home.labdigital.co.uk/k3s_cluster1_flux_system
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

merge into: home.labdigital.co.uk/k3s_cluster1_flux_system:master
Branches Tags
home.labdigital.co.uk/k3s_cluster1_flux_system:master home.labdigital.co.uk/k3s_cluster1_flux_system:main
..
pull from: home.labdigital.co.uk/k3s_cluster1_flux_system:main
Branches Tags
home.labdigital.co.uk/k3s_cluster1_flux_system:master home.labdigital.co.uk/k3s_cluster1_flux_system:main
2 Commits
master .. main
Author SHA1 Message Date
LABDigital f77746b5b5 Add Flux sync manifests 2021-04-21 20:59:27 +01:00
LABDigital 8cc1ef6739 Add Flux v0.12.3 component manifests 2021-04-21 20:59:26 +01:00
59 changed files with 43 additions and 3555 deletions
Expand all files Collapse all files
.gitignore
-1
View File
@@ -1 +0,0 @@
helmvendor/**
clusters/k3s-odc2-110/bootstrap.sh
-6
View File
@@ -1,6 +0,0 @@
#!/bin/bash
flux bootstrap git \
--ssh-hostname=git.labdevops.net:2222 \
--path=clusters/k3s-odc2-110 \
--branch=master \
--url=ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
clusters/k3s-odc2-110/components/cert-manager.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: cert-manager
namespace: flux-system
spec:
interval: 10m0s
path: ./components/cert-manager
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/components/external-dns.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: external-dns
namespace: flux-system
spec:
interval: 10m0s
path: ./components/external-dns
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/components/metallb.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: metallb
namespace: flux-system
spec:
interval: 10m0s
path: ./components/metallb
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/components/nfs-provisioner.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: nfs-provisioner
namespace: flux-system
spec:
interval: 10m0s
path: ./components/nfs-provisioner
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/components/nginx-ingress.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: nginx-ingress
namespace: flux-system
spec:
interval: 10m0s
path: ./components/nginx-ingress
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/components/promtheus-stack.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: promtheus-stack
namespace: flux-system
spec:
interval: 10m0s
path: ./components/prometheus
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/components/sealed-secrets.yaml
-13
View File
@@ -1,13 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: sealed-secrets
namespace: flux-system
spec:
interval: 10m0s
path: ./components/sealedsecrets
prune: true
sourceRef:
kind: GitRepository
name: flux-system
clusters/k3s-odc2-110/flux-system/gotk-components.yaml
-2831
View File
File diff suppressed because it is too large Load Diff
clusters/k3s-odc2-110/flux-system/gotk-sync.yaml
-27
View File
@@ -1,27 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: GitRepository
metadata:
name: flux-system
namespace: flux-system
spec:
interval: 1m0s
ref:
branch: master
secretRef:
name: flux-system
url: ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: flux-system
namespace: flux-system
spec:
interval: 10m0s
path: ./clusters/k3s-odc2-110
prune: true
sourceRef:
kind: GitRepository
name: flux-system
validation: client
clusters/k3s-odc2-110/flux-system/kustomization.yaml
-5
View File
@@ -1,5 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- gotk-components.yaml
- gotk-sync.yaml
clusters/k3s-odc2-110/nodeTaints.sh
-8
