commit fb9d5b0409a4c770be7ff7b5dd0ed86c6b356223
parent e4becf69dcc9bf2cacfe53c3edaf7d8471b11b58
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Mon, 4 Aug 2025 17:59:40 +0200
Migrate plane
Diffstat:
7 files changed, 207 insertions(+), 91 deletions(-)
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml
@@ -351,42 +351,6 @@ spec:
certificateRefs:
- kind: Secret
name: rspamd.midnightthoughts.space-tls
- # - name: https-docuseal-midnightthoughts
- # protocol: HTTPS
- # hostname: "docuseal.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: docuseal.midnightthoughts.space-tls
- # - name: https-midnightthoughts-neoboard
- # protocol: HTTPS
- # hostname: "miro-export.neoboard.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: miro-export.neoboard.midnightthoughts.space-tls
- # - name: https-midnightthoughts-certs
- # protocol: HTTPS
- # hostname: "certs.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: certs.midnightthoughts.space-tls
# - name: https-midnightthoughts-capacitor
# protocol: HTTPS
# hostname: "ui.k8s.midnightthoughts.space"
@@ -399,18 +363,6 @@ spec:
# certificateRefs:
# - kind: Secret
# name: ui.k8s.midnightthoughts.space-tls
- # - name: https-midnightthoughts-osticket
- # protocol: HTTPS
- # hostname: "osticket.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: osticket.midnightthoughts.space-tls
# - name: https-midnightthoughts-plane
# protocol: HTTPS
# hostname: "plane.midnightthoughts.space"
@@ -429,22 +381,6 @@ spec:
# allowedRoutes:
# namespaces:
# from: "All"
- # - name: gerrit-ssh
- # protocol: TCP
- # port: 29418
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: ircs
- # protocol: TCP
- # port: 6697
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
@@ -491,30 +427,30 @@ spec:
- name: metrics
port: 19001
targetPort: 19001
-# ---
-# apiVersion: monitoring.coreos.com/v1
-# kind: ServiceMonitor
-# metadata:
-# name: envoy-gateway-monitor
-# namespace: envoy-gateway
-# spec:
-# selector:
-# matchLabels:
-# proxy: envoy
-# endpoints:
-# - port: metrics
-# path: /stats/prometheus
-# interval: 10s
-# ---
-# apiVersion: monitoring.coreos.com/v1
-# kind: ServiceMonitor
-# metadata:
-# name: envoy-gateway-controlplane-monitor
-# namespace: envoy-gateway
-# spec:
-# selector:
-# matchLabels:
-# control-plane: envoy-gateway
-# endpoints:
-# - port: metrics
-# interval: 10s
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ name: envoy-gateway-monitor
+ namespace: envoy-gateway
+spec:
+ selector:
+ matchLabels:
+ proxy: envoy
+ endpoints:
+ - port: metrics
+ path: /stats/prometheus
+ interval: 10s
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ name: envoy-gateway-controlplane-monitor
+ namespace: envoy-gateway
+spec:
+ selector:
+ matchLabels:
+ control-plane: envoy-gateway
+ endpoints:
+ - port: metrics
+ interval: 10s
diff --git a/apps/talos_cluster/kustomization.yaml b/apps/talos_cluster/kustomization.yaml
@@ -17,3 +17,4 @@ resources:
- ./freshrss
- ./ntfy
- ./mailserver
+ - ./plane
diff --git a/apps/talos_cluster/namespaces/kustomization.yaml b/apps/talos_cluster/namespaces/kustomization.yaml
