cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 379998394cf9a274e1b778b0c4b99886ebb0518d
parent 5e8f73a11d4fc3c0bc150e6b04b0fa71bd11a166
Author: MTRNord <mtrnord1@gmail.com>
Date:   Fri, 20 Dec 2024 02:38:36 +0100

Deploy gerrit

Diffstat:
Mapps/base/gerrit/gerrit_cluster.yaml | 202++++++++++++++++++++++++++++++++++++++++----------------------------------------
Mapps/base/gerrit/rbac.yaml | 60++++++++++++++++++++++++++++++------------------------------
2 files changed, 131 insertions(+), 131 deletions(-)

diff --git a/apps/base/gerrit/gerrit_cluster.yaml b/apps/base/gerrit/gerrit_cluster.yaml @@ -29,102 +29,102 @@ spec: gerrits: # A primary Gerrit - metadata: - name: gerrit - labels: - app: gerrit + name: gerrit + labels: + app: gerrit spec: - mode: PRIMARY - replicas: 1 - resources: - requests: - cpu: 1 - memory: 5Gi - limits: - cpu: 1 - memory: 6Gi - service: - type: NodePort - httpPort: 80 - sshPort: 29418 - site: - size: 1Gi - startupProbe: - initialDelaySeconds: 30 - periodSeconds: 10 - timeoutSeconds: 10 - successThreshold: 1 - failureThreshold: 10 - readinessProbe: - initialDelaySeconds: 30 - periodSeconds: 10 - timeoutSeconds: 10 - successThreshold: 1 - failureThreshold: 10 - livenessProbe: - initialDelaySeconds: 120 - periodSeconds: 10 - timeoutSeconds: 10 - successThreshold: 1 - failureThreshold: 3 - plugins: - # This way plugins are installed from the Gerrit-war file - - name: download-commands - - name: delete-project - - name: oauth - url: https://github.com/davido/gerrit-oauth-provider/releases/download/v3.5.1/gerrit-oauth-provider.jar - sha1: 8e3903ec02900fdec20208242959724cc10f240c - configFiles: - # Some configuration options are specific to the k8sgerrit setup. These - # will be set by the Gerrit Operator. - gerrit.config: ENC[AES256_GCM,data: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,iv:5vi8MEdhfrh3RKN8/Y7lbgRFLjZ7CT2SJm8fUkEX8Xo=,tag:m9ljWF6xMRkgKeMKaiJyBg==,type:str] - # Reference by name to the Secret containing secret files to be mounted to - # $SITE/etc - secretRef: gerrit-secure-config + mode: PRIMARY + replicas: 1 + resources: + requests: + cpu: 1 + memory: 5Gi + limits: + cpu: 1 + memory: 6Gi + service: + type: NodePort + httpPort: 80 + sshPort: 29418 + site: + size: 1Gi + startupProbe: + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 10 + successThreshold: 1 + failureThreshold: 10 + readinessProbe: + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 10 + successThreshold: 1 + failureThreshold: 10 + livenessProbe: + initialDelaySeconds: 120 + periodSeconds: 10 + timeoutSeconds: 10 + successThreshold: 1 + failureThreshold: 3 + plugins: + # This way plugins are installed from the Gerrit-war file + - name: download-commands + - name: delete-project + - name: gerrit-oauth-provider + url: https://github.com/davido/gerrit-oauth-provider/releases/download/v3.5.1/gerrit-oauth-provider.jar + sha1: 8e3903ec02900fdec20208242959724cc10f240c + configFiles: + # Some configuration options are specific to the k8sgerrit setup. These + # will be set by the Gerrit Operator. + gerrit.config: ENC[AES256_GCM,data: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,iv:AZkDuXRWAaehk4aDjXCiZQfODGw2OChxBwEohKY8oC0=,tag:6UVDyvmEwXJFSKSipiY/bA==,type:str] + # Reference by name to the Secret containing secret files to be mounted to + # $SITE/etc + secretRef: gerrit-secure-config # Gerrit Replica - metadata: - name: gerrit-replica - labels: - app: gerrit-replica + name: gerrit-replica + labels: + app: gerrit-replica spec: - mode: REPLICA - replicas: 1 - resources: - requests: - cpu: 1 - memory: 5Gi - limits: - cpu: 1 - memory: 6Gi - service: - type: NodePort - httpPort: 80 - sshPort: 29418 - site: - size: 1Gi - startupProbe: - initialDelaySeconds: 30 - periodSeconds: 10 - timeoutSeconds: 10 - successThreshold: 1 - failureThreshold: 10 - readinessProbe: - initialDelaySeconds: 30 - periodSeconds: 10 - timeoutSeconds: 10 - successThreshold: 1 - failureThreshold: 10 - livenessProbe: - initialDelaySeconds: 120 - periodSeconds: 10 - timeoutSeconds: 