stacks

DevFW-CICD/stacks

Fork 0

Commit graph

0e26cc9a3f adds forgejo-access-token external secret for gitea namespace franz.germann 2025-04-17 13:09:43 +02:00
0668eb7c5f Merge branch 'IPCEICIS-2297_working_oidc' of https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks into IPCEICIS-2297_working_oidc franz.germann 2025-04-17 12:59:21 +02:00
74523447ae adds the correct secrets franz.germann 2025-04-17 12:56:58 +02:00
cce8c51b75 Add template/stacks/core/argocd-sso/argocd-forgejo-access-token.yaml richardrobertreitz 2025-04-17 10:54:47 +00:00
2022106cb0 backend michals-silly-game miwr 2025-04-17 12:22:29 +02:00
ae8848cfd2 entstopfen miwr 2025-04-17 12:14:02 +02:00
c964431c7f 8080 miwr 2025-04-17 10:52:12 +02:00
7fac795f11 80 instead of 8080 miwr 2025-04-17 10:39:45 +02:00
964ecdbdb2 ingress fixed miwr 2025-04-17 10:20:58 +02:00
4e135403f1 ingress miwr 2025-04-16 16:09:30 +02:00
59ff83a8f8 Added backstage template for basic python django application django-backstage-template evdo 2025-04-16 15:50:48 +02:00
11d9ad5fcc testing franz.germann 2025-04-16 15:24:28 +02:00
42d65e95be testing franz.germann 2025-04-16 14:59:25 +02:00
5165583b9a testing franz.germann 2025-04-16 14:53:10 +02:00
025efc732f name: silly-game-frontend-service miwr 2025-04-16 12:11:11 +02:00
def30cded8 ingress added miwr 2025-04-16 12:00:55 +02:00
d95ea8de9e name fixed miwr 2025-04-16 10:45:03 +02:00
a623f85238 silly game miwr 2025-04-15 15:21:48 +02:00
701771ad13 adds secretRefs to the jobs franz.germann 2025-04-14 17:42:27 +02:00
d90402b74a renaming franz.germann 2025-04-14 16:56:45 +02:00
b533f7adf3 adds a kubernetes job that configures ArgoCD franz.germann 2025-04-14 16:39:37 +02:00
4e6bc267d3 new repoURL miwr 2025-04-14 14:10:52 +02:00
f04a1e56f1 new destination miwr 2025-04-14 14:03:44 +02:00
3b248733f4 local thing miwr 2025-04-14 13:59:08 +02:00
a392c4b8bb https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/michals-silly-game-backend/src/branch/main/k8 miwr 2025-04-14 13:47:41 +02:00
42801f3ed5 https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/michals-silly-game-backend.git miwr 2025-04-14 13:40:49 +02:00
5f6be98b00 repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/michals-silly-game-backend/src/branch/main/k8 miwr 2025-04-14 13:34:48 +02:00
620f7a3fd9 adds a kubernetes job that configures Forgejo franz.germann 2025-04-14 13:30:50 +02:00
2242b97775 first commit miwr 2025-04-14 13:12:36 +02:00
1a8c2846bc Update template/stacks/core/forgejo-sso/secret-forgejo.yaml richardrobertreitz 2025-04-12 21:21:16 +00:00
ead21d078a Update template/stacks/core/argocd-sso/argocd-secret.yaml richardrobertreitz 2025-04-12 20:42:55 +00:00
30d1d51884 Merge pull request 'Added keycloak client externalsecret for Forgejo and ArgoCD' (#27) from keycloak_externalsecret_for_argocd_and_forgejo into development richardrobertreitz 2025-04-12 19:38:52 +00:00
33def8aba5 Added keycloak client externalsecret for Forgejo and ArgoCD Richard Robert Reitz 2025-04-12 21:31:05 +02:00