View File
@@ -1,8 +0,0 @@
#!/bin/bash
set -x
MASTER=odc2-110
ARM_NODES="pi4-115, pi4-116"
kubectl taint nodes "$MASTER" node-role.kubernetes.io/master=true:NoSchedule
kubectl label node "$MASTER" kubernetes.io/role=master node-role.kubernetes.io/master=
#kubectl taint nodes "$ARM_NODES"
clusters/odc2-110-admin/flux-system/gotk-components.yaml
+27 -27
View File
@@ -4,7 +4,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: flux-system
---
apiVersion: apiextensions.k8s.io/v1
@@ -16,7 +16,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: alerts.notification.toolkit.fluxcd.io
spec:
group: notification.toolkit.fluxcd.io
@@ -191,7 +191,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: buckets.source.toolkit.fluxcd.io
spec:
group: source.toolkit.fluxcd.io
@@ -379,7 +379,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: gitrepositories.source.toolkit.fluxcd.io
spec:
group: source.toolkit.fluxcd.io
@@ -598,7 +598,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: helmcharts.source.toolkit.fluxcd.io
spec:
group: source.toolkit.fluxcd.io
@@ -790,7 +790,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: helmreleases.helm.toolkit.fluxcd.io
spec:
group: helm.toolkit.fluxcd.io
@@ -1306,7 +1306,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: helmrepositories.source.toolkit.fluxcd.io
spec:
group: source.toolkit.fluxcd.io
@@ -1474,7 +1474,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: kustomizations.kustomize.toolkit.fluxcd.io
spec:
group: kustomize.toolkit.fluxcd.io
@@ -1871,7 +1871,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: providers.notification.toolkit.fluxcd.io
spec:
group: notification.toolkit.fluxcd.io
@@ -2018,7 +2018,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: receivers.notification.toolkit.fluxcd.io
spec:
group: notification.toolkit.fluxcd.io
@@ -2198,7 +2198,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: helm-controller
namespace: flux-system
---
@@ -2208,7 +2208,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: kustomize-controller
namespace: flux-system
---
@@ -2218,7 +2218,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: notification-controller
namespace: flux-system
---
@@ -2228,7 +2228,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: source-controller
namespace: flux-system
---
@@ -2238,7 +2238,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: crd-controller-flux-system
rules:
- apiGroups:
@@ -2318,7 +2318,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: cluster-reconciler-flux-system
roleRef:
apiGroup: rbac.authorization.k8s.io
@@ -2338,7 +2338,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: crd-controller-flux-system
roleRef:
apiGroup: rbac.authorization.k8s.io
@@ -2370,7 +2370,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: notification-controller
namespace: flux-system
@@ -2390,7 +2390,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: source-controller
namespace: flux-system
@@ -2410,7 +2410,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: webhook-receiver
namespace: flux-system
@@ -2430,7 +2430,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: helm-controller
namespace: flux-system
@@ -2503,7 +2503,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: kustomize-controller
namespace: flux-system
@@ -2578,7 +2578,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: notification-controller
namespace: flux-system
@@ -2654,7 +2654,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
control-plane: controller
name: source-controller