10 - successThreshold: 1 - failureThreshold: 3 - configFiles: - gerrit.config: ENC[AES256_GCM,data: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,iv:k5uI1NI7yzc5O23ZpoCPhTYPGCrpPioHosVW95li3mA=,tag:9Xn8hpxt5QZ1oYFp47I/ww==,type:str] - healthcheck.config: |- - [healthcheck "auth"] - enabled = false - secretRef: gerrit-secure-config + mode: REPLICA + replicas: 1 + resources: + requests: + cpu: 1 + memory: 5Gi + limits: + cpu: 1 + memory: 6Gi + service: + type: NodePort + httpPort: 80 + sshPort: 29418 + site: + size: 1Gi + startupProbe: + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 10 + successThreshold: 1 + failureThreshold: 10 + readinessProbe: + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 10 + successThreshold: 1 + failureThreshold: 10 + livenessProbe: + initialDelaySeconds: 120 + periodSeconds: 10 + timeoutSeconds: 10 + successThreshold: 1 + failureThreshold: 3 + configFiles: + gerrit.config: ENC[AES256_GCM,data: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,iv:+ALQ2yUQmRkoTlq72h2tlZEcy0RpsZD7QWF883PBV/M=,tag:O7UZQQezQQ8QJ8u0ZxDilQ==,type:str] + healthcheck.config: |- + [healthcheck "auth"] + enabled = false + secretRef: gerrit-secure-config sops: kms: [] gcp_kms: [] @@ -133,15 +133,15 @@ sops: age: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnRlNjSTZHemNXNGV3MkxF - YnNjR1FyVXRaNDFYZERWTlBUT1ZzOHdGbEZnCjJnSk9UV2dGZUwrZ1FRYUx4OTAw - VGFzVmRQNjZEMTNHbEdLOFhRc1J6UTQKLS0tIHRmR1lQa3FpRXRtRktoSmQxbjBT - S1BwUTZPZzFOWGt3N3VhQk1NQXBFS00KapXMUgYinBworKIkAm8F4LjZxC480Gzi - YK7eqa4AUxAgzEJB7W0ICToVJjOR3aAwjenAZVOPlUZfJuvCBoZweQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-12-20T00:03:21Z" - mac: ENC[AES256_GCM,data:SKUCbUzGxSRzcVZLPvtzStOcNW7DnvrSfQlPTi2l6038moVVWnlPm51cyHcq/SWM2J0jExnJd9L+bTDFeDZUeiv6E3D8KVXoWC93pEkAivA+8zkrdPwThOQbpjDFrRgyEKcKqZZh7WV6AMMBb4VEF7OikvnbTB15DEsWceFF5C4=,iv:RF8Y/thtKYOwUzs3qGlIVfX8XBhLSIRQUYLIHZwDOk4=,tag:6lsPbexluZv9QogFLUTYyg==,type:str] + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTT01ka3FacXprU3pUUEw1 + VUpSUnVXL2xiRTY5aUFNNUQzY3FLU1h6TDE0Ck5QdVRsNkE3ZWNieWlBZ2JXRHpy + MCsrdW5FeXA1bkpUMnc3ejZXRlBNT3cKLS0tIFYwWEVtQnB4OG1TQmVSTFZNbmJ5 + NjNaSzJWYk9xRmV5SWZDdDdMVnRSN1EKPu0DOAxCbQSzWVox0X/zN0hnjoaFArkt + JeiDPLdnDcjoJv5WijSJMN7TgtDq8EDc1c7NEx0gHiKarZSumAyjGg== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-12-20T01:38:31Z" + mac: ENC[AES256_GCM,data:4AxwZuCvW5eiodMXqQwU8kklFEpmbfc70rM7kXtq5XWnTTY84m60n1KzeNp1hHQxIAvGEa9PAQO5zabO7cRcIOtUqrudJYVTIaZNvKU6YYtBZd9gmrRZaJzNP8xc1vB+3Q86SOp1qzsPw89/y2KqPVMDhnzezCVRZ1qmSOeMJK4=,iv:ugg22VKUPXiOWFBVISqSHZmqAi119osEm0gLJvqIyks=,tag:qXBUUXdz4nfotMjP1gVOlg==,type:str] pgp: [] encrypted_regex: ^(gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 diff --git a/apps/base/gerrit/rbac.yaml b/apps/base/gerrit/rbac.yaml @@ -23,56 +23,56 @@ metadata: name: gerrit-operator rules: - apiGroups: - - "batch" + - "batch" resources: - - cronjobs - - jobs + - cronjobs + - jobs verbs: - - "*" + - "*" - apiGroups: - - "apps" + - "apps" resources: - - statefulsets - - deployments + - statefulsets + - deployments verbs: - - "*" + - "*" - apiGroups: - - "" + - "" resources: - - configmaps - - persistentvolumeclaims - - secrets - - services + - configmaps + - persistentvolumeclaims + - secrets + - services verbs: - - "*" + - "*" - apiGroups: - - "storage.k8s.io" + - "storage.k8s.io" resources: - - storageclasses + - storageclasses verbs: - - "get" - - "list" + - "get" + - "list" - apiGroups: - - "apiextensions.k8s.io" + - "apiextensions.k8s.io" resources: - - customresourcedefinitions + - customresourcedefinitions verbs: - - "*" + - "*" - apiGroups: - - "gerritoperator.google.com" + - "gerritoperator.google.com" resources: - - "*" + - "*" verbs: - - "*" + - "*" - apiGroups: - - "admissionregistration.k8s.io" + - "admissionregistration.k8s.io" resources: - - "validatingwebhookconfigurations" + - "validatingwebhookconfigurations" verbs: - - "*" + - "*" - apiGroups: - - "networking.k8s.io" + - "networking.k8s.io" resources: - - ingresses + - ingresses verbs: - - "*" + - "*"