credentials
|
|
||||||
key: type
|
|
||||||
- name: FORGEJO__indexer__ISSUE_INDEXER_CONN_STR
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: elasticsearch-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__indexer__ISSUE_INDEXER_ENABLED
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: elasticsearch-cloud-credentials
|
|
||||||
key: enabled
|
|
||||||
- name: FORGEJO__mailer__PASSWD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: email-user-credentials
|
|
||||||
key: connection-string
|
|
||||||
|
|
||||||
admin:
|
|
||||||
existingSecret: gitea-credential
|
|
||||||
|
|
||||||
config:
|
|
||||||
APP_NAME: 'EDP'
|
|
||||||
APP_SLOGAN: 'Build your thing in minutes'
|
|
||||||
storage:
|
|
||||||
MINIO_ENDPOINT: obs.eu-de.otc.t-systems.com:443
|
|
||||||
STORAGE_TYPE: minio
|
|
||||||
MINIO_LOCATION: eu-de
|
|
||||||
MINIO_BUCKET: "edp-forgejo-prod-edp"
|
|
||||||
MINIO_USE_SSL: true
|
|
||||||
|
|
||||||
queue:
|
|
||||||
TYPE: redis
|
|
||||||
|
|
||||||
session:
|
|
||||||
PROVIDER: redis
|
|
||||||
|
|
||||||
cache:
|
|
||||||
ENABLED: true
|
|
||||||
ADAPTER: redis
|
|
||||||
|
|
||||||
service:
|
|
||||||
DISABLE_REGISTRATION: true
|
|
||||||
ENABLE_NOTIFY_MAIL: true
|
|
||||||
|
|
||||||
other:
|
|
||||||
SHOW_FOOTER_VERSION: false
|
|
||||||
SHOW_FOOTER_TEMPLATE_LOAD_TIME: false
|
|
||||||
|
|
||||||
database:
|
|
||||||
DB_TYPE: postgres
|
|
||||||
SSL_MODE: verify-ca
|
|
||||||
|
|
||||||
server:
|
|
||||||
DOMAIN: 'edp.t09.de'
|
|
||||||
ROOT_URL: 'https://edp.t09.de:443'
|
|
||||||
|
|
||||||
mailer:
|
|
||||||
ENABLED: true
|
|
||||||
USER: ipcei-cis-devfw@mms-support.de
|
|
||||||
PROTOCOL: smtps
|
|
||||||
FROM: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>'
|
|
||||||
SMTP_ADDR: mail.mms-support.de
|
|
||||||
SMTP_PORT: 465
|
|
||||||
|
|
||||||
service:
|
|
||||||
ssh:
|
|
||||||
type: LoadBalancer
|
|
||||||
nodePort: 32222
|
|
||||||
externalTrafficPolicy: Cluster
|
|
||||||
annotations:
|
|
||||||
kubernetes.io/elb.id: 83885190-d657-4524-a835-ad3a9e2f5bf8
|
|
||||||
|
|
||||||
image:
|
|
||||||
pullPolicy: "IfNotPresent"
|
|
||||||
# Overrides the image tag whose default is the chart appVersion.
|
|
||||||
#tag: "8.0.3"
|
|
||||||
# Adds -rootless suffix to image name
|
|
||||||
# rootless: true
|
|
||||||
fullOverride: edp.buildth.ing/devfw-cicd/edp-forgejo:v11.0.3-edp1
|
|
||||||
|
|
||||||
forgejo:
|
|
||||||
runner:
|
|
||||||
enabled: true
|
|
||||||
image:
|
|
||||||
tag: latest
|
|
||||||
# replicas: 3
|
|
||||||
config:
|
|
||||||
runner:
|
|
||||||
labels:
|
|
||||||
- docker:docker://node:16-bullseye
|
|
||||||
- self-hosted:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
- ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
- ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: garm
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: garm
|
|
||||||
sources:
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/garm-helm
|
|
||||||
path: charts/garm
|
|
||||||
targetRevision: v0.0.6
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/garm/garm/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,36 +0,0 @@
|
||||||
ingress:
|
|
||||||
enabled: true
|
|
||||||
className: nginx
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
nginx.ingress.kubernetes.io/backend-protocol: HTTP
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
hosts:
|
|
||||||
- host: garm.edp.t09.de
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- secretName: garm-net-tls
|
|
||||||
hosts:
|
|
||||||
- garm.edp.t09.de
|
|
||||||
|
|
||||||
# Credentials and Secrets
|
|
||||||
credentials:
|
|
||||||
edgeConnect:
|
|
||||||
existingSecretName: "edge-credential"
|
|
||||||
gitea:
|
|
||||||
url: "https://edp.t09.de" # Required
|
|
||||||
|
|
||||||
providerConfig:
|
|
||||||
edgeConnect:
|
|
||||||
organization: edp2
|
|
||||||
region: EU
|
|
||||||
edgeConnectUrl: "https://hub.apps.edge.platform.mg3.mdb.osc.live"
|
|
||||||
cloudlet:
|
|
||||||
name: Hamburg
|
|
||||||
organization: TelekomOP
|
|
||||||
|
|
||||||
garm:
|
|
||||||
logging:
|
|
||||||
logLevel: info
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: garm
|
|
||||||
source:
|
|
||||||
repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/garm/optimiser-receiver"
|
|
||||||
|
|
@ -1,93 +0,0 @@
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: receiver
|
|
||||||
image: edp.buildth.ing/devfw-cicd/forgejo-runner-optimiser-receiver:0.0.3
|
|
||||||
args:
|
|
||||||
- --db=/data/metrics.db
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
containerPort: 8080
|
|
||||||
protocol: TCP
|
|
||||||
env:
|
|
||||||
- name: RECEIVER_READ_TOKEN
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: optimiser-tokens
|
|
||||||
key: read-token
|
|
||||||
- name: RECEIVER_HMAC_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: optimiser-tokens
|
|
||||||
key: hmac-key
|
|
||||||
volumeMounts:
|
|
||||||
- name: data
|
|
||||||
mountPath: /data
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /health
|
|
||||||
port: http
|
|
||||||
initialDelaySeconds: 5
|
|
||||||
periodSeconds: 30
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /health
|
|
||||||
port: http
|
|
||||||
initialDelaySeconds: 2
|
|
||||||
periodSeconds: 10
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 50m
|
|
||||||
memory: 64Mi
|
|
||||||
limits:
|
|
||||||
cpu: 200m
|
|
||||||
memory: 128Mi
|
|
||||||
volumes:
|
|
||||||
- name: data
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: optimiser-receiver-data
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: optimiser-receiver
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
port: 8080
|
|
||||||
targetPort: http
|
|
||||||
protocol: TCP
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver-data
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
spec:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 1Gi
|
|
||||||
|
|
@ -1,26 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
|
|
||||||
name: optimiser-receiver
|
|
||||||
namespace: garm
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: optimiser.edp.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: optimiser-receiver
|
|
||||||
port:
|
|
||||||
number: 8080
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- optimiser.edp.t09.de
|
|
||||||
secretName: optimiser-receiver-tls
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: metrics-server
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: metrics-server
|
|
||||||
repoURL: https://kubernetes-sigs.github.io/metrics-server/
|
|
||||||
targetRevision: 3.12.2
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/observability-client/metrics-server/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
metrics:
|
|
||||||
enabled: true
|
|
||||||
serviceMonitor:
|
|
||||||
enabled: true
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: vector
