refactor: observability/network ks

2025-12-22 07:26:30 +01:00 · 2025-04-18 14:17:51 +02:00
parent 26cd2cb62f
commit 476223f52b
87 changed files with 598 additions and 862 deletions
--- a/kubernetes/apps/database/crunchy-postgres-operator/cluster/cluster.yaml
+++ b/kubernetes/apps/database/crunchy-postgres-operator/cluster/cluster.yaml
@@ -159,16 +159,16 @@ spec:
        enabled: true
        repoName: repo1
        options:
-        - --set=20250330-010003F
+        - --set=20250413-010004F_20250418-020004I

-  # dataSource:
-  #   pgbackrest:
-  #     stanza: "db"
-  #     configuration: *backupConfig
-  #     global: *backupFlag
-  #     repo:
-  #       name: "repo1"
-  #       s3: *minio
+  dataSource:
+    pgbackrest:
+      stanza: "db"
+      configuration: *backupConfig
+      global: *backupFlag
+      repo:
+        name: "repo1"
+        s3: *minio

  monitoring:
    pgmonitor:
--- a/kubernetes/apps/database/crunchy-postgres-operator/ks.yaml
+++ b/kubernetes/apps/database/crunchy-postgres-operator/ks.yaml
@@ -4,109 +4,134 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: &app crunchy-postgres-operator
-  namespace: flux-system
+  namespace: &namespace database
 spec:
-  targetNamespace: database
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  interval: 30m
-  timeout: 5m
+  interval: 1h
  path: ./kubernetes/apps/database/crunchy-postgres-operator/operator
+  postBuild:
+    substitute:
+      APP: *app
  prune: true
+  retryInterval: 2m
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
-  wait: true
+    namespace: flux-system
+  targetNamespace: *namespace
+  timeout: 5m
+  wait: false
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: &app crunchy-postgres-operator-cluster
-  namespace: flux-system
+  namespace: &namespace database
 spec:
-  targetNamespace: database
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  interval: 30m
-  timeout: 5m
-  path: ./kubernetes/apps/database/crunchy-postgres-operator/cluster
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  wait: true
  dependsOn:
    - name: crunchy-postgres-operator
    - name: external-secrets-stores
      namespace: external-secrets
+  interval: 1h
+  path: ./kubernetes/apps/database/crunchy-postgres-operator/cluster
+  postBuild:
+    substitute:
+      APP: *app
+  prune: true
+  retryInterval: 2m
+  sourceRef:
+    kind: GitRepository
+    name: home-ops-kubernetes
+    namespace: flux-system
+  targetNamespace: *namespace
+  timeout: 5m
+  wait: false
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: &app crunchy-postgres-operator-secretstore
-  namespace: flux-system
+  namespace: &namespace database
 spec:
-  targetNamespace: database
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  interval: 30m
-  timeout: 5m
-  path: ./kubernetes/apps/database/crunchy-postgres-operator/clustersecretstore
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  wait: true
  dependsOn:
    - name: crunchy-postgres-operator-cluster
    - name: external-secrets
      namespace: external-secrets
+  interval: 1h
+  path: ./kubernetes/apps/database/crunchy-postgres-operator/clustersecretstore
+  postBuild:
+    substitute:
+      APP: *app
+  prune: true
+  retryInterval: 2m
+  sourceRef:
+    kind: GitRepository
+    name: home-ops-kubernetes
+    namespace: flux-system
+  targetNamespace: *namespace
+  timeout: 5m
+  wait: false
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: &app crunchy-postgres-userinit-controller
-  namespace: flux-system
+  namespace: &namespace database
 spec:
-  targetNamespace: database
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  interval: 30m
-  timeout: 5m
+  dependsOn:
+    - name: crunchy-postgres-operator-cluster
+  interval: 1h
  path: ./kubernetes/apps/database/crunchy-postgres-operator/userinit-controller
