cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 196b10f3f6fcccdf6de30422c1bb2ab448b0f7c3
parent 283e98753a8e7c6a9588f191ddd9b0ee447bcf70
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 19 Nov 2023 00:10:39 +0100

enable persistence for parseable

Diffstat:
Mapps/base/parseable/release.yaml | 11+++++++++++
Mapps/production/secrets/parseable-secret.yaml | 50+++++++++++++++++++++++++-------------------------
Mapps/production/vector-values.yaml | 2+-
3 files changed, 37 insertions(+), 26 deletions(-)

diff --git a/apps/base/parseable/release.yaml b/apps/base/parseable/release.yaml @@ -25,6 +25,17 @@ spec: value: "arm64" effect: "NoSchedule" parseable: + persistence: + staging: + enabled: true + storageClass: "nfs-csi" + accessMode: ReadWriteOnce + size: 1Gi + data: + enabled: true + storageClass: "nfs-csi" + accessMode: ReadWriteOnce + size: 5Gi local: true localModeSecret: - type: env diff --git a/apps/production/secrets/parseable-secret.yaml b/apps/production/secrets/parseable-secret.yaml @@ -5,16 +5,16 @@ metadata: namespace: parseable type: Opaque stringData: - addr: ENC[AES256_GCM,data:nJ01OkmDSAeRS5Eh,iv:2KqqY1EJrrAdSz1jc91yQneSpCOnAR36FkrbJ4B0cK0=,tag:6t/S1xWm2e8sDKfsL8o24g==,type:str] - staging.dir: ENC[AES256_GCM,data:e8u4O2bn0MW0,iv:QwBHjgYdx26asQhX3QnFGqD9QslfJSZsvcnWr8GhoHA=,tag:QLE3ttJTEauy/NFRLEJbqQ==,type:str] - fs.dir: ENC[AES256_GCM,data:ZowBlnkq,iv:DKel7xTlSrFTB0ruVptHn7ODFUrczETYQdq2BumY7SA=,tag:dmqKYSoaC7WOm9CqQR17TA==,type:str] - username: ENC[AES256_GCM,data:UCcEM9b98Q==,iv:0oAhQ1bJqTEAwNI6hQNA+KnYL5wtq2GT4+KLoRZniSQ=,tag:w98mBanbaFHJrDouejrgvA==,type:str] - password: ENC[AES256_GCM,data:9QkCCZGv2THtna4xM7L5gKcAJaBW9bEJkGu5ELWrClwHYqmbduT0AbJTpBxxb8Hkubx5EdlwGN9k4EjVYhilCg==,iv:X1CZiZJzzoEsw5bgcjXluH7M24ic6Sx33lp+Yj6qZb8=,tag:Ph/DW0CWH8wbidGO3ve19Q==,type:str] - oidc.client.id: ENC[AES256_GCM,data:8C5Gka/M9Q4W,iv:PpF1A+/o+jW5vvLzoJHxJn025acdJo8FO01xQILTAsM=,tag:WyWWk/ZWlTc+k5TXdgWdtQ==,type:str] - oidc.client.secret: ENC[AES256_GCM,data:DEfQWO2OM9OUS51uw6lAGeDGw/b6k08KAHdXcm57Dtw=,iv:VJQe/uFhL8iQ2GhSxVXvbQNlUBPygo7JfL6HvvjYVjs=,tag:/dIi1GumLEVPr2bABUrgIg==,type:str] - oidc.issuer: ENC[AES256_GCM,data:fZmjzpE0B7j4oZU3v00ZKm25vru4kOce3hEeK/RTF/hEQVXko7jkGS5JyP+Cen4990ZJdj0=,iv:6yVRXDs9NeXlMGHbU4dZbtDEhLL6D/A3bsSZUN9C73s=,tag:EJTVNVDYu+Nf+DKRzLFv5Q==,type:str] - origin.uri: ENC[AES256_GCM,data:eugFUfkBSxPLhY0uDpz0Ptl3gnoSJnWTHAAXccgF6dAAd377oG0gTA==,iv:2j4wH/6NdOHN9VX2tpzq6dIrHiwexq41taPORfpZh5A=,tag:+JjZvpYTp2u8ROEiLy3nIA==,type:str] - send.anonymous.usage.data: ENC[AES256_GCM,data:rkvWeWU=,iv:Hf5RHyG47iCQjDNFH1QbkxBGqJtv0oyrWue9zzvkUIE=,tag:I+6YXgQ1a2nj5c03SqZ/xA==,type:str] + addr: ENC[AES256_GCM,data:hdoUu9v54pHndi5G,iv:iIQHs0L6oGOIX0BCMfHnR+ZBaztPho2VSSEMjpjOqII=,tag:zl0keUl148RIH1vBxc1smQ==,type:str] + staging.dir: ENC[AES256_GCM,data:5LyHWuSaBalv,iv:XDQ1tprnetaKRWONy6+XfLeVLy+PL+ZSI/O4d/+VxRg=,tag:Zh/VqootwMRA8mo1bz0XeQ==,type:str] + fs.dir: ENC[AES256_GCM,data:bebtV2Rr,iv:3PJihCoUmlxsZ63x7B9FJ7m/tOvsvLPMYyTwjDZZUM4=,tag:hb3Cn0y0+D0kjQIlf1ptWg==,type:str] + username: ENC[AES256_GCM,data:PdpkyS1o+Q==,iv:xYkqxEmXrhAEekUXGSbHm8ov4sFnn2sI9S6rvr0VjBo=,tag:DnkAESGZhyMAJhijY6Qq9Q==,type:str] + password: ENC[AES256_GCM,data:7EwOO3V4qkyq4adcyZSUraHtclnQHe4sBTRXMaCMHDjrC8SblCBf3Z5a9Nl0Nqn77yEacfpTe1WsHc0aN6CyRw==,iv:wvnPORmGydeUfc22P7Bq5BlzLYyBoHyHKrbzRRjeXSk=,tag:oq22lNBglnyECFCU0m+dOg==,type:str] + oidc.client.id: ENC[AES256_GCM,data:YbqTrwAma11D,iv:pDU4b54Nz+/KAxNuycjWiSwkP37Wz4NDzbRR7VguEHw=,tag:Eu14MvzHZEHLqMxHEmydZw==,type:str] + oidc.client.secret: ENC[AES256_GCM,data:4znZIUEROJgLJ4w0+0EwjJjibL5hlJjgaM7Gq4hAbrQ=,iv:QOH6+WunlBgwfBllajrmUhK+K70U2837tReBV6WnEzk=,tag:ddlOe+IoL91wOEmRtpQ2cA==,type:str] + oidc.issuer: ENC[AES256_GCM,data:Gvy9kmDk5hKP/Ow9nlmfCLvXfYNoEJCggTcxI7ID3CahHPGwwDH/X0wrY0zeARAV5v41UMo=,iv:cp5B3MqvsLo98D921CRQ+jeufKHZ2DYb/YPCPDINgiY=,tag:Eo0i2gY417vdLFnJvef0bg==,type:str] + origin.uri: ENC[AES256_GCM,data:7gDuv1SVUy9D2QfWVwQOYG6bcjNm5TfH6ag/0yKCCCHRDKRsASPBNw==,iv:ObRe38PwGwrTJBm3byijfcsMnfoazl1vnr2/OKX8ebs=,tag:Ir+xSU8MGhMKM3knTh5kgA==,type:str] + send.anonymous.usage.data: ENC[AES256_GCM,data:geLiA6c=,iv:4sVijjm7hnCczB7RoPLH5rsalyM38tvbOh/kYLkp0p4=,tag:5GASKJXDYzSnKUHNPQyRPQ==,type:str] sops: kms: [] gcp_kms: [] @@ -24,14 +24,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvL0JKZ2hMTDI5UkdxSUFp - cHBzbVZQUEVKdXJxV2ZNQUt5d0cyZWludVhZCk81WWMzbnlDWTYxeE03THpiUGFQ - aU5IdnFkcEFGbkR0T1BHVU8rbEdMbXcKLS0tIEd1bXN6S0ZxQUE5aXhUOFpsYjhk - M2hHejRwM21QZ2ZqVWczL3JadGR5R3cKqYVz8KWHumjHnIi7MecEon0YO9EtO6kE - XVfVxwwD+Rd05OAGAo2J0oj+8BatTG3hnOs++9Gf+McMxqEq5G7d3w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKdHZReTlGZDBSSmhaUHNr + MVo0VVBXeEg1VWxnVEtDV0w2Y2dHUlEvR0VnClVVY1RLN3JFZkUrdVE1QmlJSktG + NHd1VXIzNTRDdGUzY3IzMW9aNmNxcmMKLS0tIHFNVFJMejhrV3JIK041TGxYdXFx + cFNLd3RVNE1HcVc2MUVMSWoyOHVCSHMKWlUaM7FsU8o2+eT3o6TyfDLS7fvZUi4C + oQKO8lBqu0J30KWo4UaMEKa8gWlZyN2Su6BuXAAszAK6GjSmAq8VYQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-11-18T23:01:14Z" - mac: ENC[AES256_GCM,data:d1aQYS73K8hpWMpwKcQ/D1mHx1/q9D6CU/GNEUErCCnRudzALL2z2EunVIfn8Wpu4q68D9Uo++EkfQZhn5M1QWm5Ginktodi3yZ9y/Tc8eLPa50N+qG2owDWxCVWSa1dcrLB7JYRs3PBCb8gkSWihqvU4xPw432SGCcvRqxDkJ0=,iv:5kJelCeIBy3JEPwBZYsojXXP3AAG9xVCAwIHAE2D7Zg=,tag:/gw3QoRMB5hley/DueWM9w==,type:str] + lastmodified: "2023-11-18T23:05:41Z" + mac: ENC[AES256_GCM,data:ON8Cmng1db1vhrth5MKvT0NconxXjifHkA/gYv2zzbH8LFNbn4SLjhddJ41pzNSh6TmlZOm+jrQAEFWDbXLFly65xd04p0bIfAcWGwcc06aTK9GCOe+6KK8vHDb4E0SdGHStJDdrxLZVmQhsk+D9hXhQtOfhYkR9A/x3SoKHZns=,iv:CxcsWich6kj/BPbu/Mg52kgHvsRNUsFswfF7fwIU7Xg=,tag:rw+RTZshga/kbDAbJn44Eg==,type:str] pgp: [] encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ version: 3.7.3 @@ -43,7 +43,7 @@ metadata: namespace: monitoring type: Opaque stringData: - password: ENC[AES256_GCM,data:RhNlS/rguNMJvRHpf4sy1/+VjQn9nUe2GVbdnWagW2CyuL77Ph7Dq6Vox1UV2enmQ6nvDD2vtOSLJr83Loyx6Q==,iv:LwhqtgDz9SehsN1HFywC/PgcJcT2pIeTYZ0gWROXRj0=,tag:yMoXvHAWLiOlWkboBv8tWg==,type:str] + password: ENC[AES256_GCM,data:yZx33xH7AHkC0oX+FbB6zqZprgoyxPRBtOYExod6g4wKhRNm0g3eU5TZT6yoPFMWKBLJPZAaq1ZDmCliNBDTMw==,iv:DyVb5pwQIqGfh4hO9wBC2cUtOUMCN7BqwjSaaz+bK+U=,tag:VJw3WCe3ooqsHeqdMD1tEw==,type:str] sops: kms: [] gcp_kms: [] @@ -53,14 +53,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvL0JKZ2hMTDI5UkdxSUFp - cHBzbVZQUEVKdXJxV2ZNQUt5d0cyZWludVhZCk81WWMzbnlDWTYxeE03THpiUGFQ - aU5IdnFkcEFGbkR0T1BHVU8rbEdMbXcKLS0tIEd1bXN6S0ZxQUE5aXhUOFpsYjhk - M2hHejRwM21QZ2ZqVWczL3JadGR5R3cKqYVz8KWHumjHnIi7MecEon0YO9EtO6kE - XVfVxwwD+Rd05OAGAo2J0oj+8BatTG3hnOs++9Gf+McMxqEq5G7d3w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKdHZReTlGZDBSSmhaUHNr + MVo0VVBXeEg1VWxnVEtDV0w2Y2dHUlEvR0VnClVVY1RLN3JFZkUrdVE1QmlJSktG + NHd1VXIzNTRDdGUzY3IzMW9aNmNxcmMKLS0tIHFNVFJMejhrV3JIK041TGxYdXFx + cFNLd3RVNE1HcVc2MUVMSWoyOHVCSHMKWlUaM7FsU8o2+eT3o6TyfDLS7fvZUi4C + oQKO8lBqu0J30KWo4UaMEKa8gWlZyN2Su6BuXAAszAK6GjSmAq8VYQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-11-18T23:01:14Z" - mac: ENC[AES256_GCM,data:d1aQYS73K8hpWMpwKcQ/D1mHx1/q9D6CU/GNEUErCCnRudzALL2z2EunVIfn8Wpu4q68D9Uo++EkfQZhn5M1QWm5Ginktodi3yZ9y/Tc8eLPa50N+qG2owDWxCVWSa1dcrLB7JYRs3PBCb8gkSWihqvU4xPw432SGCcvRqxDkJ0=,iv:5kJelCeIBy3JEPwBZYsojXXP3AAG9xVCAwIHAE2D7Zg=,tag:/gw3QoRMB5hley/DueWM9w==,type:str] + lastmodified: "2023-11-18T23:05:41Z" + mac: ENC[AES256_GCM,data:ON8Cmng1db1vhrth5MKvT0NconxXjifHkA/gYv2zzbH8LFNbn4SLjhddJ41pzNSh6TmlZOm+jrQAEFWDbXLFly65xd04p0bIfAcWGwcc06aTK9GCOe+6KK8vHDb4E0SdGHStJDdrxLZVmQhsk+D9hXhQtOfhYkR9A/x3SoKHZns=,iv:CxcsWich6kj/BPbu/Mg52kgHvsRNUsFswfF7fwIU7Xg=,tag:rw+RTZshga/kbDAbJn44Eg==,type:str] pgp: [] encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ version: 3.7.3 diff --git a/apps/production/vector-values.yaml b/apps/production/vector-values.yaml @@ -49,7 +49,7 @@ spec: password: ENC[AES256_GCM,data:ErE9OBUngFMWk8CmwV8xRQZi59masyLVJhs2CSuEHPUWD7CZcK6ykS8rkBN1qgNzKqJepbiiKDJVWc1f2gpP2g==,iv:OdlBNGY3XTWbrNFqkIoMa+BPS0IzHa/dDGqffgIgkDI=,tag:t9aE/2W/AGxtb+JGg0LmBw==,type:str] request: headers: - X-P-Stream: tetrademo + X-P-Stream: tetragon healthcheck: enabled: true path: http://parseable.parseable.svc.cluster.local/api/v1/liveness