namespace: flux-system
@@ -2738,7 +2738,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: allow-scraping
namespace: flux-system
spec:
@@ -2758,7 +2758,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: allow-webhooks
namespace: flux-system
spec:
@@ -2777,7 +2777,7 @@ metadata:
labels:
app.kubernetes.io/instance: flux-system
app.kubernetes.io/part-of: flux
app.kubernetes.io/version: v0.12.0
app.kubernetes.io/version: v0.12.3
name: deny-ingress
namespace: flux-system
spec:
clusters/odc2-110-admin/flux-system/gotk-kustomization.yaml
-14
View File
@@ -1,14 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: flux-system
namespace: flux-system
spec:
interval: 10m0s
path: ./clusters/odc2-110-admin
prune: true
sourceRef:
kind: GitRepository
name: flux-system
validation: client
clusters/odc2-110-admin/flux-system/gotk-sync.yaml
+16 -3
View File
@@ -7,8 +7,21 @@ metadata:
spec:
interval: 1m0s
ref:
branch: master
branch: main
secretRef:
name: flux-system
url: ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
url: ssh://git@git.labdevops.net/home.labdigital.co.uk/k3s_cluster1_flux_system.git
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: flux-system
namespace: flux-system
spec:
interval: 10m0s
path: ./clusters/odc2-110-admin
prune: true
sourceRef:
kind: GitRepository
name: flux-system
validation: client
clusters/odc2-110-admin/flux-system/kustomization.yaml
-1
View File
@@ -2,5 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- gotk-components.yaml
- gotk-kustomization.yaml
- gotk-sync.yaml
clusters/odc2-110-admin/test/kustomization.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace_test.yaml
clusters/odc2-110-admin/test/namespace_test.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: test
clusters/odc2-110-admin/test1/test1-kustomization.yaml
-14
View File
@@ -1,14 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: test1
namespace: flux-system
spec:
interval: 10m0s
path: ./tests/test1
prune: true
validation: client
sourceRef:
kind: GitRepository
name: flux-system
clusters/odc2-110-admin/test2/ns.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: test2
clusters/odc2-110-admin/test2/podinfo-hr.yaml
-15
View File
@@ -1,15 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: podinfo
namespace: test2
spec:
chart:
spec:
chart: podinfo
sourceRef:
kind: HelmRepository
name: podinfo
interval: 1m0s
clusters/odc2-110-admin/test3/test3.yaml
-14
View File
@@ -1,14 +0,0 @@
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
name: test3
namespace: flux-system
spec:
interval: 10m0s
path: ./deployments/test3
prune: true
validation: client
sourceRef:
kind: GitRepository
name: flux-system
components/cert-manager/acme-LE-cluster-issuer.yaml
-20
View File
@@ -1,20 +0,0 @@
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: labdevops-net-letsencrypt-prod
namespace: certmanager-system
spec:
acme:
email: luke@labdigital.co.uk
server: https://acme-v02.api.letsencrypt.org/directory
#preferredChain: "ISRG Root X1"
privateKeySecretRef:
name: clouddns-dns01-solver-svc-acct
solvers:
- dns01:
cloudDNS:
project: homelab-264922
hostedZoneName: 'labdevops-net'
serviceAccountSecretRef:
key: credentials.json
name: gcp-sa-secret
components/cert-manager/certmanager-helmrelease.yaml
-16
View File
@@ -1,16 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: cert-manager
namespace: certmanager-system
spec:
chart:
spec:
chart: cert-manager
sourceRef:
kind: HelmRepository
name: jetstack
interval: 20m0s
values:
installCRDs: true