@@ -14,3 +14,4 @@ resources:
- freshrss.yaml
- ntfy.yaml
- mailserver.yaml
+ - plane.yaml
diff --git a/apps/talos_cluster/namespaces/plane.yaml b/apps/talos_cluster/namespaces/plane.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+ name: plane
diff --git a/apps/talos_cluster/plane/kustomization.yaml b/apps/talos_cluster/plane/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: plane
+resources:
+ - repository.yaml
+ - release.yaml
diff --git a/apps/talos_cluster/plane/release.yaml b/apps/talos_cluster/plane/release.yaml
@@ -0,0 +1,160 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+ name: plane
+ namespace: plane
+spec:
+ releaseName: plane
+ chart:
+ spec:
+ chart: plane-enterprise
+ version: 1.1.9
+ sourceRef:
+ kind: HelmRepository
+ name: plane
+ interval: 60m
+ values:
+ license:
+ licenseDomain: plane.midnightthoughts.space
+ ingress:
+ enabled: false
+ services:
+ minio:
+ root_password: ENC[AES256_GCM,data:Y8klJYr67rI3xzL2a6VD1goOLxSlItkP40r/atIdecVeHt2SbmszWzAHPZJcAIedFf40NOnvmfZmt4aRaU0t9Q==,iv:nP4+oZxqA+FTKfuTisH13Y/zVH+K1m78hZxR++iZkz0=,tag:OpqIBUvLSic0GwoY1oR7Cw==,type:str]
+ postgres:
+ local_setup: false
+ worker:
+ replicas: 1
+ memoryLimit: 2000Mi
+ cpuLimit: 1000m
+ silo:
+ connectors:
+ github:
+ enabled: true
+ client_id: ENC[AES256_GCM,data:Ih8cWJdeuAG3YofWt0AkNR3CHds=,iv:ZTt9DIZZsHzQtoaFuq2semEfHFIeaflmDyb5hPrDwtc=,tag:ddURkGPochprWNPZV1p0wg==,type:str]
+ client_secret: ENC[AES256_GCM,data:3p06jzniGkeMQJz1dXUApMf0fponizRrcXD5h5O1RfXneVSFeSJcMg==,iv:hbKSISC9uCcy62fNz9xKSPWY/yRN+8v2fYA0n593prY=,tag:gTAqaUe8HPpags5MU8FzlQ==,type:str]
+ app_name: plane-midnightthoughts
+ app_id: "1242151"
+ private_key: ENC[AES256_GCM,data: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,iv:iV1LutJ6Q7Xza6WwlZhR3KiGSb9IGG3F0eRHq0VS3TA=,tag:u0koCEwMSk+ssmi1ucQskA==,type:str]
+ env:
+ storageClass: ceph-filesystem
+ pgdb_username: plane
+ pgdb_password: ENC[AES256_GCM,data:ryfTytnx5j2aJgkFTZ0BWEph5Fnsp7cfob7bsYQsfh/TTb4YfuHq2QE7l5NcINEHMMMyqGTn7tksbHpFu/Bsog==,iv:u3N8PkQjc+eGjfj76mB3a4wJtqX8X0mdsDMiFK1a+TA=,tag:g8bQYqXh4C0NBIIxUSMSCg==,type:str]
+ pgdb_name: plane
+ pgdb_remote_url: ENC[AES256_GCM,data:YX1Q11FoU1zjiu/T9avukxsoatVp1lumk99u2VIfZPNrJJM8/hGc30FzcK7ohqhX9kCzXOGSuSfK7NrNnlvT3nQAku4o1Dx/dLhyrA2NU1iagcFhEztde/HeGWGSeWnMBGLVaptOcdu/LPSDS7etx2ZPBN87M6pWBgdKels9UkEL51IlsEe/G8DgMPBq,iv:jqXTmhI7r89nmwiuHehI/TUjBOUR7ItRvU0WWXsg/cY=,tag:whTTclpBJ7FM8flL34X2Nw==,type:str]
+ secret_key: ENC[AES256_GCM,data:8+yxOGc1Doq86I1+OWinpG7vEWqZhfwNOCTtQivH7NvT0yTekiPnzOpUAUSVPnsDcX5qOdfqYH9BAXHLfaNadQ==,iv:EePfKT+s+QiKGe/k+I00Pk6CxR5QWiQ3MKVSPnONXio=,tag:sAPjWcaYHk3jZiVjpM6HZQ==,type:str]
+ hmac_secret_key: ENC[AES256_GCM,data:3Fr3XiEI1S6xHNyCq7Q/y5mwmS7LLGMDkGxfP9g2n+3Xl0Zz3Lt0jfkeV3IarrTb7ArlXkTFvNCVvSZ0WVGW8Q==,iv:9r8l3Iz/9GPPrQhrOtNb136wZDs404c+r8eCfJfH30E=,tag:d2b3ARwTYGBivc8up2uJqA==,type:str]
+ GITHUB_APP_NAME: plane-midnightthoughts
+ GITHUB_APP_ID: "1242151"
+ GITHUB_CLIENT_ID: ENC[AES256_GCM,data:weh6JjF6eg7FaX4snzHY18jJ1aU=,iv:QzSuC8+BBgDW63pT1Yui5gay/1f2oAzCKC/96+YXxMI=,tag:WkVoBXRyglTzPd3OTYmJTg==,type:str]