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: vector
|
|
||||||
repoURL: https://helm.vector.dev
|
|
||||||
targetRevision: 0.43.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/observability-client/vector/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,68 +0,0 @@
|
||||||
# -- Enable deployment of vector
|
|
||||||
role: Agent
|
|
||||||
dataDir: /vector-data-dir
|
|
||||||
resources: {}
|
|
||||||
args:
|
|
||||||
- -w
|
|
||||||
- --config-dir
|
|
||||||
- /etc/vector/
|
|
||||||
env:
|
|
||||||
- name: VECTOR_USER
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: simple-user-secret
|
|
||||||
key: username
|
|
||||||
- name: VECTOR_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: simple-user-secret
|
|
||||||
key: password
|
|
||||||
containerPorts:
|
|
||||||
- name: prom-exporter
|
|
||||||
containerPort: 9090
|
|
||||||
protocol: TCP
|
|
||||||
service:
|
|
||||||
enabled: false
|
|
||||||
customConfig:
|
|
||||||
data_dir: /vector-data-dir
|
|
||||||
api:
|
|
||||||
enabled: false
|
|
||||||
address: 0.0.0.0:8686
|
|
||||||
playground: true
|
|
||||||
sources:
|
|
||||||
k8s:
|
|
||||||
type: kubernetes_logs
|
|
||||||
internal_metrics:
|
|
||||||
type: internal_metrics
|
|
||||||
transforms:
|
|
||||||
parser:
|
|
||||||
type: remap
|
|
||||||
inputs: [k8s]
|
|
||||||
source: |
|
|
||||||
._msg = parse_json(.message) ?? .message
|
|
||||||
del(.message)
|
|
||||||
# Add the cluster environment to the log event
|
|
||||||
.cluster_environment = "dev"
|
|
||||||
sinks:
|
|
||||||
vlogs:
|
|
||||||
type: elasticsearch
|
|
||||||
inputs: [parser]
|
|
||||||
endpoints:
|
|
||||||
- https://o12y.observability./insert/elasticsearch/
|
|
||||||
auth:
|
|
||||||
strategy: basic
|
|
||||||
user: ${VECTOR_USER}
|
|
||||||
password: ${VECTOR_PASSWORD}
|
|
||||||
mode: bulk
|
|
||||||
api_version: v8
|
|
||||||
compression: gzip
|
|
||||||
healthcheck:
|
|
||||||
enabled: false
|
|
||||||
request:
|
|
||||||
headers:
|
|
||||||
AccountID: "0"
|
|
||||||
ProjectID: "0"
|
|
||||||
query:
|
|
||||||
_msg_field: _msg
|
|
||||||
_time_field: _time
|
|
||||||
_stream_fields: cluster_environment,kubernetes.container_name,kubernetes.namespace
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: vm-client
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: victoria-metrics-k8s-stack
|
|
||||||
repoURL: https://victoriametrics.github.io/helm-charts/
|
|
||||||
targetRevision: 0.48.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/observability-client/vm-client-stack/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/observability-client/vm-client-stack/manifests"
|
|
||||||
File diff suppressed because it is too large
Load diff
|
|
@ -1,25 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: grafana-operator
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
- ServerSideApply=true
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: grafana-operator
|
|
||||||
repoURL: ghcr.io/grafana/helm-charts
|
|
||||||
targetRevision: v5.18.0
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/observability/grafana-operator/manifests"
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: GrafanaDashboard
|
|
||||||
metadata:
|
|
||||||
name: argocd
|
|
||||||
spec:
|
|
||||||
instanceSelector:
|
|
||||||
matchLabels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
url: "https://raw.githubusercontent.com/argoproj/argo-cd/refs/heads/master/examples/dashboard.json"
|
|
||||||
|
|
@ -1,75 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: Grafana
|
|
||||||
metadata:
|
|
||||||
name: grafana
|
|
||||||
labels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
spec:
|
|
||||||
persistentVolumeClaim:
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
everest.io/crypt-key-id: d4d60877-cb5b-4c01-90a9-9de4a2a9ff6d
|
|
||||||
spec:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 10Gi
|
|
||||||
deployment:
|
|
||||||
spec:
|
|
||||||
template:
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: grafana
|
|
||||||
env:
|
|
||||||
- name: OAUTH_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
key: clientSecret
|
|
||||||
name: dex-grafana-client
|
|
||||||
config:
|
|
||||||
log.console:
|
|
||||||
level: debug
|
|
||||||
server:
|
|
||||||
root_url: "https://grafana.edp.t09.de"
|
|
||||||
auth:
|
|
||||||
disable_login: "true"
|
|
||||||
disable_login_form: "true"
|
|
||||||
auth.generic_oauth:
|
|
||||||
enabled: "true"
|
|
||||||
name: Forgejo
|
|
||||||
allow_sign_up: "true"
|
|
||||||
use_refresh_token: "true"
|
|
||||||
client_id: grafana
|
|
||||||
client_secret: $__env{OAUTH_CLIENT_SECRET}
|
|
||||||
scopes: openid email profile offline_access groups
|
|
||||||
auth_url: https://dex.edp.t09.de/auth
|
|
||||||
token_url: https://dex.edp.t09.de/token
|
|
||||||
api_url: https://dex.edp.t09.de/userinfo
|
|
||||||
redirect_uri: https://grafana.edp.t09.de/login/generic_oauth
|
|
||||||
role_attribute_path: "contains(groups[*], 'DevFW') && 'GrafanaAdmin' || 'None'"
|
|
||||||
allow_assign_grafana_admin: "true"
|
|
||||||
ingress:
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: grafana.edp.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: grafana-service
|
|
||||||
port:
|
|
||||||
number: 3000
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- grafana.edp.t09.de
|
|
||||||
secretName: grafana-net-tls
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: GrafanaDashboard
|
|
||||||
metadata:
|
|
||||||
name: ingress-nginx
|
|
||||||
spec:
|
|
||||||
instanceSelector:
|
|
||||||
matchLabels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
url: "https://raw.githubusercontent.com/adinhodovic/ingress-nginx-mixin/refs/heads/main/dashboards_out/ingress-nginx-overview.json"
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: GrafanaDashboard
|
|
||||||
metadata:
|
|
||||||
name: victoria-logs
|
|
||||||
spec:
|
|
||||||
instanceSelector:
|
|
||||||
matchLabels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
url: "https://raw.githubusercontent.com/VictoriaMetrics/VictoriaMetrics/refs/heads/master/dashboards/vm/victorialogs.json"
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: o12y
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
- ServerSideApply=true
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: victoria-metrics-k8s-stack
|
|
||||||
repoURL: https://victoriametrics.github.io/helm-charts/
|
|
||||||
targetRevision: 0.48.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/observability/victoria-k8s-stack/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/observability/victoria-k8s-stack/manifests"
|
|
||||||
|
|
@ -1,40 +0,0 @@
|
||||||
apiVersion: operator.victoriametrics.com/v1beta1
|
|
||||||
kind: VMRule
|
|
||||||
metadata:
|
|
||||||
name: forgejo-alerts
|
|
||||||
namespace: observability
|
|
||||||
spec:
|
|
||||||
groups:
|
|
||||||
- name: forgejo
|
|
||||||
rules:
|
|
||||||