components/cert-manager/jetstack-helmrepo.yaml
-9
View File
@@ -1,9 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: jetstack
namespace: certmanager-system
spec:
interval: 20m0s
url: https://charts.jetstack.io
components/cert-manager/namespace.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: certmanager-system
components/cert-manager/sealedsecret-gcp-sa-secret.yaml
-16
View File
@@ -1,16 +0,0 @@
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: gcp-sa-secret
namespace: certmanager-system
spec:
encryptedData:
credentials.json: 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
template:
data: null
metadata:
creationTimestamp: null
name: gcp-sa-secret
namespace: certmanager-system
components/external-dns/credentials.json
-12
View File
@@ -1,12 +0,0 @@
{
"type": "service_account",
"project_id": "homelab-264922",
"private_key_id": "f7ac68fc0ae11097e43d19037c48c4c01ba55fcc",
"private_key": "-----BEGIN PRIVATE KEY-----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\nJvRJcc6TdixI/eJIlFzl6cs=\n-----END PRIVATE KEY-----\n",
"client_email": "ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com",
"client_id": "113935552429314488865",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/ext-dns-k3sodc2110%40homelab-264922.iam.gserviceaccount.com"
}
components/external-dns/external-dns-helmrelease.yaml
-41
View File
@@ -1,41 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: external-dns
namespace: externaldns-system
spec:
chart:
spec:
chart: external-dns
version: "5.0.0"
sourceRef:
kind: HelmRepository
name: bitnami
interval: 10m0s
values:
provider: "google"
txtOwnerId: "extdns-k3s-odc2-110"
domainFilters:
- "labdevops.net"
google:
project: "homelab-264922"
## Google Project to use
##
# project: "homelab-264922"
## Google Application Credentials
##
serviceAccountSecret: "external-dns"
serviceAccountSecretKey: "credentials.json"
## Prometheus Exporter / Metrics
##
metrics:
enabled: true
# podAnnotations:
# prometheus.io/scrape: "true"
# prometheus.io/port: "7979"
serviceMonitor:
enabled: true
namespace: prometheus-system
nodeSelector:
kubernetes.io/arch: amd64
components/external-dns/helmrepo.yaml
-10
View File
@@ -1,10 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: bitnami
namespace: externaldns-system
spec:
interval: 1m0s
url: https://charts.bitnami.com/bitnami
components/external-dns/namespace.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: externaldns-system
components/external-dns/sealedsecret-external-dns.yaml
-16
View File
@@ -1,16 +0,0 @@
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: external-dns
namespace: externaldns-system
spec:
encryptedData:
credentials.json: AgCg8D6rZ7h8bqv53KE0vF3fEmpYt+8YMgVHe0PD84mAtQ1dyy3jAEKsOB7TUNbt18CfZ5DAUGRzuH04eGT2ClECe6UV5Ctw0BI7k92oqRlDHRatr8RurOkSTv/qDzqnI9pAAGNJQoHxsngLM67s9Qgsnl6R52s/PXSg+wyxBNp7HE/fsKNY/o4QWQ4bAqBtMe9laFEQg9gLwfEm3luimlcp2BezMjc10CrJIIlbfNQ16XaymX1iARZnjWaydn2VaGczwm49YjDS7gMtBrBAZ4ThkjiXioECPTVfeFyjdE0mMV5OA1MH9sH47naen52I2ES0KEQ6xTiQxm0rEXvHMCV22BFcnksWXX7zIkFipc+VGS9crCFSIeT6Ld73Ck7SxBCub7MI69EvRPLqGnUNs5FNfuPnZk08NKz/kH2TQfbgx8RO9J7muMmqpw0FgWmjX8hTleg4xfeCtuMf5zI5JYQN3h/bUUO1uZdJ5yAD+CbHAqP46RF1JKFkgpgF+7sA/bnYkjTVgF1uS45sLa3G0ZIAxrmC4fCh1TgAgk5hvRJbixYZcicwso51pKiOyUOx9pFXAKmqWTcoTi6Sd0YDTMMQitsxv+2pd87pQ8EF6fOjFRqvA+wgfJclPZhwv0Nw/yaC8DB6voASn5VaTbCnGjydMftrex033A7llzO1VmG5p6O/EMkVefBzCeZYV13AFQ/0y1OQUwMYNku/9e1aCeIqxji5D1cCrY3uyKgkHhr7xiIdCge9dK/wAV4D0i6352uQmmKQfkLsOOYX+rckp6VbgdaYVUTrfLGj8lKnzyCrOJFSL8bQpbLk7scNIWdrY7a0mbTgWOar53xALifLU3DwQxq1Vt0avBUS2zuxTHzxA+c8W5qG1lqqzABf8gUOPvm3Y3ZZaCUBGByxBnnK1XuxPEEWdfOemj3qJh3ZrwZYNFo9Vr4KY9ZEGERy71ztxe2ru6M9UNdagcNH6WUt2KJut4biLRGbxeb3VwZbxfGLfXf/Dc3Lg8hLn+oeR8HYsMZP+EX5FHvI7UlPKr9E6JBMCd5u6lO3JOYacyqShcMHT4au+mqAgLdi2ZPV1we3LMl3/WXlMap9HHlyZ+9L3q98ERMAlEvYqedByS4CCZmIQXv23aKnfkXEyBLo8x13CXPYy4J2YbJ4WlvPiBayJxpR8DRrps5UrwAp8ffN9QZPVgnPSyo1VJhL8OPzoLuvCEmGCWzyaIL43zn2pNcyJs/w5KyUTFwRXFdVoF6LbZcCQgL/dzczld6SscpHUCJ8iC1QFPK/hMyachtCizfdLdERkyxxcKT2IR0fUoAC2yuoiLO4/znZVegvOtUPcVbM76bvpOT9GZfAxc+LCDiND6hfHfgQjXz2nb36xk18rwHL+AZfnEyVTs+vq2plQkIVSdmwFYQX3UHb2sHx47R09xizaNaU3WhMD9/HoXstcPUTzU7jnsXklKKBN+VlSK6k/WVc0JOyuDor1cKh4ftCEgtownxwQ/KNw+8fUjUcf918SJyJLr1FzDiAUy6k3BIDKkRQEco27XJOXiu7Q+Edg1wSYKxtpBMuYfTgI5sWKDoC3VasBLu0tHaDWgp+fglKsHZgE6FPIzKra/yhKBA1xgky0ilWVPRXZotWAx1b5sY6ptUF3ABeDmwu1IyBXYYJvABkY0+ZgpyKCHXnTPFZMO1ukR8q7jPd2/LM4vVURD1HWIC3GC+GLlzlO+cZJObQFECXx81B8Lk+8HK5BFdKl/40YsBMRF5hzh35rZdWslf9U7RvGhKPMZtO4QNhHvrdxgl4lGgaOMQ1DLx+OJQVgQh9G1Lj5Ua4ivt82ouYMhOecdBEib/OQtGJTaD7e4W/oZp6H92ZP+4D74l5TfDc5402+ixfiMx/1A1Hnnoqs7JBNHi19v3XrERWXGUZo3YJU15Y0DyEvJJdr8HKgWyLHEhMshJ78uBCOcLIdppHZUXYt0zMRai22xIPpbh/qahYtno0Zyv7x+Xk3RBDJkZ0/wi9BdKdcPOpc+2IjGv/d89wL0IDt0BHw/ptd7ILCL1RfJh9XsXVbGMwViD+PavfhNiyDZ6TDeXd/zhJIJ4+kacLvmrzMccntqZe22mYx/1bblG87lc4I3xqVYijud/w5F53Dew9BBtH1iW5TNSImyqI23vEIE1w3/ivkpLmultlmHDN6why5rLxqIVLJzaZwqRez31ur3cZcCYi9UvF2BBaoGuwzR4FCNI8lHGyHnnBp4vT4c0RdeUQja1pgZMJb6+IslLTUbk+9nf3i2NmH3gwI2NYx7FBo5p1up7QaXwT5NZ5jkgUrQjt3nbvXrAriy8bMFcHFXLaLXhhtCjj/+oKv4cJlopRTh2NhficjhnpdWTaJpgAfdKRHWfelVxybiKucUphlgjKGQ17lazl7B4jcXdsS26OO4ihG9D1JIQShEUOGp3ev80QheG+2VB76Ls7u1GHbWtSXDfB1mXlemk69lTs+or3APaIkn+3zfTRx+FLL1qL9uELCd5iqHy8LvGSzKniWWBzIyFkRUQpiPP4Z3/npX5Cx4LB0byWUAuHE/9tlCAUraVD4zF0PTJvZYsU03cVmo54dDcix5LyZXAN+Mlf0VeLH3iUDGaCotF1Y+1yVQY1b2pyyomGOJAFneDOZV5A9G35hPpoSU/C5NbFpX4fNneCG0XHVINR8Lu+JX9P7otUgYzwVICFUeWljOh00f30xLy7Rhuh4U2fJkbXLeGstLObgJ/mcGVgp6cSUjGNZpm8gtTPMs/BEhXupBDg+c87u7sv7LV5e2r3BIBeaz2NI1vELLwPcppJkSNwVBV6E4GnrYwfVXGz+lwtnQ5RuGt91xElvF4Aj3xP1xocD6u/18nDUyiZZsfJDWd2s/agVimHIdFwTuc74Ejg9T2MZsl6WB/xuTvCsGSC85utUWwoQTQfG9WDacNbGH2qbjSrFmWzWaWn1mKKc+/q3cqISEYfsWGuh9TmvPEreGBpxXx0LkCj3XTQXwUcO23yFkwqE6DTMh3e43ATCulgE39WKVzxTtJbIayqADABGYlGplhGXr6pKarnC2Hsxv1cqdtSnp6i+et2kekpEnOON4NViIcwdnbRppg1+NB5xq6dGbVV4zm+YrjxrV8KiorKBccuvLy9tt974INg9LbZ5kDzOHTAil3VZHYcbJNhpVd5K3JyApRTEp6Gh4dA1gGRc0Q0xIPdcx6twDJg6/MmBfwo5T14gTSuuKefo/BWSCy9e2eAjXsGltQLTB3ALV6RjP5ngSOyb2+OlRs8F+Sfg6vg1rvjwGvGXVYg+SJOuTAkz4uoT9aIjZSbmxijskc2kZvmx1SYu11IIp2OkKvcRRe8YL00DziYBnLkDubOgzXZcpGo7xlb29fZTR6QQBF+ga5jSv9JuwtlkzFqJ8p+7MDr01PVlkhbg4WFaum1aJBdhBhaX/mt/8S9hDvYKGlzEpTta568Is68cd+VPEcRSy2zL3iprCHXKdoeWx91zIf5V1h5Ztz9eJUE+RGacHalRCJPsSX7Gor5PhpJaF3JN+EP0oDoIk+AIcyA2peb7RovNeyBUxrfUt6iyJrHld9j04pNTlf/GarHoO907Dwy0LE21dzHSm0cQn90rlrsVFvMCcfNA8eTbUvC7gz1efCUMcgQNDpxHRaA9YoB+7bI3WApbGUX6hpNFkQgeaWDrVPl06kjXJylDAAOy0IXunHUVSyVspMu0ahMyCFeuBDq+5I5ufA5+Mm7kneasvX4iILxqsqN+2awi7yVuvMn+lXk5KBNFGxf391OnzaXFe9TioH6PoWNWJy2wuViLhvdqw==
template:
data: null
metadata:
creationTimestamp: null
name: external-dns
namespace: externaldns-system
components/external-dns/setup.sh
-8
View File
@@ -1,8 +0,0 @@
#!/bin/bash
#gcloud auth login
gcloud auth login
gcloud config set project homelab-264922
gcloud iam service-accounts create ext-dns-k3sodc2110 --display-name "SvcAcc ext-dns on k3s-odc2-110 labdevops.net"
gcloud projects add-iam-policy-binding homelab-264922 --role='roles/dns.admin' --member='serviceAccount:ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com'