+ GITHUB_CLIENT_SECRET: ENC[AES256_GCM,data:ROt4I+uuimNq+z6xwnd+OUYRqrX7WqmFnyZJTWytxCGckVBi4nh+Wg==,iv:gYuvu8MGDpvKpMvwp0W98kft5XgEa77/1ao4qwLzyDw=,tag:IFrQI4XzNS5BgWdHp8AV0A==,type:str]
+ GITHUB_PRIVATE_KEY: ENC[AES256_GCM,data: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,iv:IkvgmpUtdVz/5ViaHcmc0IhTAT9OX6taF9m6A52s7Y4=,tag:jrE7sj4ita+y07M8c+gRAw==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3EzK25XVTl0eStwZnQy
+ Qkw3azRoVW5qTTd2aXNiVG9pRWU2V3Q5dlY4CkhxbkZpclU2NFlIQmZvUVhRSG1X
+ a1FINjI0Mnk1d1I0Q08yRzFUZHp1WncKLS0tIEE4a2grUDluNGZTSnNGM1hPT1JE
+ aGxMQ01lbURJSzI1cjBKNTc2UGN0VWcK7uwheJrQtha2XLy45pu8x8OFzxQ+/CgA
+ /p1aJfIJvNTwPL6umfE+uhXPLl0IdkG6q4d50xlUjC9QYFDv4pNEFA==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-05-05T20:14:38Z"
+ mac: ENC[AES256_GCM,data:+Zbxrfu8/EWwCDhcT3YI+py99xK0hNHlZxVAOBE/Kvuk64iyR8py0ofbW2B8BAdDYsM9BT5P467I5kc0hNb69HNpE2DKxEGzpc0NMgueD4WGpODuSQApUYS5eVcEoBejLwNKNnsfon6mIq/eSBq/NSTwlklePsZ7Dyg10el+pNU=,iv:0k+aWNajUIiqGklyrQhkYN63RnwiQlNrpOBFI724kig=,tag:FnqlBqy7aC/EDbujI3IsQw==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: plane
+ namespace: plane
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - plane.midnightthoughts.space
+ rules:
+ - backendRefs:
+ - name: plane-web
+ port: 3000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /
+ - backendRefs:
+ - name: plane-api
+ port: 8000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /api
+ - backendRefs:
+ - name: plane-api
+ port: 8000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /auth
+ - backendRefs:
+ - name: plane-live
+ port: 3000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /live
+ - backendRefs:
+ - name: plane-space
+ port: 3000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /spaces
+ - backendRefs:
+ - name: plane-admin
+ port: 3000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /god-mode
+ - backendRefs:
+ - name: plane-minio
+ port: 9000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /uploads
+ - backendRefs:
+ - name: plane-silo
+ port: 3000
+ matches:
+ - path:
+ type: PathPrefix
+ value: /silo
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3EzK25XVTl0eStwZnQy
+ Qkw3azRoVW5qTTd2aXNiVG9pRWU2V3Q5dlY4CkhxbkZpclU2NFlIQmZvUVhRSG1X
+ a1FINjI0Mnk1d1I0Q08yRzFUZHp1WncKLS0tIEE4a2grUDluNGZTSnNGM1hPT1JE
+ aGxMQ01lbURJSzI1cjBKNTc2UGN0VWcK7uwheJrQtha2XLy45pu8x8OFzxQ+/CgA
+ /p1aJfIJvNTwPL6umfE+uhXPLl0IdkG6q4d50xlUjC9QYFDv4pNEFA==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-05-05T20:14:38Z"
+ mac: ENC[AES256_GCM,data:+Zbxrfu8/EWwCDhcT3YI+py99xK0hNHlZxVAOBE/Kvuk64iyR8py0ofbW2B8BAdDYsM9BT5P467I5kc0hNb69HNpE2DKxEGzpc0NMgueD4WGpODuSQApUYS5eVcEoBejLwNKNnsfon6mIq/eSBq/NSTwlklePsZ7Dyg10el+pNU=,iv:0k+aWNajUIiqGklyrQhkYN63RnwiQlNrpOBFI724kig=,tag:FnqlBqy7aC/EDbujI3IsQw==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
diff --git a/apps/talos_cluster/plane/repository.yaml b/apps/talos_cluster/plane/repository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+ name: plane
+ namespace: plane
+spec:
+ interval: 60m
+ url: https://helm.plane.so/
