cluster

commit 49a5928d11e777de42df7452996abfd30ead7b02
parent deb4b36a64d1ddf3fabc61ce3a6eb9b17d029883
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed,  1 May 2024 18:30:02 +0200

Finish vaultwarden setup

Diffstat:
M
apps/2024_cluster/kustomization.yaml
 | 
1
+
M
apps/base/vaultwarden/release.yaml
 | 
22
+++++++++++-----------
M
apps/production/kustomization.yaml
 | 
2
--
D
apps/production/vaultwarden-values.yaml
 | 
49
-------------------------------------------------

4 files changed, 12 insertions(+), 62 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -4,5 +4,6 @@ resources:
   - ../base/victoria-metrics-k8s-stack
   - ../base/traefik
   - ../base/postgres-operator
+  - ../base/vaultwarden
 patchesStrategicMerge:
   - postgres-operator-values.yaml
diff --git a/apps/base/vaultwarden/release.yaml b/apps/base/vaultwarden/release.yaml
@@ -22,7 +22,7 @@ spec:
         timeZone: Europe/Berlin
         database:
             type: postgresql
-            uriOverride: ENC[AES256_GCM,data:w/6x5AEf5ueXfann0wn5kGnuLNuhB/prmmS8058GbCdH3GmiQjDt1q8iHEd0Er8ra69CThUNwJjBqjmc8JLDP00aekHKVhQ/eS8RJJQxtcX1lXXkDxeREafGSyIZiVbrtyIrkde4NszP,iv:oOUPJJnb4pMjqdGYcHcYPEyDQk+4EqBMZ3/h8ZVQQUU=,tag:P0RluEHHFgsb8XnBOWcqjw==,type:str]
+            uriOverride: ENC[AES256_GCM,data:ptv/omzNlx38wVRgnFS2FCFgPrP+vkvZU9McvBK5GNK49nXYwHL9C9FukcowC23I8qSAWs65EJwDe8Yy2eeyr6FOtN3/kJuJyVyHgPMvRpXg2+89vBCbmfm51AENt6XFD6Se0foFKczxJmJRXCG6A+cevRkXoVlMz23k5152BTPnElqGDiPqCPuCejYKRFhzjg2vZe38M7BX6zVliLw=,iv:PRX2nl8eFnPg5+SBZvC+C2pgQDWgnyTU7ShapP808nk=,tag:89RVmNFGaOfheaSMuncWpA==,type:str]
         ingress:
             enabled: true
             tlsSecret: vault.midnightthoughts.space-crt
@@ -37,12 +37,12 @@ spec:
             fromName: Vault Administrator
             username: mtrnord@nordgedanken.dev
             password:
-                value: ENC[AES256_GCM,data:AgDwXONkyGu7SnNQvouFBQ==,iv:YQJb1lKuSH0WpxG1cN+1qe6HoT7QWxYSj7IOP8me9+c=,tag:dvabLfj8Gh4ROzGbqKtn9w==,type:str]
+                value: ENC[AES256_GCM,data:0lIc8kg+mBC9pwIYwx8X5Q==,iv:NWuUVRN5Jh3MwpsSFNmsTVHWZ35YshdHMFpfcheLUVk=,tag:UT11BacWVPjybwgeZIiA3A==,type:str]
             security: force_tls
             port: 465
         data:
-            name: ENC[AES256_GCM,data:DvQbNiVvUcg7p9KCx8kv1w==,iv:1EmHJWGrsppCCWjXOvkEEfyLh8Juq2z0Vglqn9ShR8I=,tag:h0XqvpB2Gy5dD1b+2QgmGQ==,type:str]
-            size: ENC[AES256_GCM,data:C9Dj,iv:Aa5J4qO7TShpL7PVFMTaYVvNROxpar6wIEHsCFLzxVo=,tag:fUkk80Lho58Tsd4DSsLFSg==,type:str]
+            name: ENC[AES256_GCM,data:I/sQJP+mDOO4K/NpYmScUA==,iv:HvFxdcAjBKM5MZKFb44G6O8tU0p6b9BdaK0xj11PdkI=,tag:4ZBDz6m6yARVUxwqwfPgSw==,type:str]
+            size: ENC[AES256_GCM,data:6Vvn,iv:GdZuNn0Ihu3jt+cV6I6M0ZG/kFAUqRJkH3j3FRgBAMQ=,tag:LUNs9a8dscM9MXl1UniiPQ==,type:str]
         resources:
             requests:
                 cpu: 50m
@@ -56,14 +56,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQVhMdkxwYi9tNTR2dERJ
-            YUdkK3hPMy81eng3UnBQWTB3NkRhWW5kaFM0CmkwRVgyNFI0K0NhVzVJNitDemJU
-            RE9WTTBEQldTME8xcUgxdkJGUm1oSkUKLS0tIFc5VUcrdGZ0ZWpxWVB0Mkk0eHND
-            NE9aM3ZPS295SHZQK0xHWVV4U2FmekkK0yOv4tkThe1T+bYP+kwP2VVkFwLmYTI1
