commit 1cee7bfb2ab1dd145c41941e63dbc9f70217cc5a
parent 6727bfab4a4a26354c8c9c60510f91b7367356b9
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 19 Mar 2025 18:34:04 +0100
Migrate jenkins to HTTPRoute
Diffstat:
2 files changed, 63 insertions(+), 12 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -382,6 +382,18 @@ spec:
certificateRefs:
- kind: Secret
name: rook.midnightthoughts.space-tls
+ - name: https-midnightthoughts-jenkins
+ protocol: HTTPS
+ hostname: "jenkins.midnightthoughts.space"
+ port: 443
+ allowedRoutes:
+ namespaces:
+ from: "All"
+ tls:
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: jenkins.midnightthoughts.space-tls
- name: https-nordgedanken-root
protocol: HTTPS
hostname: "nordgedanken.dev"
diff --git a/apps/base/jenkins/release.yaml b/apps/base/jenkins/release.yaml
@@ -39,8 +39,8 @@ spec:
controller:
admin:
username: admin
- password: ENC[AES256_GCM,data:vPET46urbqer50IXBuyEq2kZpr2iyg==,iv:TfmHxzaRmwrg3xbwVTTzIs65ycQ/QJgxryXG4GXVnzY=,tag:8pPXFMk0GkszaX3V825d/Q==,type:str]
- jenkinsAdminEmail: ENC[AES256_GCM,data:oPWp3+itOuhKkrjMLA5CoxGJhwPjUz1b,iv:QcnXO1CZhhWIIL06pMDOKllYB4mr2tiajMCGPWJ3aMc=,tag:Qhn70iupjXHRdvvKkLn4BA==,type:str]
+ password: ENC[AES256_GCM,data:Pm+cj5o1feQBYHcUGcM8ey6N6pewKQ==,iv:zazq+1H9/7n4tDX7W67NHtY2+4jslSRy+KaTreXvIzw=,tag:lfcMNH2bGxSi7x0cL/pGZQ==,type:str]
+ jenkinsAdminEmail: ENC[AES256_GCM,data:VE6MA35EBxdKiJHvCN4GugeqKVogVjtU,iv:GlDis95N+AnbC+BTbyHZL4w0KWtZjTswXXEGCDQq7Uk=,tag:Bogg8hWmFyBQ5YVPEKDZyA==,type:str]
installLatestSpecifiedPlugins: true
overwritePlugins: true
installPlugins:
@@ -58,12 +58,12 @@ spec:
- plain-credentials:183.va_de8f1dd5a_2b_
- htmlpublisher:1.37
JCasC:
- securityRealm: ENC[AES256_GCM,data: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,iv:Oe0J4ScZ7UoXX/ZDE3dR02CcmGxF/DJnntO/w4vnNVg=,tag:3ufKztAIehVBkiV0dO5hkg==,type:str]
+ securityRealm: ENC[AES256_GCM,data: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,iv:p1i5A13Q/6+tfahE5iPJBLj+ith3HJg4XkKJSRPtHQM=,tag:mW9HVF0XwifDd3DyMTB3hQ==,type:str]
authorizationStrategy: |-
loggedInUsersCanDoAnything:
allowAnonymousRead: true
ingress:
- enabled: true
+ enabled: false
apiVersion: networking.k8s.io/v1beta1
annotations:
external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
@@ -87,14 +87,53 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L25sUzlCejVNM3BLM3ZD
