cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

release.yaml (12659B)

      1 apiVersion: v1
      2 kind: Secret
      3 metadata:
      4   name: miro-neoboard-exporter-secret
      5   namespace: neoboard
      6 type: Opaque
      7 stringData:
      8   MIRO_CLIENT_ID: ENC[AES256_GCM,data:VIXzbL5seLwIEK1WCACgxirdbQ==,iv:0ovfh9qS1pgtXZdYVk+4sLRVo1jBxLK+/8J+X5p4PQg=,tag:YSDaJ0kUJr+CNt2xJHKLSg==,type:str]
      9   MIRO_CLIENT_SECRET: ENC[AES256_GCM,data:fLGABsht299W0CzQTCoFU4IYka6VHrvjNWFsPR9hkVs=,iv:Wr1uYlJAzh/45TYrfJRxTAnpOkmCXE24QWfuyL2I1GM=,tag:Rwwpq8l0VeAX+HUQiuNtMA==,type:str]
     10   MIRO_REDIRECT_URL: ENC[AES256_GCM,data:9HnK7qHaXr5fwpTX8TZGrMQBEJvDlMbb1SovGLg4pjLcHjCPs/MsEjH/+w6tt+uRyUl8AbQzrp3NzqLMKM4YiQ==,iv:BG6Va7Fat/OrRRRcIbgylUPEu6u2iO2h7pz569IgzWg=,tag:5iP+Wdp1mEsnEaTu97iqEA==,type:str]
     11 sops:
     12   kms: []
     13   gcp_kms: []
     14   azure_kv: []
     15   hc_vault: []
     16   age:
     17     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     18       enc: |
     19         -----BEGIN AGE ENCRYPTED FILE-----
     20         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRDA3Z1FpMHc1T0svVkVn
     21         dVdGZkJIb2pnZGZuL2xMMjBRSUx4ejZLdENjClBObmlaLzdmZ04zNjNiaHdYRTdI
     22         aEtwVUFlSTlzZGRqQWRkOFVzb3ZabUkKLS0tIFB4NEVJREkxNVNDL282TGtNSWl5
     23         dHRNQWxOeXZyaXh6ZDRuTTd5OHVFSlkKbFfL11qcof9vuLt7JUyQ4XT9n40+SKVj
     24         i2aIfO6iacGdDSeCh2lx71cavLU8QBwxWCLIFL/K5dF9sYrzOjuc2w==
     25         -----END AGE ENCRYPTED FILE-----
     26   lastmodified: "2025-01-17T10:31:19Z"
     27   mac: ENC[AES256_GCM,data:1Fcec6Iy5SVx7lJSrR/Ah6zv4PUuPEjAUDDzfG4Ms6gAY1KyFFmEVqwJsigJiBBF6XnAr3ByAwW5wnWcCC5At+ibEAIiha4dOMW4Dht4mmMExuD1aUVstOkeaoIAphS2ssaTNq4gbVyC+edJd4G3BK8m21x3shkeUdJH3Xj9UYU=,iv:Aoiz00ff3JHoPfnm+tNvtXMsnWSIuu6Ixrbop6HgM5k=,tag:qKoDMRwnnXKwX3zh97UGKw==,type:str]
     28   pgp: []
     29   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     30   version: 3.9.1
     31 ---
     32 apiVersion: apps/v1
     33 kind: Deployment
     34 metadata:
     35   name: miro-neoboard-exporter
     36   namespace: neoboard
     37 spec:
     38   replicas: 1
     39   selector:
     40     matchLabels:
     41       app: miro-neoboard-exporter
     42   template:
     43     metadata:
     44       labels:
     45         app: miro-neoboard-exporter
     46     spec:
     47       automountServiceAccountToken: false
     48       securityContext:
     49         fsGroup: 1000
     50       containers:
     51         - name: miro-neoboard-exporter
     52           image: ghcr.io/mtrnord/neoboard-exporter:latest
     53           imagePullPolicy: Always
     54           securityContext:
     55             allowPrivilegeEscalation: false
     56             readOnlyRootFilesystem: true
     57             runAsNonRoot: true
     58             runAsUser: 1000
     59             runAsGroup: 1000
     60             capabilities:
     61               drop:
     62                 - ALL
     63             seccompProfile:
     64               type: RuntimeDefault
     65           resources:
     66             limits:
     67               cpu: "200m"
     68               memory: "256Mi"
     69             requests:
     70               cpu: "50m"
     71               memory: "64Mi"
     72           ports:
     73             - containerPort: 3000
     74           envFrom:
     75             - secretRef:
     76                 name: miro-neoboard-exporter-secret
     77           volumeMounts:
     78             - name: env-file
     79               mountPath: /app/.env
     80               subPath: .env
     81             - name: tmp
     82               mountPath: /tmp