-            R/uDXF6RhNVthvETKaloBeYSz4BU19f9mUVT4mcs0hOEfqbQCk5/Sw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0eGlYbVZ6OWhnTU9xYjFy
+            YnMzeFdBZjdDRDNiK3RFaU9rMnRscHRyZjFFCnFGSE16TzVNY1EybkxxQlpFMkZL
+            dUF2Q0sxNHZuSHNWMEhjTzJubytRNjQKLS0tIE5ZR3V4MXUyNmxOQ29aU0plZHNj
+            dkljd01LZWlDdjJRWVpVTmlaTkUwTGcKTO6jwFG8Hr/Ud9dlFiSV5iaBW6Fe6bf2
+            whfA5dNK8CMwXlQ3ESpIu9RMwOmxaSuZOc3EWlzjO4n3ZmNDue02Og==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-01T13:16:06Z"
-    mac: ENC[AES256_GCM,data:HRl+agq3mJ/qv4ydb+foFLntuUuzv6VyxBAlD572BjMPo7gIahRVSJxEQZgdXD1yg0ZQvTCBuhVkvSekoJ/cKW0b2I3VkKmibCs5JpO/58BCKiZUnkld108oOM/lLW4IewmWDrU6xqCxk+9j5H40WcYeBL5AOmk8NwytuDVkpi0=,iv:bLZcd16kbBjfF5+t/lN3Vj3FzD1yMxrsz+oxetqSszs=,tag:bvW1KR4X5g3LQ1LWg4UCfw==,type:str]
+    lastmodified: "2024-05-01T16:29:41Z"
+    mac: ENC[AES256_GCM,data:cuah+l3ZTboKFKrXqlOdEUle+k2BeadLiDCen6awAPNaXEn6UUuaGJyrDFlJyUHyqcBs59tAJX/tZt28vjpGph/qXhb9Ps4+exBxprnErbwA91VLeYVsgdEBgDTOCodTGp9mKo7QzoCItMTqiJHAzTCMwxHgRlhxmE3uC1DljzU=,iv:zOLIKwSK4P6z1TTd7jWXz9VL0ikSwdf4oibskphbbHk=,tag:+dvxfmEdXqT+2ONmxH8YjA==,type:str]
     pgp: []
     encrypted_regex: ^(uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
     version: 3.8.1
diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml
@@ -1,7 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  #- ../base/vaultwarden
   #- ../base/cosign
   #- ../base/woodpecker
   #- ../base/kube-prometheus-stack
@@ -38,7 +37,6 @@ resources:
   #- ../base/workadventure
 patchesStrategicMerge:
   #- cosign-values.yaml
-  #- vaultwarden-values.yaml
   #- woodpecker-values.yaml
   - loki-stack-values.yaml
   - postgres-operator-values.yaml
diff --git a/apps/production/vaultwarden-values.yaml b/apps/production/vaultwarden-values.yaml
@@ -1,49 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta2
-kind: HelmRelease
-metadata:
-  name: vaultwarden
-  namespace: k8s-at-home
-spec:
-  chart:
-    spec:
-      version: "5.3.2"
-  values:
-    env:
-      DOMAIN: https://vault.nordgedanken.dev
-      SMTP_HOST: mail.nordgedanken.dev
-      SMTP_FROM:
-        valueFrom:
-          secretKeyRef:
-            name: vaultwarden-envs
-            key: smtp-user
-      SMTP_PORT: 465
-      SMTP_SECURITY: force_tls
-      SMTP_USERNAME:
-        valueFrom:
-          secretKeyRef:
-            name: vaultwarden-envs
-            key: smtp-user
-    ingress:
-      main:
-        enabled: true
-        annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-http
-        hosts:
-          - host: vault.nordgedanken.dev
-            paths:
-              - path: /
-                pathType: Prefix
-                service:
-                  port: 80
-              - path: /notifications/hub/negotiate
-                pathType: Prefix
-                service:
-                  port: 80
-              - path: /notifications/hub
-                pathType: Prefix
-                service:
-                  port: 3012
-            tls:
-              - secretName: vault.nordgedanken.dev-tls
-                hosts:
-                  - vault.nordgedanken.dev