- alert: forgejo down
|
|
||||||
expr: sum by(cluster_environment) (up{pod=~"forgejo-server-.*"}) < 1
|
|
||||||
for: 30s
|
|
||||||
labels:
|
|
||||||
severity: critical
|
|
||||||
job: "{{ $labels.job }}"
|
|
||||||
annotations:
|
|
||||||
value: "{{ $value }}"
|
|
||||||
description: 'forgejo is down in cluster environment {{ $labels.cluster_environment }}'
|
|
||||||
- name: forgejo-backup
|
|
||||||
rules:
|
|
||||||
- alert: forgejo s3 backup job failed
|
|
||||||
expr: max by(cluster_environment) (kube_job_status_failed{job_name=~"forgejo-s3-backup-.*"}) != 0
|
|
||||||
for: 30s
|
|
||||||
labels:
|
|
||||||
severity: critical
|
|
||||||
job: "{{ $labels.job }}"
|
|
||||||
annotations:
|
|
||||||
value: "{{ $value }}"
|
|
||||||
description: 'forgejo s3 backup job failed in cluster environment {{ $labels.cluster_environment }}'
|
|
||||||
- name: disk-consumption-high
|
|
||||||
rules:
|
|
||||||
- alert: disk consumption high
|
|
||||||
expr: 1-(kubelet_volume_stats_available_bytes / kubelet_volume_stats_capacity_bytes) > 0.6
|
|
||||||
for: 30s
|
|
||||||
labels:
|
|
||||||
severity: major
|
|
||||||
job: "{{ $labels.job }}"
|
|
||||||
annotations:
|
|
||||||
value: "{{ $value }}"
|
|
||||||
description: 'disk consumption of pvc {{ $labels.namespace }}/{{ $labels.persistentvolumeclaim }} is high in cluster environment {{ $labels.cluster_environment }}'
|
|
||||||
|
|
@ -1,26 +0,0 @@
|
||||||
apiVersion: operator.victoriametrics.com/v1beta1
|
|
||||||
kind: VLogs
|
|
||||||
metadata:
|
|
||||||
name: victorialogs
|
|
||||||
namespace: observability
|
|
||||||
spec:
|
|
||||||
retentionPeriod: "12"
|
|
||||||
removePvcAfterDelete: true
|
|
||||||
storageMetadata:
|
|
||||||
annotations:
|
|
||||||
everest.io/crypt-key-id: d4d60877-cb5b-4c01-90a9-9de4a2a9ff6d
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
storage:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 50Gi
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
memory: 500Mi
|
|
||||||
cpu: 500m
|
|
||||||
limits:
|
|
||||||
memory: 10Gi
|
|
||||||
cpu: 2
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
apiVersion: operator.victoriametrics.com/v1beta1
|
|
||||||
kind: VMUser
|
|
||||||
metadata:
|
|
||||||
name: simple-user
|
|
||||||
namespace: observability
|
|
||||||
spec:
|
|
||||||
username: simple-user
|
|
||||||
passwordRef:
|
|
||||||
key: password
|
|
||||||
name: simple-user-secret
|
|
||||||
targetRefs:
|
|
||||||
- static:
|
|
||||||
url: http://vmsingle-o12y:8429
|
|
||||||
paths: ["/api/v1/write"]
|
|
||||||
- static:
|
|
||||||
url: http://vlogs-victorialogs:9428
|
|
||||||
paths: ["/insert/elasticsearch/.*"]
|
|
||||||
File diff suppressed because it is too large
Load diff
|
|
@ -1,14 +0,0 @@
|
||||||
apiVersion: cert-manager.io/v1
|
|
||||||
kind: ClusterIssuer
|
|
||||||
metadata:
|
|
||||||
name: main
|
|
||||||
spec:
|
|
||||||
acme:
|
|
||||||
email: admin@think-ahead.tech
|
|
||||||
server: https://acme-v02.api.letsencrypt.org/directory
|
|
||||||
privateKeySecretRef:
|
|
||||||
name: cluster-issuer-account-key
|
|
||||||
solvers:
|
|
||||||
- http01:
|
|
||||||
ingress:
|
|
||||||
ingressClassName: nginx
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
crds:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
replicaCount: 1
|
|
||||||
|
|
@ -1,32 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: cert-manager
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: cert-manager
|
|
||||||
sources:
|
|
||||||
- chart: cert-manager
|
|
||||||
repoURL: https://charts.jetstack.io
|
|
||||||
targetRevision: v1.17.2
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/otc/cert-manager/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/otc/cert-manager/manifests"
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: ingress-nginx
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: ingress-nginx
|
|
||||||
sources:
|
|
||||||
- repoURL: https://github.com/kubernetes/ingress-nginx.git
|
|
||||||
path: charts/ingress-nginx
|
|
||||||
targetRevision: helm-chart-4.12.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/otc/ingress-nginx/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
controller:
|
|
||||||
updateStrategy:
|
|
||||||
type: RollingUpdate
|
|
||||||
rollingUpdate:
|
|
||||||
maxUnavailable: 1
|
|
||||||
|
|
||||||
service:
|
|
||||||
annotations:
|
|
||||||
kubernetes.io/elb.class: union
|
|
||||||
kubernetes.io/elb.port: '80'
|
|
||||||
kubernetes.io/elb.id: 83885190-d657-4524-a835-ad3a9e2f5bf8
|
|
||||||
kubernetes.io/elb.ip: 80.158.88.195
|
|
||||||
|
|
||||||
ingressClassResource:
|
|
||||||
name: nginx
|
|
||||||
|
|
||||||
# added for idpbuilder
|
|
||||||
allowSnippetAnnotations: true
|
|
||||||
|
|
||||||
# added for idpbuilder
|
|
||||||
config:
|
|
||||||
proxy-buffer-size: 32k
|
|
||||||
use-forwarded-headers: "true"
|
|
||||||
|
|
||||||
# monitoring nginx
|
|
||||||
metrics:
|
|
||||||
enabled: true
|
|
||||||
serviceMonitor:
|
|
||||||
additionalLabels:
|
|
||||||
release: "ingress-nginx"
|
|
||||||
enabled: true
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: storageclass
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
example: otc
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
namespace: default
|
|
||||||
server: "https://kubernetes.default.svc"
|
|
||||||
source:
|
|
||||||
repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/edp.t09.de/stacks/otc/storageclass"
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
apiVersion: storage.k8s.io/v1
|
|
||||||
kind: StorageClass
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
storageclass.beta.kubernetes.io/is-default-class: "true"
|
|
||||||
labels:
|
|
||||||
kubernetes.io/cluster-service: "true"
|
|
||||||
name: default
|
|
||||||
parameters:
|
|
||||||
kubernetes.io/description: ""
|
|
||||||
kubernetes.io/hw:passthrough: "true"
|
|
||||||
kubernetes.io/storagetype: BS
|
|
||||||
kubernetes.io/volumetype: SATA
|
|
||||||
kubernetes.io/zone: eu-de-02
|
|
||||||
provisioner: flexvolume-huawei.com/fuxivol
|
|
||||||
reclaimPolicy: Delete
|
|
||||||
volumeBindingMode: Immediate
|
|
||||||
allowVolumeExpansion: true
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
# helm upgrade --install --create-namespace --namespace terralist terralist oci://ghcr.io/terralist/helm-charts/terralist -f terralist-values.yaml
|
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: terralist
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: terralist
|
|
||||||
sources:
|
|
||||||
- repoURL: https://github.com/terralist/helm-charts
|
|
||||||
path: charts/terralist
|
|
||||||
targetRevision: terralist-0.8.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/edp.t09.de/stacks/terralist/terralist/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,87 +0,0 @@
|
||||||
controllers:
|
|
||||||
main:
|
|
||||||
strategy: Recreate
|
|
||||||
containers:
|
|