     83           livenessProbe:
     84             httpGet:
     85               path: /
     86               port: 3000
     87             initialDelaySeconds: 30
     88             periodSeconds: 10
     89             timeoutSeconds: 5
     90             successThreshold: 1
     91             failureThreshold: 3
     92           readinessProbe:
     93             httpGet:
     94               path: /
     95               port: 3000
     96             initialDelaySeconds: 30
     97             periodSeconds: 10
     98             timeoutSeconds: 5
     99             successThreshold: 1
    100             failureThreshold: 3
    101       volumes:
    102         - name: tmp
    103           emptyDir: {}
    104         - name: env-file
    105           secret:
    106             secretName: ENC[AES256_GCM,data:oin2nzHOttpqP0vrx7wBz2yxwdfF9z8cZTVky9I=,iv:IEfzn9Ht9ItEd69xSn+DDZri08VakSlH685lgrfWgSo=,tag:dpL4cc/qOiK7K8z4R8MplQ==,type:str]
    107             items:
    108               - key: ENC[AES256_GCM,data:qda2XtHmd7Ud4bsmhbk=,iv:f00acvvSJJft7Hfr7veDusd8L8jIOTskr8Kmd8BPMe8=,tag:5SaVDJrxmx+0HW17v3tp/w==,type:str]
    109                 path: ENC[AES256_GCM,data:T7kaJg==,iv:Dcgx1acGj+NwnEaieDSrHQbR1KjCvHVqeVCycdgMQ2s=,tag:VExksgpmtatNtRhRQLtIDw==,type:str]
    110               - key: ENC[AES256_GCM,data:EPsUgRcEIvDUxM3a1zEjNxyf,iv:wVn4324rU/iMYWWYnFrST/igewa36M92SagfHba7NqY=,tag:/fhC3eCqm/qBTzNLLGazDg==,type:str]
    111                 path: ENC[AES256_GCM,data:SUCrhQ==,iv:iruYlzJAOL/aMplQsUQr/mYMWatxS7+G4qTCWVDVUXQ=,tag:ciFq1ut7sKVe4+SJJhlBjA==,type:str]
    112               - key: ENC[AES256_GCM,data:Nty1QNrzbnDzxLti14RyOSw=,iv:6NbYgnb5E/jb3h4+tbAY4LOVEs0n1+zEFwscgmXeIGc=,tag:IoU974Cigh51QQnoZbf8nQ==,type:str]
    113                 path: ENC[AES256_GCM,data:YQPAsg==,iv:wi47WTeYlnWTG1x6hptTgxlOKk818MXhJJUWXMg/BAA=,tag:AuNbqHIIBQoMUUDUFAlJRQ==,type:str]
    114 sops:
    115   kms: []
    116   gcp_kms: []
    117   azure_kv: []
    118   hc_vault: []
    119   age:
    120     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    121       enc: |
    122         -----BEGIN AGE ENCRYPTED FILE-----
    123         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRDA3Z1FpMHc1T0svVkVn
    124         dVdGZkJIb2pnZGZuL2xMMjBRSUx4ejZLdENjClBObmlaLzdmZ04zNjNiaHdYRTdI
    125         aEtwVUFlSTlzZGRqQWRkOFVzb3ZabUkKLS0tIFB4NEVJREkxNVNDL282TGtNSWl5
    126         dHRNQWxOeXZyaXh6ZDRuTTd5OHVFSlkKbFfL11qcof9vuLt7JUyQ4XT9n40+SKVj
    127         i2aIfO6iacGdDSeCh2lx71cavLU8QBwxWCLIFL/K5dF9sYrzOjuc2w==
    128         -----END AGE ENCRYPTED FILE-----
    129   lastmodified: "2025-01-17T10:31:19Z"
    130   mac: ENC[AES256_GCM,data:1Fcec6Iy5SVx7lJSrR/Ah6zv4PUuPEjAUDDzfG4Ms6gAY1KyFFmEVqwJsigJiBBF6XnAr3ByAwW5wnWcCC5At+ibEAIiha4dOMW4Dht4mmMExuD1aUVstOkeaoIAphS2ssaTNq4gbVyC+edJd4G3BK8m21x3shkeUdJH3Xj9UYU=,iv:Aoiz00ff3JHoPfnm+tNvtXMsnWSIuu6Ixrbop6HgM5k=,tag:qKoDMRwnnXKwX3zh97UGKw==,type:str]
    131   pgp: []
    132   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    133   version: 3.9.1
    134 ---
    135 apiVersion: v1
    136 kind: Service
    137 metadata:
    138   name: miro-neoboard-exporter-service
    139   namespace: neoboard
    140 spec:
    141   selector:
    142     app: miro-neoboard-exporter
    143   ports:
    144     - protocol: TCP
    145       port: 80
    146       targetPort: 3000
    147 # ---
    148 # apiVersion: networking.k8s.io/v1
    149 # kind: Ingress
    150 # metadata:
    151 #     name: miro-neoboard-exporter-ingress
    152 #     namespace: neoboard
    153 #     annotations:
    154 #         cert-manager.io/cluster-issuer: letsencrypt-dns
