commit 120bea24145e35e27784eb3bb9b7b0c98dee65c0
parent d2276af2fa0124ba3367a0fd0b1a0c010d46b501
Author: MTRNord <mtrnord1@gmail.com>
Date: Tue, 7 Jan 2025 21:50:48 +0100
Add mariadb-operator
Diffstat:
6 files changed, 41 insertions(+), 51 deletions(-)
diff --git a/apps/base/authentik/ingress.yaml b/apps/base/authentik/ingress.yaml
@@ -1,4 +1,3 @@
----
apiVersion: traefik.io/v1alpha1
kind: IngressRouteTCP
metadata:
@@ -12,5 +11,5 @@ spec:
routes:
- match: HostSNI(`*`)
services:
- - name: ak-outpost-ldap
- port: 389
+ - name: ak-outpost-ldap
+ port: 389
diff --git a/apps/base/authentik/release.yaml b/apps/base/authentik/release.yaml
@@ -67,7 +67,7 @@ spec:
volumes:
- name: ldap-cert
secret:
- secretName: ENC[AES256_GCM,data:jezDqAKhwduZ8XCvOcE=,iv:bbixvEeCnAbnE/4draV0dQHyYHrDc5fIWngDYryCJIE=,tag:achnscHtpdmKXuNbkC+JsA==,type:str]
+ secretName: ENC[AES256_GCM,data:jezDqAKhwduZ8XCvOcE=,iv:bbixvEeCnAbnE/4draV0dQHyYHrDc5fIWngDYryCJIE=,tag:achnscHtpdmKXuNbkC+JsA==,type:str]
# Mount the ldap certificate to /certs
volumeMounts:
- name: ldap-cert
@@ -77,7 +77,7 @@ spec:
volumes:
- name: ldap-cert
secret:
- secretName: ENC[AES256_GCM,data:Ek4HeexOPShRro49vSM=,iv:EX77mKfLsiPd/j+gBWI0fm3nUemMQRgOOwXeB1Lt3nU=,tag:goEbTSoqtU0hC313HbDcyA==,type:str]
+ secretName: ENC[AES256_GCM,data:Ek4HeexOPShRro49vSM=,iv:EX77mKfLsiPd/j+gBWI0fm3nUemMQRgOOwXeB1Lt3nU=,tag:goEbTSoqtU0hC313HbDcyA==,type:str]
# Mount the ldap certificate to /certs
volumeMounts:
- name: ldap-cert
@@ -109,8 +109,8 @@ spec:
pathType: Prefix
tls:
- hosts:
- - auth.midnightthoughts.space
- - ldap.midnightthoughts.space
+ - auth.midnightthoughts.space
+ - ldap.midnightthoughts.space
secretName: auth-midnightthoughts-tls-secret
postgresql:
enabled: false
@@ -124,13 +124,13 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrRXA3VEdvYytyWjNxcURl
- SklXNGNhYkJHU1BuT1AxNWJ4RmRQNkVmSENzCk5aMlhUWG5MazBLVWQ5TlpBQXNI
- Z0ZYbXlOQXQwSHVUZ0RCZWgramxFR2cKLS0tIE9OR2xqeHk1aC82T0V0WVpOMGp1
- ZmVhU2VlRkM0bFhEaDEvQ1dDOXU2Z1EKG1SxgOEoxMyMrb7y42Hay2/HwZmtY97N
- a43EwpiTAHgWn9hPo74gWOGipMZTdWOI0Zxd0Lp9z4plHoQ057mF4A==
- -----END AGE ENCRYPTED FILE-----
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrRXA3VEdvYytyWjNxcURl
+ SklXNGNhYkJHU1BuT1AxNWJ4RmRQNkVmSENzCk5aMlhUWG5MazBLVWQ5TlpBQXNI
+ Z0ZYbXlOQXQwSHVUZ0RCZWgramxFR2cKLS0tIE9OR2xqeHk1aC82T0V0WVpOMGp1
+ ZmVhU2VlRkM0bFhEaDEvQ1dDOXU2Z1EKG1SxgOEoxMyMrb7y42Hay2/HwZmtY97N
+ a43EwpiTAHgWn9hPo74gWOGipMZTdWOI0Zxd0Lp9z4plHoQ057mF4A==
+ -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-12-27T23:01:27Z"
mac: ENC[AES256_GCM,data:3Kfrwuqv7Kb+1NdMhX0GxYO5DAsexcpCtOAZ52BvmU0CVX8i1dn0/0XrU+ypfVVs0z4z3zrgUKDJxg80AqNApfSzdT+YN7m+vjlpOQYszVk/7BygRCqv3CqE1AMKbdXLkhFMbBfVwA8Z/2mV/s3zsA+Rxna4SeOOX6pe+fAj/0A=,iv:i1B7LsQ9MeZrhwK3Q+1GsF1T3y9L9GG0aeeKafJI5X8=,tag:mm0ySZCaUNNRRZI8NIQDZA==,type:str]
pgp: []
diff --git a/apps/base/jenkins/release.yaml b/apps/base/jenkins/release.yaml
@@ -25,17 +25,17 @@ spec:
additionalContainers:
- sideContainerName: nodejs
image:
- repository: node
- tag: 23
+ repository: node
+ tag: 23
command: sleep
args: "99999999"
resources:
- requests:
- cpu: 512m
- memory: 512Mi
- limits:
- cpu: 512m
- memory: 1024Mi
+ requests:
+ cpu: 512m
+ memory: 512Mi
+ limits:
+ cpu: 512m
+ memory: 1024Mi
controller:
admin:
username: admin
@@ -72,7 +72,7 @@ spec:
tls:
- secretName: jenkins.midnightthoughts.space-tls
hosts:
- - jenkins.midnightthoughts.space
+ - jenkins.midnightthoughts.space
persistence:
enabled: true
size: 8Gi
@@ -85,13 +85,13 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L25sUzlCejVNM3BLM3ZD
- enVDQXhLK2lnb0hTOE5CNEN0Y0Q5eThpVXhBCmZDczU4VzM2R1F1cmpPWm5iQk5v
- WXdXMXM3Y3VOazlxZUttdE9RVThrMEkKLS0tIGdyMHl3dzdPV0hDeUsxTnNGL1BK
- aW5QQ2V1LzhuMys0N01PdVJsMnpUcEUK1VYKGY8eIe1LixY1hCw2MGb8gFxerXCI
- W3m+QgsoKukbu5v9xd3PbsU2qfGncsOb/7q1hX4H6tKUAFnTRMWC/g==
- -----END AGE ENCRYPTED FILE-----
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L25sUzlCejVNM3BLM3ZD
+ enVDQXhLK2lnb0hTOE5CNEN0Y0Q5eThpVXhBCmZDczU4VzM2R1F1cmpPWm5iQk5v
+ WXdXMXM3Y3VOazlxZUttdE9RVThrMEkKLS0tIGdyMHl3dzdPV0hDeUsxTnNGL1BK
+ aW5QQ2V1LzhuMys0N01PdVJsMnpUcEUK1VYKGY8eIe1LixY1hCw2MGb8gFxerXCI
+ W3m+QgsoKukbu5v9xd3PbsU2qfGncsOb/7q1hX4H6tKUAFnTRMWC/g==
+ -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-12-22T14:57:36Z"
mac: ENC[AES256_GCM,data:rej/F7igPPMx3P13rlHKjVk6yPZzHwsDbMAoXMjKuU5J5N3q45kZU3eBdifMAKjYtRuNdpM7d8rqcurQH08L6bIOCCrb8p5/ynFNYDl99F9480Lq2jvvRE9oTc6COaWlCadnpu+Qz/BBNN3Fp9JrovuUXDO5xfqkMLK23a0N3X4=,iv:Cs6ALE154TBSmx/iGaAPLFzFn0TxgdTtcL/Jalp4p4I=,tag:697cRQkyMBbIJBKXXHNVNQ==,type:str]
pgp: []
diff --git a/apps/base/mariadb-operator/release.yaml b/apps/base/mariadb-operator/release.yaml
@@ -1,4 +1,3 @@
----
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
@@ -37,16 +36,16 @@ spec:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
- matchExpressions:
- - key: app.kubernetes.io/name
- operator: In
- values:
- - mariadb-operator
- - key: app.kubernetes.io/instance
- operator: In
- values:
- - mariadb-operator
- topologyKey: kubernetes.io/hostname
+ matchExpressions:
+ - key: app.kubernetes.io/name
+ operator: In
+ values:
+ - mariadb-operator
+ - key: app.kubernetes.io/instance
+ operator: In
+ values:
+ - mariadb-operator
+ topologyKey: kubernetes.io/hostname
pdb:
enabled: true
maxUnavailable: 1
diff --git a/apps/base/traefik/release.yaml b/apps/base/traefik/release.yaml
@@ -135,8 +135,8 @@ spec:
instanceLabelOverride: traefik
topologySpreadConstraints:
- labelSelector:
- matchLabels:
- app.kubernetes.io/name: '{{ template "traefik.name" . }}'
+ matchLabels:
+ app.kubernetes.io/name: '{{ template "traefik.name" . }}'
maxSkew: 1
topologyKey: kubernetes.io/hostname
whenUnsatisfiable: ScheduleAnyway
diff --git a/infrastructure/controllers/hubble_ui.yaml b/infrastructure/controllers/hubble_ui.yaml
@@ -1,4 +1,3 @@
----
apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
@@ -25,26 +24,19 @@ spec:
interval: 12h
values:
agent: false
-
operator:
enabled: false
-
cni:
install: false
-
hubble:
enabled: false
ui:
# enable Hubble UI
enabled: true
-
standalone:
# enable Hubble UI standalone deployment
enabled: true
-
relay:
enabled: false
-
envoy:
enabled: false
-