||||||
app:
|
|
||||||
env:
|
|
||||||
- name: TERRALIST_OAUTH_PROVIDER
|
|
||||||
value: oidc
|
|
||||||
- name: TERRALIST_OI_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oidc-credentials
|
|
||||||
key: client-id
|
|
||||||
- name: TERRALIST_OI_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oidc-credentials
|
|
||||||
key: client-secret
|
|
||||||
- name: TERRALIST_OI_AUTHORIZE_URL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oidc-credentials
|
|
||||||
key: authorize-url
|
|
||||||
- name: TERRALIST_OI_TOKEN_URL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oidc-credentials
|
|
||||||
key: token-url
|
|
||||||
- name: TERRALIST_OI_USERINFO_URL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oidc-credentials
|
|
||||||
key: userinfo-url
|
|
||||||
- name: TERRALIST_OI_SCOPE
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oidc-credentials
|
|
||||||
key: scope
|
|
||||||
- name: TERRALIST_TOKEN_SIGNING_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: terralist-secret
|
|
||||||
key: token-signing-secret
|
|
||||||
- name: TERRALIST_COOKIE_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: terralist-secret
|
|
||||||
key: cookie-secret
|
|
||||||
- name: TERRALIST_URL
|
|
||||||
value: https://terralist.edp.t09.de
|
|
||||||
- name: TERRALIST_SQLITE_PATH
|
|
||||||
value: /data/db.sqlite
|
|
||||||
- name: TERRALIST_LOCAL_STORE
|
|
||||||
value: /data/modules
|
|
||||||
- name: TERRALIST_PROVIDERS_ANONYMOUS_READ
|
|
||||||
value: "true"
|
|
||||||
|
|
||||||
ingress:
|
|
||||||
main:
|
|
||||||
enabled: true
|
|
||||||
className: nginx
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
hosts:
|
|
||||||
- host: terralist.edp.t09.de
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
service:
|
|
||||||
identifier: main
|
|
||||||
port: http
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- terralist.edp.t09.de
|
|
||||||
secretName: terralist-tls-secret
|
|
||||||
|
|
||||||
persistence:
|
|
||||||
data:
|
|
||||||
enabled: true
|
|
||||||
accessMode: ReadWriteOnce
|
|
||||||
size: 10Gi
|
|
||||||
retain: false
|
|
||||||
storageClass: "csi-disk"
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
globalMounts:
|
|
||||||
- path: /data
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: edfbuilder
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/registry"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: coder-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/coder"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: core
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/core"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: docs-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: argocd-stack
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/website-and-documentation"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: forgejo
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/forgejo"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: garm-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/garm"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: observability-client
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/observability-client"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: observability
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/observability"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: otc
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/otc"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: terralist-reg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
source:
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/terralist"
|
|
||||||
repoURL: "https://edp.buildth.ing/DevFW-CICD/stacks-instances"
|
|
||||||
targetRevision: HEAD
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
|
|
@ -1,32 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: coder
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: coder
|
|
||||||
sources:
|
|
||||||
- repoURL: https://helm.coder.com/v2
|
|
||||||
chart: coder
|
|
||||||
targetRevision: 2.28.3
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/coder/coder/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/coder/coder/manifests"
|
|
||||||
|
|
@ -1,38 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: postgresql.cnpg.io/v1
|
|
||||||
kind: Cluster
|
|
||||||
metadata:
|
|
||||||
name: coder-db
|
|
||||||
namespace: coder
|
|
||||||
spec:
|
|
||||||
instances: 1
|
|
||||||
primaryUpdateStrategy: unsupervised
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
memory: "1Gi"
|
|
||||||
cpu: "1"
|
|
||||||
limits:
|
|
||||||
memory: "1Gi"
|
|
||||||
cpu: "1"
|
|
||||||
managed:
|
|
||||||
roles:
|
|
||||||
- name: coder
|
|
||||||
createdb: true
|
|
||||||
login: true
|
|
||||||
passwordSecret:
|
|
||||||
name: coder-db-user
|
|
||||||
storage:
|
|
||||||
size: 10Gi
|
|
||||||
storageClass: csi-disk
|
|
||||||
---
|
|
||||||
apiVersion: postgresql.cnpg.io/v1
|
|
||||||
kind: Database
|
|
||||||
metadata:
|
|
||||||
name: coder
|
|
||||||
namespace: coder
|
|
||||||
spec:
|
|
||||||
cluster:
|
|
||||||
name: coder-db
|
|
||||||
name: coder
|
|
||||||
owner: coder
|
|
||||||
---
|
|
||||||
|
|
@ -1,61 +0,0 @@
|
||||||
coder:
|
|
||||||
# You can specify any environment variables you'd like to pass to Coder
|
|
||||||
# here. Coder consumes environment variables listed in
|
|
||||||
# `coder server --help`, and these environment variables are also passed
|
|
||||||
# to the workspace provisioner (so you can consume them in your Terraform
|
|
||||||
# templates for auth keys etc.).
|
|
||||||
#
|
|
||||||
# Please keep in mind that you should not set `CODER_HTTP_ADDRESS`,
|
|
||||||
# `CODER_TLS_ENABLE`, `CODER_TLS_CERT_FILE` or `CODER_TLS_KEY_FILE` as
|
|
||||||
# they are already set by the Helm chart and will cause conflicts.
|
|
||||||
env:
|
|
||||||
- name: CODER_ACCESS_URL
|
|
||||||
value: https://coder.garm-provider-test.t09.de
|
|
||||||
- name: CODER_PG_CONNECTION_URL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
# You'll need to create a secret called coder-db-url with your
|
|
||||||
# Postgres connection URL like:
|
|
||||||
# postgres://coder:password@postgres:5432/coder?sslmode=disable
|
|
||||||
name: coder-db-user
|
|
||||||
key: url
|
|
||||||
# For production deployments, we recommend configuring your own GitHub
|
|
||||||
# OAuth2 provider and disabling the default one.
|
|
||||||
- name: CODER_OAUTH2_GITHUB_DEFAULT_PROVIDER_ENABLE
|
|
||||||
value: "false"
|
|
||||||
- name: EDGE_CONNECT_ENDPOINT
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: edge-credential
|
|
||||||
key: endpoint
|
|
||||||
- name: EDGE_CONNECT_USERNAME
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: edge-credential
|
|
||||||
key: username
|
|
||||||
- name: EDGE_CONNECT_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: edge-credential