- enVDQXhLK2lnb0hTOE5CNEN0Y0Q5eThpVXhBCmZDczU4VzM2R1F1cmpPWm5iQk5v
- WXdXMXM3Y3VOazlxZUttdE9RVThrMEkKLS0tIGdyMHl3dzdPV0hDeUsxTnNGL1BK
- aW5QQ2V1LzhuMys0N01PdVJsMnpUcEUK1VYKGY8eIe1LixY1hCw2MGb8gFxerXCI
- W3m+QgsoKukbu5v9xd3PbsU2qfGncsOb/7q1hX4H6tKUAFnTRMWC/g==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWG9vcW9ialpTVDJWMW9y
+ QklMTmZYSmgySVBKcHUwcXAxTXpRUitsVkRRCll1UkZqcXpKZ0EyUUVmSkg1RElo
+ TENGTnJTK2MrTjZGLzFLSEJtWVhyakUKLS0tIFNvUlJzRTdsNG8wWHYyQmVmTUE5
+ RitiT3ZEaWd1K1BBdEJCcEJiTFNjVFEKSw9E+7saeYa9m1yPRatBabnwL10Vdd27
+ lfByKaFdOzbZBtmWKIagbUcLoSG61iOEMXSOODeIz4sUUm9KV8n7QQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-12-22T14:57:36Z"
- mac: ENC[AES256_GCM,data:rej/F7igPPMx3P13rlHKjVk6yPZzHwsDbMAoXMjKuU5J5N3q45kZU3eBdifMAKjYtRuNdpM7d8rqcurQH08L6bIOCCrb8p5/ynFNYDl99F9480Lq2jvvRE9oTc6COaWlCadnpu+Qz/BBNN3Fp9JrovuUXDO5xfqkMLK23a0N3X4=,iv:Cs6ALE154TBSmx/iGaAPLFzFn0TxgdTtcL/Jalp4p4I=,tag:697cRQkyMBbIJBKXXHNVNQ==,type:str]
+ lastmodified: "2025-03-19T17:32:50Z"
+ mac: ENC[AES256_GCM,data:CBrCRHfBSEyjIBW/wLVygPoCThl+Ehhqb851qZAQ/NFCF/0HBvci3r/bveVOvpsQZ36ZsAM4OM6fqaN9tN+uHVjIjmsKwrN+dlWbwkZMvnwS398u0t6+JU0ybsUjnnZOpNh+7AwVJ1d0+2SA6hOoT0Dwm81sGb8AsG7MzliuT8M=,iv:Iv2T87hkpfpEwQtjk/pZ1m/flbug1nqNtN4AuFaUzRI=,tag:CCdDyWOTYpCPaKS4iXnQKQ==,type:str]
pgp: []
- encrypted_regex: ^(jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: jenkins
+ namespace: jenkins
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - jenkins.midnightthoughts.space
+ rules:
+ - backendRefs:
+ - name: jenkins
+ port: 8080
+ timeouts:
+ request: 240s
+ backendRequest: 0s
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWG9vcW9ialpTVDJWMW9y
+ QklMTmZYSmgySVBKcHUwcXAxTXpRUitsVkRRCll1UkZqcXpKZ0EyUUVmSkg1RElo
+ TENGTnJTK2MrTjZGLzFLSEJtWVhyakUKLS0tIFNvUlJzRTdsNG8wWHYyQmVmTUE5
+ RitiT3ZEaWd1K1BBdEJCcEJiTFNjVFEKSw9E+7saeYa9m1yPRatBabnwL10Vdd27
+ lfByKaFdOzbZBtmWKIagbUcLoSG61iOEMXSOODeIz4sUUm9KV8n7QQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-03-19T17:32:50Z"
+ mac: ENC[AES256_GCM,data:CBrCRHfBSEyjIBW/wLVygPoCThl+Ehhqb851qZAQ/NFCF/0HBvci3r/bveVOvpsQZ36ZsAM4OM6fqaN9tN+uHVjIjmsKwrN+dlWbwkZMvnwS398u0t6+JU0ybsUjnnZOpNh+7AwVJ1d0+2SA6hOoT0Dwm81sGb8AsG7MzliuT8M=,iv:Iv2T87hkpfpEwQtjk/pZ1m/flbug1nqNtN4AuFaUzRI=,tag:CCdDyWOTYpCPaKS4iXnQKQ==,type:str]
+ pgp: []
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