+  postBuild:
+    substitute:
+      APP: *app
  prune: true
+  retryInterval: 2m
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
-  wait: true
-  dependsOn:
-    - name: crunchy-postgres-operator-cluster
+    namespace: flux-system
+  targetNamespace: *namespace
+  timeout: 5m
+  wait: false
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: &app crunchy-postgres-pgadmin
-  namespace: flux-system
+  namespace: &namespace database
 spec:
-  targetNamespace: database
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  interval: 30m
-  timeout: 5m
+  dependsOn:
+    - name: crunchy-postgres-operator-cluster
+  interval: 1h
  path: ./kubernetes/apps/database/crunchy-postgres-operator/pgadmin
+  postBuild:
+    substitute:
+      APP: *app
  prune: true
+  retryInterval: 2m
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
-  wait: true
-  dependsOn:
-    - name: crunchy-postgres-operator-cluster
+    namespace: flux-system
+  targetNamespace: *namespace
+  timeout: 5m
+  wait: false
--- a/kubernetes/apps/database/dragonfly/ks.yaml
+++ b/kubernetes/apps/database/dragonfly/ks.yaml
@@ -18,6 +18,7 @@ spec:
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
+    namespace: flux-system
  wait: true
  interval: 30m
  retryInterval: 1m
@@ -41,6 +42,7 @@ spec:
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
+    namespace: flux-system
  wait: true
  interval: 30m
  retryInterval: 1m
--- a/kubernetes/apps/database/emqx/ks.yaml
+++ b/kubernetes/apps/database/emqx/ks.yaml
@@ -12,6 +12,7 @@ spec:
      app.kubernetes.io/name: *app
  dependsOn:
    - name: rook-ceph-cluster
+      namespace: rook-ceph
    - name: external-secrets-stores
      namespace: external-secrets
  path: ./kubernetes/apps/database/emqx/app
@@ -19,6 +20,7 @@ spec:
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
+    namespace: flux-system
  wait: false
  interval: 30m
  retryInterval: 1m
--- a/kubernetes/apps/database/influx/ks.yaml
+++ b/kubernetes/apps/database/influx/ks.yaml
@@ -17,10 +17,12 @@ spec:
  sourceRef:
    kind: GitRepository
    name: home-ops-kubernetes
+    namespace: flux-system
  dependsOn:
    - name: external-secrets-stores
      namespace: external-secrets
    - name: volsync
+      namespace: volsync
  wait: true
  interval: 30m
  retryInterval: 1m
--- a/kubernetes/apps/database/kustomization.yaml
+++ b/kubernetes/apps/database/kustomization.yaml
@@ -2,10 +2,10 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: database
+components:
+  - ../../components/common
 resources:
-  # Pre Flux-Kustomizations
-  - ./namespace.yaml
-  # Flux-Kustomizations
  - ./crunchy-postgres-operator/ks.yaml
  - ./dragonfly/ks.yaml
  - ./emqx/ks.yaml
--- a/kubernetes/apps/database/namespace.yaml
+++ b/kubernetes/apps/database/namespace.yaml
@@ -1,37 +0,0 @@
---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: database
-  labels:
-    kustomize.toolkit.fluxcd.io/prune: disabled
---
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/notification.toolkit.fluxcd.io/provider_v1beta3.json
-apiVersion: notification.toolkit.fluxcd.io/v1beta3
-kind: Provider
-metadata:
-  name: alert-manager
-  namespace: database
-spec:
-  type: alertmanager
-  address: http://kube-prometheus-stack-alertmanager.observability:9093/api/v2/alerts/
---
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/notification.toolkit.fluxcd.io/alert_v1beta3.json
-apiVersion: notification.toolkit.fluxcd.io/v1beta3
-kind: Alert
-metadata:
-  name: alert-manager
-  namespace: database
-spec:
-  providerRef:
-    name: alert-manager
-  eventSeverity: error
-  eventSources:
-    - kind: HelmRelease
-      name: "*"
-  exclusionList:
-    - "error.*lookup github\\.com"
-    - "error.*lookup raw\\.githubusercontent\\.com"
-    - "dial.*tcp.*timeout"
-    - "waiting.*socket"
-  suspend: false