|
|
||||||
key: password
|
|
||||||
|
|
||||||
# (Optional) For production deployments the access URL should be set.
|
|
||||||
# If you're just trying Coder, access the dashboard via the service IP.
|
|
||||||
# - name: CODER_ACCESS_URL
|
|
||||||
# value: "https://coder.example.com"
|
|
||||||
|
|
||||||
#tls:
|
|
||||||
# secretNames:
|
|
||||||
# - my-tls-secret-name
|
|
||||||
service:
|
|
||||||
type: ClusterIP
|
|
||||||
|
|
||||||
ingress:
|
|
||||||
enable: true
|
|
||||||
className: nginx
|
|
||||||
host: coder.garm-provider-test.t09.de
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
tls:
|
|
||||||
enable: true
|
|
||||||
secretName: coder-tls-secret
|
|
||||||
|
|
@ -1,35 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: argocd
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: argocd
|
|
||||||
sources:
|
|
||||||
- repoURL: https://github.com/argoproj/argo-helm.git
|
|
||||||
path: charts/argo-cd
|
|
||||||
# TODO: RIRE Can be updated when https://github.com/argoproj/argo-cd/issues/20790 is fixed and merged
|
|
||||||
# As logout make problems, it is suggested to switch from path based routing to an own argocd domain,
|
|
||||||
# similar to the CNOE amazon reference implementation and in our case, Forgejo
|
|
||||||
targetRevision: argo-cd-9.1.5
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/core/argocd/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/core/argocd/manifests"
|
|
||||||
|
|
@ -1,27 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
nginx.ingress.kubernetes.io/backend-protocol: HTTP
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
|
|
||||||
name: argocd-server
|
|
||||||
namespace: argocd
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: argocd.garm-provider-test.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: argocd-server
|
|
||||||
port:
|
|
||||||
number: 80
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- argocd.garm-provider-test.t09.de
|
|
||||||
secretName: argocd-net-tls
|
|
||||||
|
|
@ -1,42 +0,0 @@
|
||||||
global:
|
|
||||||
domain: argocd.garm-provider-test.t09.de
|
|
||||||
|
|
||||||
configs:
|
|
||||||
params:
|
|
||||||
server.insecure: true
|
|
||||||
cm:
|
|
||||||
oidc.config: |
|
|
||||||
name: FORGEJO
|
|
||||||
issuer: https://dex.garm-provider-test.t09.de
|
|
||||||
clientID: controller-argocd-dex
|
|
||||||
clientSecret: $dex-argo-client:clientSecret
|
|
||||||
requestedScopes:
|
|
||||||
- openid
|
|
||||||
- profile
|
|
||||||
- email
|
|
||||||
- groups
|
|
||||||
application.resourceTrackingMethod: annotation
|
|
||||||
timeout.reconciliation: 60s
|
|
||||||
resource.exclusions: |
|
|
||||||
- apiGroups:
|
|
||||||
- "*"
|
|
||||||
kinds:
|
|
||||||
- ProviderConfigUsage
|
|
||||||
- apiGroups:
|
|
||||||
- cilium.io
|
|
||||||
kinds:
|
|
||||||
- CiliumIdentity
|
|
||||||
clusters:
|
|
||||||
- "*"
|
|
||||||
url: https://argocd.garm-provider-test.t09.de
|
|
||||||
rbac:
|
|
||||||
policy.csv: 'g, DevFW, role:admin'
|
|
||||||
|
|
||||||
tls:
|
|
||||||
certificates:
|
|
||||||
|
|
||||||
notifications:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
dex:
|
|
||||||
enabled: false
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: cloudnative-pg
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: cloudnative-pg
|
|
||||||
sources:
|
|
||||||
- repoURL: https://cloudnative-pg.github.io/charts
|
|
||||||
chart: cloudnative-pg
|
|
||||||
targetRevision: 0.26.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/core/cloudnative-pg/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
# No need for values here.
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: dex
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: dex
|
|
||||||
sources:
|
|
||||||
- repoURL: https://charts.dexidp.io
|
|
||||||
chart: dex
|
|
||||||
targetRevision: 0.23.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/core/dex/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,76 +0,0 @@
|
||||||
ingress:
|
|
||||||
enabled: true
|
|
||||||
className: nginx
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
hosts:
|
|
||||||
- host: dex.garm-provider-test.t09.de
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- dex.garm-provider-test.t09.de
|
|
||||||
secretName: dex-cert
|
|
||||||
|
|
||||||
envVars:
|
|
||||||
- name: FORGEJO_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-forgejo-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: FORGEJO_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-forgejo-client
|
|
||||||
key: clientID
|
|
||||||
- name: OIDC_DEX_GRAFANA_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-grafana-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: OIDC_DEX_ARGO_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-argo-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: LOG_LEVEL
|
|
||||||
value: debug
|
|
||||||
|
|
||||||
config:
|
|
||||||
# Set it to a valid URL
|
|
||||||
issuer: https://dex.garm-provider-test.t09.de
|
|
||||||
|
|
||||||
# See https://dexidp.io/docs/storage/ for more options
|
|
||||||
storage:
|
|
||||||
type: memory
|
|
||||||
|
|
||||||
oauth2:
|
|
||||||
skipApprovalScreen: true
|
|
||||||
alwaysShowLoginScreen: false
|
|
||||||
|
|
||||||
connectors:
|
|
||||||
- type: gitea
|
|
||||||
id: gitea
|
|
||||||
name: Forgejo
|
|
||||||
config:
|
|
||||||
clientID: "$FORGEJO_CLIENT_ID"
|
|
||||||
clientSecret: "$FORGEJO_CLIENT_SECRET"
|
|
||||||
redirectURI: https://dex.garm-provider-test.t09.de/callback
|
|
||||||
baseURL: https://edp.buildth.ing
|
|
||||||
# loadAllGroups: true
|
|
||||||
orgs:
|
|
||||||
- name: DevFW
|
|
||||||
enablePasswordDB: false
|
|
||||||
|
|
||||||
staticClients:
|
|
||||||
- id: controller-argocd-dex
|
|
||||||
name: ArgoCD Client
|
|
||||||
redirectURIs:
|
|
||||||
- "https://argocd.garm-provider-test.t09.de/auth/callback"
|
|
||||||
secretEnv: "OIDC_DEX_ARGO_CLIENT_SECRET"
|
|
||||||
- id: grafana
|
|
||||||
redirectURIs:
|
|
||||||
- "https://grafana.garm-provider-test.t09.de/login/generic_oauth"
|
|
||||||
name: "Grafana"
|
|
||||||
secretEnv: "OIDC_DEX_GRAFANA_CLIENT_SECRET"
|
|
||||||
|
|
@ -1,24 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: forgejo-runner
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
server: "https://kubernetes.default.svc"
|
|
||||||
source:
|
|
||||||
repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/forgejo/forgejo-runner"
|
|
||||||
|
|
@ -1,104 +0,0 @@
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: forgejo-runner
|
|
||||||
name: forgejo-runner
|
|
||||||
namespace: gitea
|
|
||||||
spec:
|
|
||||||
# Two replicas means that if one is busy, the other can pick up jobs.
|
|
||||||
replicas: 3
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: forgejo-runner
|
|
||||||
strategy: {}
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
labels:
|
|
||||||
app: forgejo-runner
|
|
||||||
spec:
|
|
||||||
restartPolicy: Always
|
|
||||||
volumes:
|
|
||||||
- name: docker-certs
|
|
||||||
emptyDir: {}
|
|
||||||
- name: runner-data
|
|
||||||
emptyDir: {}
|
|
||||||
# Initialise our configuration file using offline registration
|
|
||||||
# https://forgejo.org/docs/v1.21/admin/actions/#offline-registration
|
|
||||||
initContainers:
|
|
||||||
- name: runner-register
|
|
||||||
image: code.forgejo.org/forgejo/runner:6.4.0
|
|
||||||
command:
|
|
||||||
- "sh"
|
|
||||||
- "-c"
|
|
||||||
- |
|
|
||||||
forgejo-runner \
|
|
||||||
register \
|
|
||||||
--no-interactive \
|
|
||||||
--token ${RUNNER_SECRET} \
|
|
||||||
--name ${RUNNER_NAME} \
|
|
||||||
--instance ${FORGEJO_INSTANCE_URL} \
|
|
||||||
--labels docker:docker://node:20-bookworm,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
env:
|
|
||||||
- name: RUNNER_NAME
|
|
||||||
valueFrom:
|
|
||||||
fieldRef:
|
|
||||||
fieldPath: metadata.name
|
|
||||||
- name: RUNNER_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-runner-token
|
|
||||||
key: token
|
|
||||||
- name: FORGEJO_INSTANCE_URL
|
|
||||||
value: https://garm-provider-test.t09.de
|
|
||||||
volumeMounts:
|
|
||||||
- name: runner-data
|
|
||||||
mountPath: /data
|
|
||||||
containers:
|
|
||||||
- name: runner
|
|
||||||
image: code.forgejo.org/forgejo/runner:6.4.0
|
|
||||||
command:
|
|
||||||
- "sh"
|
|
||||||
- "-c"
|
|
||||||
- |
|
|
||||||
while ! nc -z 127.0.0.1 2376 </dev/null; do
|
|
||||||
echo 'waiting for docker daemon...';
|
|
||||||
sleep 5;
|
|
||||||
done
|
|
||||||
forgejo-runner generate-config > config.yml ;
|
|
||||||
sed -i -e "s|privileged: .*|privileged: true|" config.yml
|
|
||||||
sed -i -e "s|network: .*|network: host|" config.yml ;
|
|
||||||
sed -i -e "s|^ envs:$$| envs:\n DOCKER_HOST: tcp://127.0.0.1:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client|" config.yml ;
|
|
||||||
sed -i -e "s|^ options:| options: -v /certs/client:/certs/client|" config.yml ;
|
|
||||||
sed -i -e "s| valid_volumes: \[\]$$| valid_volumes:\n - /certs/client|" config.yml ;
|
|
||||||
/bin/forgejo-runner --config config.yml daemon
|
|
||||||
securityContext:
|
|
||||||
allowPrivilegeEscalation: true
|
|
||||||
privileged: true
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
runAsGroup: 0
|
|
||||||
runAsNonRoot: false
|
|
||||||
runAsUser: 0
|
|
||||||
env:
|
|
||||||
- name: DOCKER_HOST
|
|
||||||
value: tcp://localhost:2376
|
|
||||||
- name: DOCKER_CERT_PATH
|
|
||||||
value: /certs/client
|
|
||||||
- name: DOCKER_TLS_VERIFY
|
|
||||||
value: "1"
|
|
||||||
volumeMounts:
|
|
||||||
- name: docker-certs
|
|
||||||
mountPath: /certs
|
|
||||||
- name: runner-data
|
|
||||||
mountPath: /data
|
|
||||||
- name: daemon
|
|
||||||
image: docker:28.0.4-dind
|
|
||||||
env:
|
|
||||||
- name: DOCKER_TLS_CERTDIR
|
|
||||||
value: /certs
|
|
||||||
securityContext:
|
|
||||||
privileged: true
|
|
||||||
volumeMounts:
|
|
||||||
- name: docker-certs
|
|
||||||
mountPath: /certs
|
|
||||||
|
|
@ -1,32 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: forgejo-server
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: gitea
|
|
||||||
sources:
|
|
||||||
- repoURL: https://code.forgejo.org/forgejo-helm/forgejo-helm.git
|
|
||||||
path: .
