cluster

commit ca63347f651fe46e49d10e7297b4dbcfa3acb440
parent 79f3c4740640a5ecbf213e677ab834587586f205
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 16 Sep 2024 11:13:59 +0200

Add coder

Diffstat:
M
apps/2024_cluster/kustomization.yaml
 | 
1
+
A
apps/2024_cluster/namespaces/coder.yaml
 | 
4
++++
M
apps/2024_cluster/namespaces/kustomization.yaml
 | 
1
+
A
apps/2024_cluster/secrets/coder.yaml
 | 
28
++++++++++++++++++++++++++++
M
apps/2024_cluster/secrets/kustomization.yaml
 | 
1
+
A
apps/base/coder/kustomization.yaml
 | 
6
++++++
A
apps/base/coder/release.yaml
 | 
42
++++++++++++++++++++++++++++++++++++++++++
A
apps/base/coder/repository.yaml
 | 
9
+++++++++

8 files changed, 92 insertions(+), 0 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -22,5 +22,6 @@ resources:
   - ../base/minecraft
   - ../base/minecraft_homeassistant
   - ../base/codeberg-runners
+  - ../base/coder
 patchesStrategicMerge:
   - postgres-operator-values.yaml
diff --git a/apps/2024_cluster/namespaces/coder.yaml b/apps/2024_cluster/namespaces/coder.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: coder
diff --git a/apps/2024_cluster/namespaces/kustomization.yaml b/apps/2024_cluster/namespaces/kustomization.yaml
@@ -13,3 +13,4 @@ resources:
   #- plausible.yaml
   - minecraft.yaml
   - codeberg-runners.yaml
+  - coder.yaml
diff --git a/apps/2024_cluster/secrets/coder.yaml b/apps/2024_cluster/secrets/coder.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: coder-db-url
+    namespace: coder
+type: Opaque
+stringData:
+    url: ENC[AES256_GCM,data:XLJ0mU1PLqDyuwQfXRTOk3u20Ykdc7Z4/Mb6NcJlyTIXvAM7pgrBzipvrekNyl9loTrWiNedD4eD4xraspylom77yTHtyErCBQlkaLbwHSVCdu1G74zyBplb/pRvo3M5bXyXFppCDlXQX/XyI7Pr9zfB12HKotsjXd/ReZsCWz+a1D0UY5Y9k0O8cUmj28rzbqw04QD9/09I1p+/iYS4Onx1,iv:Bxi7cOlCp9HxBEWHGtZ7BvQ87YSteMTULf9DIJAlAk0=,tag:YG0NAEtTHKEdJvReJntEcA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLYndSMTFpN011azMrUG1Z
+            b2Nvd1lGZGo0eDlMYW4rdFczMS9LSE4vSVM4CmRueXAvSlhncjZudWV4VlpJbFhY
+            UEs2QlVBSmdGbUk2clEyR25NdFZGbGsKLS0tIDlMeDdhL2NCa2pXYXoxSHhKQU9S
+            ZVR5TW9OUlRTa1hJelZ3RFFWSnZnVW8KYNv0HS+o9ghOWMYkyUSgWkRNvu8Uu6oj
+            MIM4bC86/qLSeLZvaKsgmtE1bC2VdGd1HBzIgo5AJLNkEnoc4zJejg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-09-16T09:13:17Z"
+    mac: ENC[AES256_GCM,data:qWrC2Ve89cE838+FrpmQGnFXeJAu+SFg1KxAaSpX60WOwEdu7HZG2JA5rkfmiPnUWbMNjInYuUR2maLm8vu5kWnLhqRxAHmf6EUf+mZKb8sD2hWWyxRGz1yuLWtv0daNzpQKwat3dgJ5KudRvAV9t3cuFuvLXzEL9bhCHSF8bRY=,iv:S23mtXz2zQ16dtisZVZBEtcCtKY77/5E6EZSdkC/rCw=,tag:jOcQjaLGEx8kj30nSM2efA==,type:str]
+    pgp: []
+    encrypted_regex: ^(admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+    version: 3.8.1
diff --git a/apps/2024_cluster/secrets/kustomization.yaml b/apps/2024_cluster/secrets/kustomization.yaml
@@ -10,3 +10,4 @@ resources:
   - draupnir-freifunk-config.yaml
   - cloudflare_ext_dns.yaml
   - zertrixt-runner.yaml
+  - coder.yaml
diff --git a/apps/base/coder/kustomization.yaml b/apps/base/coder/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: coder
+resources:
+  - repository.yaml
+  - release.yaml
diff --git a/apps/base/coder/release.yaml b/apps/base/coder/release.yaml
@@ -0,0 +1,42 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+    name: coder
+    namespace: coder
+spec:
+    releaseName: coder
+    chart:
+        spec:
+            chart: coder
+            sourceRef:
+                kind: HelmRepository
+                name: coder
+    interval: 50m
+    timeout: 25m
+    install:
+        timeout: 25m
+        remediation:
+            retries: 3
+    values:
+        coder:
+            env:
+                - name: CODER_PG_CONNECTION_URL
+                  valueFrom:
+                    secretKeyRef:
+                        key: url
+                        name: coder-db-url
+                - name: CODER_ACCESS_URL
+                  value: "https://coder.midnightthoughts.space"
+            service:
+                type: ClusterIP
+            ingress:
+                enabled: true
+                host: coder.midnightthoughts.space
+                wildcardHost: "*.coder.midnightthoughts.space"
+                annotations:
+                    cert-manager.io/cluster-issuer: letsencrypt-dns
+                    external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
+                tls:
+                    enable: true
+                    secretName: coder.midnightthoughts.space-tls
+                    wildcardSecretName: wildcard_coder.midnightthoughts.space-tls
diff --git a/apps/base/coder/repository.yaml b/apps/base/coder/repository.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: coder
+  namespace: coder
+spec:
+  interval: 5m
+  url: https://helm.coder.com/v2