0a307e5b35 Merge pull request 'keycloak_oidc_forgejo_config' (#25) from keycloak_oidc_forgejo_config into development richardrobertreitz 2025-04-12 19:13:13 +00:00
55a1eaa6f6 Added Forgejo to Keycloak config Richard Robert Reitz 2025-04-12 21:07:43 +02:00
2532958de8 Added Forgejo to Keycloak config Richard Robert Reitz 2025-04-12 21:05:35 +02:00
7a5e29e47d Update template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml richardrobertreitz 2025-04-12 18:52:41 +00:00
3943b3d46e Merge pull request 'Update template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml' (#24) from keycloak_oidc_argocd_config into development richardrobertreitz 2025-04-12 18:50:49 +00:00
3263113ebe Update template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml richardrobertreitz 2025-04-12 18:49:15 +00:00
5d0182d6ee Update template/stacks/core/forgejo/values.yaml richardrobertreitz 2025-04-12 16:27:05 +00:00
c01d4952ad Disabled user self registration in Forgejo richardrobertreitz 2025-04-12 16:17:20 +00:00
777d6afeb4 Update template/stacks/core/forgejo-runner/dind-docker.yaml richardrobertreitz 2025-04-11 14:12:29 +00:00
529182ee3d logrotate-cronjob miwr 2025-04-02 15:31:38 +02:00
dd9ddc8fdb sidecar-script miwr 2025-04-02 15:26:04 +02:00
6811280b92 - name: sidecar-nginx image: nginx:latest ports: - containerPort: 8080 volumeMounts: - name: idecar-script mountPath: /etc/nginx subPath: nginx.conf subPathExpr: 'nginx.conf' - name: idecar-script mountPath: /tmp/sidecar.sh subPath: sidecar.sh mode: 0755 - name: passwd-volume mountPath: /etc/passwd subPath: passwd miwr 2025-04-02 15:20:11 +02:00
949cf77c4e sighup miwr 2025-04-02 14:53:08 +02:00
a11947c5e7 kill -SIGHUP $(pidof bao) || echo "OpenBAO process not found" miwr 2025-04-02 14:40:13 +02:00
853ce17354 app: openbao-0 miwr 2025-04-02 14:39:56 +02:00
8b6b29cb9f sleep infinity miwr 2025-04-02 14:21:28 +02:00
4553289695 tmp miwr 2025-04-02 13:59:01 +02:00
0f229f7adb sleep infinity miwr 2025-04-02 13:51:28 +02:00
cfb473659d command: ["/bin/sh", "-c", "sleep 1000000000000000000000"] miwr 2025-04-02 13:46:04 +02:00
795d575d5e kill -SIGHUP $(pidof bao) || echo "OpenBAO process not found" mkdir pupa miwr 2025-04-02 13:38:34 +02:00
c754dc80bc signal-sidecar-script miwr 2025-04-02 13:32:15 +02:00
1a85de6cda 5k miwr 2025-04-02 11:03:54 +02:00
5db72e2dc0 cronjob miwr 2025-04-02 10:43:10 +02:00
ca9fd7ba39 - name: status mountPath: /var/lib miwr 2025-04-02 10:08:07 +02:00
48fb2c1481 size 1M miwr 2025-04-02 09:53:08 +02:00
a2d2bd9b87 volumeMounts: - name: host-log-storage mountPath: /openbao/logs miwr 2025-04-02 08:59:29 +02:00
49fdf90dd8 - name: logrotate2 miwr 2025-04-01 14:49:40 +02:00
b5a515c6f9 imroc/logrotate:latest miwr 2025-04-01 14:44:46 +02:00
485e772016 # - name: status # mountPath: /var/lib miwr 2025-04-01 14:11:35 +02:00
71a45cc0b8 value: "* * * * *" miwr 2025-04-01 14:04:13 +02:00
5200aa748c 5k miwr 2025-04-01 13:53:08 +02:00
29ec426778 delaycompress rmoved miwr 2025-04-01 13:36:33 +02:00
7b8ea2de6b status miwr 2025-04-01 13:28:10 +02:00