|
|
||||||
targetRevision: v12.0.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/forgejo/forgejo-server/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/forgejo/forgejo-server/manifests"
|
|
||||||
|
|
@ -1,27 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
nginx.ingress.kubernetes.io/proxy-body-size: 512m
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
|
|
||||||
name: forgejo-server
|
|
||||||
namespace: gitea
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: garm-provider-test.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: forgejo-server-http
|
|
||||||
port:
|
|
||||||
number: 3000
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- garm-provider-test.t09.de
|
|
||||||
secretName: forgejo-net-tls
|
|
||||||
|
|
@ -1,91 +0,0 @@
|
||||||
apiVersion: batch/v1
|
|
||||||
kind: CronJob
|
|
||||||
metadata:
|
|
||||||
name: forgejo-s3-backup
|
|
||||||
namespace: gitea
|
|
||||||
spec:
|
|
||||||
schedule: "0 1 * * *"
|
|
||||||
concurrencyPolicy: "Forbid"
|
|
||||||
successfulJobsHistoryLimit: 5
|
|
||||||
failedJobsHistoryLimit: 5
|
|
||||||
startingDeadlineSeconds: 600 # 10 minutes
|
|
||||||
jobTemplate:
|
|
||||||
spec:
|
|
||||||
# 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
|
|
||||||
activeDeadlineSeconds: 1350
|
|
||||||
backoffLimit: 2
|
|
||||||
ttlSecondsAfterFinished: 259200 #
|
|
||||||
template:
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: rclone
|
|
||||||
image: rclone/rclone:1.70
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
env:
|
|
||||||
- name: SOURCE_BUCKET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: bucket-name
|
|
||||||
- name: AWS_ACCESS_KEY_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: access-key
|
|
||||||
- name: AWS_SECRET_ACCESS_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: secret-key
|
|
||||||
volumeMounts:
|
|
||||||
- name: rclone-config
|
|
||||||
mountPath: /config/rclone
|
|
||||||
readOnly: true
|
|
||||||
- name: backup-dir
|
|
||||||
mountPath: /backup
|
|
||||||
readOnly: false
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- |
|
|
||||||
rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
|
|
||||||
restartPolicy: OnFailure
|
|
||||||
volumes:
|
|
||||||
- name: rclone-config
|
|
||||||
secret:
|
|
||||||
secretName: forgejo-s3-backup
|
|
||||||
- name: backup-dir
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: s3-backup
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: s3-backup
|
|
||||||
namespace: gitea
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
everest.io/crypt-key-id: bed38fe3-0ed8-4f6f-bfd5-f97fd50d7817
|
|
||||||
spec:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 100Gi
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: forgejo-s3-backup
|
|
||||||
namespace: gitea
|
|
||||||
type: Opaque
|
|
||||||
stringData:
|
|
||||||
rclone.conf: |
|
|
||||||
[source]
|
|
||||||
type = s3
|
|
||||||
provider = HuaweiOBS
|
|
||||||
env_auth = true
|
|
||||||
endpoint = obs.eu-de.otc.t-systems.com
|
|
||||||
region = eu-de
|
|
||||||
acl = private
|
|
||||||
|
|
@ -1,191 +0,0 @@
|
||||||
# This is only used for deploying older versions of infra-catalogue where the bucket name is not an output of the terragrunt modules# We use recreate to make sure only one instance with one version is running, because Forgejo might break or data gets inconsistant.
|
|
||||||
strategy:
|
|
||||||
type: Recreate
|
|
||||||
|
|
||||||
redis-cluster:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
redis:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
postgresql:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
postgresql-ha:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
persistence:
|
|
||||||
enabled: true
|
|
||||||
size: 200Gi
|
|
||||||
storageClass: csi-disk
|
|
||||||
annotations:
|
|
||||||
everest.io/crypt-key-id: bed38fe3-0ed8-4f6f-bfd5-f97fd50d7817
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
|
|
||||||
test:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
deployment:
|
|
||||||
env:
|
|
||||||
- name: SSL_CERT_DIR
|
|
||||||
value: /etc/ssl/forgejo
|
|
||||||
|
|
||||||
extraVolumeMounts:
|
|
||||||
- mountPath: /etc/ssl/forgejo
|
|
||||||
name: custom-database-certs-volume
|
|
||||||
readOnly: true
|
|
||||||
|
|
||||||
extraVolumes:
|
|
||||||
- name: custom-database-certs-volume
|
|
||||||
secret:
|
|
||||||
secretName: custom-database-certs
|
|
||||||
|
|
||||||
gitea:
|
|
||||||
metrics:
|
|
||||||
enabled: true
|
|
||||||
serviceMonitor:
|
|
||||||
enabled: true
|
|
||||||
additionalConfigFromEnvs:
|
|
||||||
- name: FORGEJO__storage__MINIO_ACCESS_KEY_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: access-key
|
|
||||||
- name: FORGEJO__storage__MINIO_SECRET_ACCESS_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: forgejo-cloud-credentials
|
|
||||||
key: secret-key
|
|
||||||
- name: FORGEJO__queue__CONN_STR
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: redis-forgejo-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__session__PROVIDER_CONFIG
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: redis-forgejo-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__cache__HOST
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: redis-forgejo-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__database__HOST
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: host_port
|
|
||||||
- name: FORGEJO__database__NAME
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: database
|
|
||||||
- name: FORGEJO__database__USER
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: username
|
|
||||||
- name: FORGEJO__database__PASSWD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: postgres-forgejo-cloud-credentials
|
|
||||||
key: password
|
|
||||||
# Either 'elasticsearch' or 'bleve' (go in memory search engine)
|
|
||||||
- name: FORGEJO__indexer__ISSUE_INDEXER_TYPE
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: elasticsearch-cloud-credentials
|
|
||||||
key: type
|
|
||||||
- name: FORGEJO__indexer__ISSUE_INDEXER_CONN_STR
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: elasticsearch-cloud-credentials
|
|
||||||
key: connection-string
|
|
||||||
- name: FORGEJO__indexer__ISSUE_INDEXER_ENABLED
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: elasticsearch-cloud-credentials
|
|
||||||
key: enabled
|
|
||||||
- name: FORGEJO__mailer__PASSWD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: email-user-credentials
|
|
||||||
key: connection-string
|
|
||||||
|
|
||||||
admin:
|
|
||||||
existingSecret: gitea-credential
|
|
||||||
|
|
||||||
config:
|
|
||||||
APP_NAME: 'EDP'
|
|
||||||
APP_SLOGAN: 'Build your thing in minutes'
|
|
||||||
storage:
|
|
||||||
MINIO_ENDPOINT: obs.eu-de.otc.t-systems.com:443
|
|
||||||
STORAGE_TYPE: minio
|
|
||||||