    155 #         external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
    156 # spec:
    157 #     rules:
    158 #         - host: miro-export.neoboard.midnightthoughts.space
    159 #           http:
    160 #             paths:
    161 #                 - path: /
    162 #                   pathType: Prefix
    163 #                   backend:
    164 #                     service:
    165 #                         name: miro-neoboard-exporter-service
    166 #                         port:
    167 #                             number: 80
    168 #     tls:
    169 #         - hosts:
    170 #             - miro-export.neoboard.midnightthoughts.space
    171 #           secretName: miro-export-neoboard-ingress-tls
    172 sops:
    173   kms: []
    174   gcp_kms: []
    175   azure_kv: []
    176   hc_vault: []
    177   age:
    178     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    179       enc: |
    180         -----BEGIN AGE ENCRYPTED FILE-----
    181         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRDA3Z1FpMHc1T0svVkVn
    182         dVdGZkJIb2pnZGZuL2xMMjBRSUx4ejZLdENjClBObmlaLzdmZ04zNjNiaHdYRTdI
    183         aEtwVUFlSTlzZGRqQWRkOFVzb3ZabUkKLS0tIFB4NEVJREkxNVNDL282TGtNSWl5
    184         dHRNQWxOeXZyaXh6ZDRuTTd5OHVFSlkKbFfL11qcof9vuLt7JUyQ4XT9n40+SKVj
    185         i2aIfO6iacGdDSeCh2lx71cavLU8QBwxWCLIFL/K5dF9sYrzOjuc2w==
    186         -----END AGE ENCRYPTED FILE-----
    187   lastmodified: "2025-01-17T10:31:19Z"
    188   mac: ENC[AES256_GCM,data:1Fcec6Iy5SVx7lJSrR/Ah6zv4PUuPEjAUDDzfG4Ms6gAY1KyFFmEVqwJsigJiBBF6XnAr3ByAwW5wnWcCC5At+ibEAIiha4dOMW4Dht4mmMExuD1aUVstOkeaoIAphS2ssaTNq4gbVyC+edJd4G3BK8m21x3shkeUdJH3Xj9UYU=,iv:Aoiz00ff3JHoPfnm+tNvtXMsnWSIuu6Ixrbop6HgM5k=,tag:qKoDMRwnnXKwX3zh97UGKw==,type:str]
    189   pgp: []
    190   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    191   version: 3.9.1
    192 ---
    193 apiVersion: gateway.networking.k8s.io/v1
    194 kind: HTTPRoute
    195 metadata:
    196   name: miro-neoboard-exporter-ingress
    197   namespace: neoboard
    198 spec:
    199   parentRefs:
    200     - name: envoy-gateway
    201       namespace: envoy-gateway
    202   hostnames:
    203     - miro-export.neoboard.midnightthoughts.space
    204     - miro-exporter.neoboard.midnightthoughts.space
    205     - miro-neoboard-exporter.midnightthoughts.space
    206   rules:
    207     - backendRefs:
    208         - name: miro-neoboard-exporter-service
    209           port: 80
    210       timeouts:
    211         request: 240s
    212         backendRequest: 0s
    213 sops:
    214   kms: []
    215   gcp_kms: []
    216   azure_kv: []
    217   hc_vault: []
    218   age:
    219     - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
    220       enc: |
    221         -----BEGIN AGE ENCRYPTED FILE-----
    222         YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRDA3Z1FpMHc1T0svVkVn
    223         dVdGZkJIb2pnZGZuL2xMMjBRSUx4ejZLdENjClBObmlaLzdmZ04zNjNiaHdYRTdI
    224         aEtwVUFlSTlzZGRqQWRkOFVzb3ZabUkKLS0tIFB4NEVJREkxNVNDL282TGtNSWl5
    225         dHRNQWxOeXZyaXh6ZDRuTTd5OHVFSlkKbFfL11qcof9vuLt7JUyQ4XT9n40+SKVj
    226         i2aIfO6iacGdDSeCh2lx71cavLU8QBwxWCLIFL/K5dF9sYrzOjuc2w==
    227         -----END AGE ENCRYPTED FILE-----
    228   lastmodified: "2025-01-17T10:31:19Z"
    229   mac: ENC[AES256_GCM,data:1Fcec6Iy5SVx7lJSrR/Ah6zv4PUuPEjAUDDzfG4Ms6gAY1KyFFmEVqwJsigJiBBF6XnAr3ByAwW5wnWcCC5At+ibEAIiha4dOMW4Dht4mmMExuD1aUVstOkeaoIAphS2ssaTNq4gbVyC+edJd4G3BK8m21x3shkeUdJH3Xj9UYU=,iv:Aoiz00ff3JHoPfnm+tNvtXMsnWSIuu6Ixrbop6HgM5k=,tag:qKoDMRwnnXKwX3zh97UGKw==,type:str]
    230   pgp: []
    231   encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
    232   version: 3.9.1