ee630c88b9 env: - name: CRON_SCHEDULE value: "0 * * * *" - name: TINI_SUBREAPER value: miwr 2025-04-01 13:18:44 +02:00
fc6ee8bcae 1M miwr 2025-04-01 12:53:31 +02:00
c9d72e9f90 should be done miwr 2025-04-01 11:57:46 +02:00
7cc75f0095 test miwr 2025-04-01 11:44:52 +02:00
37a9a73664 - name: passwd-volume mountPath: /etc/passwd subPath: passwd miwr 2025-04-01 11:44:19 +02:00
ad76195004 passwd-user-configmap miwr 2025-04-01 11:35:26 +02:00
d3b60c036a extraArgs: "chmod o+rwx /etc/passwd" miwr 2025-04-01 11:20:56 +02:00
de3194062d extraArgs: - | chmod o+rwx /etc/passwd chmod o+rwx /etc/group miwr 2025-04-01 11:16:07 +02:00
cda3fc8179 extraArgs: - chmod o+rwx /etc/passwd - chmod o+rwx /etc/group miwr 2025-04-01 11:15:20 +02:00
2dc751b5e3 chmod o+rwx /etc/passwd chmod o+rwx /etc/group miwr 2025-04-01 10:59:09 +02:00
12a4ed37f7 /etc/group miwr 2025-04-01 10:51:43 +02:00
77b571b768 chown 100:100 /etc/passwd miwr 2025-04-01 10:50:59 +02:00
6df0858cdf - name: init image: alpine:latest miwr 2025-04-01 10:45:20 +02:00
06fb6d223f runAsUser: 100 miwr 2025-04-01 10:21:07 +02:00
4f8eb0bc8b chmod o+rwx /var/log/openbao miwr 2025-04-01 10:05:55 +02:00
1164768b9f runAsUser: 1 miwr 2025-03-31 15:53:54 +02:00
f66f437cdf runAsUser: 100 miwr 2025-03-31 15:48:42 +02:00
ce5bdf0226 runAsUser: 1 miwr 2025-03-31 15:35:06 +02:00
56c5cc2620 - name: alloy-data mountPath: /var/lib/ miwr 2025-03-31 15:24:21 +02:00
458414e779 set -e mkdir -p /var/log/openbao chown 100:100 /var/log/openbao echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd echo "logrotate❌100:" >> /etc/group mkdir -p /home/logrotate # chown 100:100 /var/lib miwr 2025-03-31 15:09:30 +02:00
8eae08aaa9 securityContext: runAsUser: 0 miwr 2025-03-31 15:04:11 +02:00
ba9452e03c chown 100:100 /var/lib miwr 2025-03-31 14:55:39 +02:00
888d32c403 set -e mkdir -p /var/log/openbao chown 100:100 /var/log/openbao echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd echo "logrotate❌100:" >> /etc/group chown logrotate:logrotate /var/lib miwr 2025-03-31 14:49:48 +02:00
6f3effeaf5 # bao audit enable file file_path=stdout miwr 2025-03-31 14:49:09 +02:00
fd02d55dda bao audit enable file file_path=stdout miwr 2025-03-31 14:26:58 +02:00
63b17c9e32 echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd echo "logrotate❌100:" >> /etc/group miwr 2025-03-31 14:10:34 +02:00
f13bf825ff set -e chown 100:100 /var/lib tail -f /dev/null miwr 2025-03-31 14:03:43 +02:00
abd7da5cd3 image: alpine:latest miwr 2025-03-31 13:58:12 +02:00
a42df6275c restart policy removed miwr 2025-03-31 13:50:24 +02:00
5a802be864 - | set -e useradd -u 100 logrotate chown logrotate:logrotate /var/lib tail -f /dev/null miwr 2025-03-31 13:45:05 +02:00
bc6ed363e2 logrotate-priviledges miwr 2025-03-31 13:38:33 +02:00
631be775f5 chown logrotate:logrotate /var/lib/logrotate.status miwr 2025-03-31 13:28:37 +02:00
0107666fe2 logrotate-config-volume miwr 2025-03-31 12:31:38 +02:00
e5ccae1aab - name: logrotate-config mountPath: /etc/logrotate.conf subPath: logrotate.conf readOnly: true miwr 2025-03-31 12:22:35 +02:00