MINIO_LOCATION: eu-de
|
|
||||||
MINIO_BUCKET: "edp-forgejo-non-prod-garm-provider-test"
|
|
||||||
MINIO_USE_SSL: true
|
|
||||||
|
|
||||||
queue:
|
|
||||||
TYPE: redis
|
|
||||||
|
|
||||||
session:
|
|
||||||
PROVIDER: redis
|
|
||||||
|
|
||||||
cache:
|
|
||||||
ENABLED: true
|
|
||||||
ADAPTER: redis
|
|
||||||
|
|
||||||
service:
|
|
||||||
DISABLE_REGISTRATION: true
|
|
||||||
ENABLE_NOTIFY_MAIL: true
|
|
||||||
|
|
||||||
other:
|
|
||||||
SHOW_FOOTER_VERSION: false
|
|
||||||
SHOW_FOOTER_TEMPLATE_LOAD_TIME: false
|
|
||||||
|
|
||||||
database:
|
|
||||||
DB_TYPE: postgres
|
|
||||||
SSL_MODE: verify-ca
|
|
||||||
|
|
||||||
server:
|
|
||||||
DOMAIN: 'garm-provider-test.t09.de'
|
|
||||||
ROOT_URL: 'https://garm-provider-test.t09.de:443'
|
|
||||||
|
|
||||||
mailer:
|
|
||||||
ENABLED: true
|
|
||||||
USER: ipcei-cis-devfw@mms-support.de
|
|
||||||
PROTOCOL: smtps
|
|
||||||
FROM: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>'
|
|
||||||
SMTP_ADDR: mail.mms-support.de
|
|
||||||
SMTP_PORT: 465
|
|
||||||
|
|
||||||
service:
|
|
||||||
ssh:
|
|
||||||
type: LoadBalancer
|
|
||||||
nodePort: 32222
|
|
||||||
externalTrafficPolicy: Cluster
|
|
||||||
annotations:
|
|
||||||
kubernetes.io/elb.id: c4ad70b6-cfd1-40e4-b0dd-3cefabc4b408
|
|
||||||
|
|
||||||
image:
|
|
||||||
pullPolicy: "IfNotPresent"
|
|
||||||
# Overrides the image tag whose default is the chart appVersion.
|
|
||||||
#tag: "8.0.3"
|
|
||||||
# Adds -rootless suffix to image name
|
|
||||||
# rootless: true
|
|
||||||
fullOverride: edp.buildth.ing/devfw-cicd/edp-forgejo:2a8cc35e3232664f71414835521ca2d2689771c2
|
|
||||||
|
|
||||||
forgejo:
|
|
||||||
runner:
|
|
||||||
enabled: true
|
|
||||||
image:
|
|
||||||
tag: latest
|
|
||||||
# replicas: 3
|
|
||||||
config:
|
|
||||||
runner:
|
|
||||||
labels:
|
|
||||||
- docker:docker://node:16-bullseye
|
|
||||||
- self-hosted:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
- ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
- ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: garm
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: garm
|
|
||||||
sources:
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/garm-helm
|
|
||||||
path: charts/garm
|
|
||||||
targetRevision: v0.0.6
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/garm/garm/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,36 +0,0 @@
|
||||||
ingress:
|
|
||||||
enabled: true
|
|
||||||
className: nginx
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
nginx.ingress.kubernetes.io/backend-protocol: HTTP
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
hosts:
|
|
||||||
- host: garm.garm-provider-test.t09.de
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- secretName: garm-net-tls
|
|
||||||
hosts:
|
|
||||||
- garm.garm-provider-test.t09.de
|
|
||||||
|
|
||||||
# Credentials and Secrets
|
|
||||||
credentials:
|
|
||||||
edgeConnect:
|
|
||||||
existingSecretName: "edge-credential"
|
|
||||||
gitea:
|
|
||||||
url: "https://garm-provider-test.t09.de" # Required
|
|
||||||
|
|
||||||
providerConfig:
|
|
||||||
edgeConnect:
|
|
||||||
organization: edp2
|
|
||||||
region: EU
|
|
||||||
edgeConnectUrl: "https://hub.apps.edge.platform.mg3.mdb.osc.live"
|
|
||||||
cloudlet:
|
|
||||||
name: Hamburg
|
|
||||||
organization: TelekomOP
|
|
||||||
|
|
||||||
garm:
|
|
||||||
logging:
|
|
||||||
logLevel: info
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
finalizers:
|
|
||||||
- resources-finalizer.argocd.argoproj.io
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: garm
|
|
||||||
source:
|
|
||||||
repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/garm/optimiser-receiver"
|
|
||||||
|
|
@ -1,93 +0,0 @@
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: receiver
|
|
||||||
image: edp.buildth.ing/devfw-cicd/forgejo-runner-optimiser-receiver:0.0.3
|
|
||||||
args:
|
|
||||||
- --db=/data/metrics.db
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
containerPort: 8080
|
|
||||||
protocol: TCP
|
|
||||||
env:
|
|
||||||
- name: RECEIVER_READ_TOKEN
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: optimiser-tokens
|
|
||||||
key: read-token
|
|
||||||
- name: RECEIVER_HMAC_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: optimiser-tokens
|
|
||||||
key: hmac-key
|
|
||||||
volumeMounts:
|
|
||||||
- name: data
|
|
||||||
mountPath: /data
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /health
|
|
||||||
port: http
|
|
||||||
initialDelaySeconds: 5
|
|
||||||
periodSeconds: 30
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /health
|
|
||||||
port: http
|
|
||||||
initialDelaySeconds: 2
|
|
||||||
periodSeconds: 10
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 50m
|
|
||||||
memory: 64Mi
|
|
||||||
limits:
|
|
||||||
cpu: 200m
|
|
||||||
memory: 128Mi
|
|
||||||
volumes:
|
|
||||||
- name: data
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: optimiser-receiver-data
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: optimiser-receiver
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
port: 8080
|
|
||||||
targetPort: http
|
|
||||||
protocol: TCP
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: optimiser-receiver-data
|
|
||||||
labels:
|
|
||||||
app: optimiser-receiver
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
spec:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 1Gi
|
|
||||||
|
|
@ -1,26 +0,0 @@
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
|
|
||||||
name: optimiser-receiver
|
|
||||||
namespace: garm
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: optimiser.garm-provider-test.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: optimiser-receiver
|
|
||||||
port:
|
|
||||||
number: 8080
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- optimiser.garm-provider-test.t09.de
|
|
||||||
secretName: optimiser-receiver-tls
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: metrics-server
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: metrics-server
|
|
||||||
repoURL: https://kubernetes-sigs.github.io/metrics-server/
|
|
||||||
targetRevision: 3.12.2
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/observability-client/metrics-server/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
metrics:
|
|
||||||
enabled: true
|
|
||||||
serviceMonitor:
|
|
||||||
enabled: true
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: vector
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: vector
|
|
||||||
repoURL: https://helm.vector.dev
|
|
||||||
targetRevision: 0.43.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/observability-client/vector/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,68 +0,0 @@
|
||||||
# -- Enable deployment of vector
|
|
||||||
role: Agent
|
|
||||||
dataDir: /vector-data-dir
|
|
||||||
resources: {}
|
|
||||||