gcloud iam service-accounts keys create credentials.json --iam-account ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com
kubectl create secret -n externaldns-system generic external-dns --from-file=credentials.json=credentials.json --dry-run=client --output=jso
components/metallb/bitnami_helmrepo.yaml
-10
View File
@@ -1,10 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: bitnami
namespace: metallb-system
spec:
interval: 1m0s
url: https://charts.bitnami.com/bitnami
components/metallb/metallb_helmrelease.yaml
-31
View File
@@ -1,31 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: metallb
namespace: metallb-system
spec:
chart:
spec:
chart: metallb
version: "2.3.5"
sourceRef:
kind: HelmRepository
name: bitnami
interval: 10m0s
values:
controller:
image:
repository: metallb/controller
tag: v0.9.6
speaker:
image:
repository: metallb/speaker
tag: v0.9.6
configInline:
address-pools:
- name: default
protocol: layer2
addresses:
- 192.168.7.200-192.168.7.210
components/metallb/namespace.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: metallb-system
components/nfs-provisioner/helmrepo.yaml
-9
View File
@@ -1,9 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: nfs-subdir-external-provisioner
namespace: nfs-system
spec:
interval: 20m0s
url: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
components/nfs-provisioner/nfs-client-provisioner-helmrelease.yaml
-32
View File
@@ -1,32 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: nfs-subdir-external-provisioner
namespace: nfs-system
spec:
chart:
spec:
chart: nfs-subdir-external-provisioner
version: "4.0.10"
sourceRef:
kind: HelmRepository
name: nfs-subdir-external-provisioner
interval: 20m0s
values:
nodeSelector:
kubernetes.io/arch: arm64
# strategyType: Recreate
storageClass:
name: nfs-storage
defaultClass: true
archiveOnDelete: true
allowVolumeExpansion: true
provisionerName: storage.provisioner/nfs
nfs:
server: 192.168.7.100
path: /datapool/nfs/kubernetes
components/nfs-provisioner/ns.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: nfs-system
components/nginx-ingress/ingress-nginx_helmrepository.yaml
-10
View File
@@ -1,10 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: ingress-nginx
namespace: ingress-system
spec:
interval: 20m0s
url: https://kubernetes.github.io/ingress-nginx
components/nginx-ingress/namespace.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: ingress-system
components/nginx-ingress/nginx-ingress_helmrelease.yaml
-21
View File
@@ -1,21 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: nginx-ingress
namespace: ingress-system
spec:
chart:
spec:
chart: ingress-nginx
version: "3.26.x"
sourceRef:
kind: HelmRepository
name: ingress-nginx
interval: 20m0s
# values:
# controller:
# nodeSelector:
# kubernetes.io/arch: 'amd64'
components/prometheus/namespace.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: prometheus-system
components/prometheus/prometheus-community_helmrepository.yaml
-10
View File
@@ -1,10 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: prometheus-community
namespace: prometheus-system
spec:
interval: 20m0s
url: https://prometheus-community.github.io/helm-charts
components/prometheus/prometheus-stack.yaml
-28
View File
@@ -1,28 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: kube-prometheus-stack
namespace: prometheus-system
spec:
chart:
spec:
chart: kube-prometheus-stack
sourceRef:
kind: HelmRepository
name: prometheus-community
interval: 20m0s
values:
grafana:
ingress:
enabled: true
annotations:
kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer: labdevops-net-letsencrypt-prod