args:
|
|
||||||
- -w
|
|
||||||
- --config-dir
|
|
||||||
- /etc/vector/
|
|
||||||
env:
|
|
||||||
- name: VECTOR_USER
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: simple-user-secret
|
|
||||||
key: username
|
|
||||||
- name: VECTOR_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: simple-user-secret
|
|
||||||
key: password
|
|
||||||
containerPorts:
|
|
||||||
- name: prom-exporter
|
|
||||||
containerPort: 9090
|
|
||||||
protocol: TCP
|
|
||||||
service:
|
|
||||||
enabled: false
|
|
||||||
customConfig:
|
|
||||||
data_dir: /vector-data-dir
|
|
||||||
api:
|
|
||||||
enabled: false
|
|
||||||
address: 0.0.0.0:8686
|
|
||||||
playground: true
|
|
||||||
sources:
|
|
||||||
k8s:
|
|
||||||
type: kubernetes_logs
|
|
||||||
internal_metrics:
|
|
||||||
type: internal_metrics
|
|
||||||
transforms:
|
|
||||||
parser:
|
|
||||||
type: remap
|
|
||||||
inputs: [k8s]
|
|
||||||
source: |
|
|
||||||
._msg = parse_json(.message) ?? .message
|
|
||||||
del(.message)
|
|
||||||
# Add the cluster environment to the log event
|
|
||||||
.cluster_environment = "garm-provider-test"
|
|
||||||
sinks:
|
|
||||||
vlogs:
|
|
||||||
type: elasticsearch
|
|
||||||
inputs: [parser]
|
|
||||||
endpoints:
|
|
||||||
- https://o12y.observability./insert/elasticsearch/
|
|
||||||
auth:
|
|
||||||
strategy: basic
|
|
||||||
user: ${VECTOR_USER}
|
|
||||||
password: ${VECTOR_PASSWORD}
|
|
||||||
mode: bulk
|
|
||||||
api_version: v8
|
|
||||||
compression: gzip
|
|
||||||
healthcheck:
|
|
||||||
enabled: false
|
|
||||||
request:
|
|
||||||
headers:
|
|
||||||
AccountID: "0"
|
|
||||||
ProjectID: "0"
|
|
||||||
query:
|
|
||||||
_msg_field: _msg
|
|
||||||
_time_field: _time
|
|
||||||
_stream_fields: cluster_environment,kubernetes.container_name,kubernetes.namespace
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: vm-client
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: victoria-metrics-k8s-stack
|
|
||||||
repoURL: https://victoriametrics.github.io/helm-charts/
|
|
||||||
targetRevision: 0.48.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/observability-client/vm-client-stack/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/observability-client/vm-client-stack/manifests"
|
|
||||||
File diff suppressed because it is too large
Load diff
|
|
@ -1,25 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: grafana-operator
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
- ServerSideApply=true
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: grafana-operator
|
|
||||||
repoURL: ghcr.io/grafana/helm-charts
|
|
||||||
targetRevision: v5.18.0
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/observability/grafana-operator/manifests"
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: GrafanaDashboard
|
|
||||||
metadata:
|
|
||||||
name: argocd
|
|
||||||
spec:
|
|
||||||
instanceSelector:
|
|
||||||
matchLabels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
url: "https://raw.githubusercontent.com/argoproj/argo-cd/refs/heads/master/examples/dashboard.json"
|
|
||||||
|
|
@ -1,75 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: Grafana
|
|
||||||
metadata:
|
|
||||||
name: grafana
|
|
||||||
labels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
spec:
|
|
||||||
persistentVolumeClaim:
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
everest.io/disk-volume-type: GPSSD
|
|
||||||
everest.io/crypt-key-id: bed38fe3-0ed8-4f6f-bfd5-f97fd50d7817
|
|
||||||
spec:
|
|
||||||
storageClassName: csi-disk
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 10Gi
|
|
||||||
deployment:
|
|
||||||
spec:
|
|
||||||
template:
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: grafana
|
|
||||||
env:
|
|
||||||
- name: OAUTH_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
key: clientSecret
|
|
||||||
name: dex-grafana-client
|
|
||||||
config:
|
|
||||||
log.console:
|
|
||||||
level: debug
|
|
||||||
server:
|
|
||||||
root_url: "https://grafana.garm-provider-test.t09.de"
|
|
||||||
auth:
|
|
||||||
disable_login: "true"
|
|
||||||
disable_login_form: "true"
|
|
||||||
auth.generic_oauth:
|
|
||||||
enabled: "true"
|
|
||||||
name: Forgejo
|
|
||||||
allow_sign_up: "true"
|
|
||||||
use_refresh_token: "true"
|
|
||||||
client_id: grafana
|
|
||||||
client_secret: $__env{OAUTH_CLIENT_SECRET}
|
|
||||||
scopes: openid email profile offline_access groups
|
|
||||||
auth_url: https://dex.garm-provider-test.t09.de/auth
|
|
||||||
token_url: https://dex.garm-provider-test.t09.de/token
|
|
||||||
api_url: https://dex.garm-provider-test.t09.de/userinfo
|
|
||||||
redirect_uri: https://grafana.garm-provider-test.t09.de/login/generic_oauth
|
|
||||||
role_attribute_path: "contains(groups[*], 'DevFW') && 'GrafanaAdmin' || 'None'"
|
|
||||||
allow_assign_grafana_admin: "true"
|
|
||||||
ingress:
|
|
||||||
metadata:
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
||||||
spec:
|
|
||||||
ingressClassName: nginx
|
|
||||||
rules:
|
|
||||||
- host: grafana.garm-provider-test.t09.de
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- backend:
|
|
||||||
service:
|
|
||||||
name: grafana-service
|
|
||||||
port:
|
|
||||||
number: 3000
|
|
||||||
path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- grafana.garm-provider-test.t09.de
|
|
||||||
secretName: grafana-net-tls
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: GrafanaDashboard
|
|
||||||
metadata:
|
|
||||||
name: ingress-nginx
|
|
||||||
spec:
|
|
||||||
instanceSelector:
|
|
||||||
matchLabels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
url: "https://raw.githubusercontent.com/adinhodovic/ingress-nginx-mixin/refs/heads/main/dashboards_out/ingress-nginx-overview.json"
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: grafana.integreatly.org/v1beta1
|
|
||||||
kind: GrafanaDashboard
|
|
||||||
metadata:
|
|
||||||
name: victoria-logs
|
|
||||||
spec:
|
|
||||||
instanceSelector:
|
|
||||||
matchLabels:
|
|
||||||
dashboards: "grafana"
|
|
||||||
url: "https://raw.githubusercontent.com/VictoriaMetrics/VictoriaMetrics/refs/heads/master/dashboards/vm/victorialogs.json"
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: o12y
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
- ServerSideApply=true
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: observability
|
|
||||||
sources:
|
|
||||||
- chart: victoria-metrics-k8s-stack
|
|
||||||
repoURL: https://victoriametrics.github.io/helm-charts/
|
|
||||||
targetRevision: 0.48.1
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/garm-provider-test.t09.de/stacks/observability/victoria-k8s-stack/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: "otc/garm-provider-test.t09.de/stacks/observability/victoria-k8s-stack/manifests"
|
|
||||||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Add a link
Reference in a new issue