hosts:
- grafana.labdevops.net
tls:
- secretName: grafana-cm-tls
hosts:
- grafana.labdevops.net
components/sealedsecrets/bitnami-helmrepo.yaml
-10
View File
@@ -1,10 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: bitnami-labs-sealed-secrets
namespace: sealedsecrets-system
spec:
interval: 1h0m0s
url: https://bitnami-labs.github.io/sealed-secrets
components/sealedsecrets/namespace.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: sealedsecrets-system
components/sealedsecrets/pre-seed-key.sh
-2
View File
@@ -1,2 +0,0 @@
#!/bin/bash
## TODO: add secret from /keybase/private/lukeab/k3s-odc2-110/sealedsecrets/pub-cert.pem
components/sealedsecrets/sealedsecrets-helmrelease.yaml
-32
View File
@@ -1,32 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: sealed-secrets
namespace: sealedsecrets-system
spec:
chart:
spec:
chart: sealed-secrets
sourceRef:
kind: HelmRepository
name: bitnami-labs-sealed-secrets
version: ">=1.16.0-0"
interval: 1h0m0s
releaseName: sealed-secrets
targetNamespace: sealedsecrets-system
install:
crds: Create
upgrade:
crds: CreateReplace
values:
namespace: sealedsecrets-system
serviceMonitor:
create: true
# secretName: "sealed-secrets-key"
# uncomment this when generated key is offloaded and pre-configured
dashboards:
create: true
namespace: sealedsecrets-system
labels:
grafana_dashboard: "1"
deployments/test3/namespace_test.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: test3
deployments/test3/nginx-deploy.yaml
-23
View File
@@ -1,23 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx-test
namespace: test3
spec:
selector:
matchLabels:
app: nginx-test
template:
metadata:
labels:
app: nginx-test
spec:
containers:
- name: nginx-test
image: nginx
resources:
limits:
memory: "128Mi"
cpu: "500m"
ports:
- containerPort: 80
deployments/test3/podinfo-hr.yaml
-15
View File
@@ -1,15 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: podinfo
namespace: test3
spec:
chart:
spec:
chart: podinfo
sourceRef:
kind: HelmRepository
name: podinfo
interval: 1m0s
helmvendor/.gitkeep
View File
tests/cert-manager/test-certificate-labdevops-net.yaml
-14
View File
@@ -1,14 +0,0 @@
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: testcert-labdevops-net
namespace: certmanager-system
spec:
dnsNames:
- testcert.labdevops.net
- blablahtest.labdevops.net
secretName: testcert-labdevops-tls
issuerRef:
name: labdevops-net-letsencrypt-prod
kind: ClusterIssuer
tests/cert-manager/test-resource.yaml
-24
View File
@@ -1,24 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: cert-manager
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: test-selfsigned
namespace: cert-manager
spec:
selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: selfsigned-cert
namespace: cert-manager
spec:
dnsNames:
- labdevops.net
secretName: selfsigned-cert-tls
issuerRef:
name: test-selfsigned
tests/test1/ns.yaml
-4
View File
@@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: test1
tests/test1/podinfo-helmrepo.yaml
-9
View File
@@ -1,9 +0,0 @@
---
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: podinfo
namespace: test1
spec:
interval: 1m0s
url: https://stefanprodan.github.io/podinfo
tests/test1/podinfo.yaml
-22
View File
@@ -1,22 +0,0 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: podinfo
namespace: test1
spec:
chart:
spec:
chart: podinfo
version: 5.2.0
sourceRef:
kind: HelmRepository
name: podinfo
interval: 1m0s
values:
ingress:
enabled: true
annotations:
kubernetes.io/ingress.class: nginx
path: "/"