✨ backube

kubernetes/base/repositories/helm/backube.yaml

@@ -0,0 +1,10 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrepository_v1beta2.json
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: backube
+  namespace: flux-system
+spec:
+  interval: 2h
+  url: https://backube.github.io/helm-charts/

kubernetes/base/repositories/helm/kustomization.yaml

@@ -3,6 +3,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - ./backube.yaml
   - ./bitnami.yaml
   - ./bjw-s.yaml
   - ./cert-manager-webhook-ovh.yaml
@@ -21,6 +22,7 @@ resources:
   - ./kyverno.yaml
   - ./metrics-server.yaml
   - ./node-feature-discovery.yaml
+  - ./piraeus.yaml
   - ./postfinance.yaml
   - ./prometheus-community.yaml
   - ./rook-ceph.yaml

kubernetes/base/repositories/helm/piraeus.yaml

@@ -0,0 +1,10 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrepository_v1beta2.json
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: piraeus
+  namespace: flux-system
+spec:
+  interval: 2h
+  url: https://piraeus.io/helm-charts/

kubernetes/cluster-0/apps/storage/kustomization.yaml

@@ -6,4 +6,6 @@ resources:
   - ./kopia-web
   - ./resilio-sync
   - ./smartctl-exporter
+  - ./snapshot-controller/ks.yaml
   - ./truecommand
+  - ./volsync

kubernetes/cluster-0/apps/storage/snapshot-controller/app/helmrelease.yaml

@@ -0,0 +1,68 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: snapshot-controller
+  namespace: kube-system
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: snapshot-controller
+      version: 1.6.2
+      sourceRef:
+        kind: HelmRepository
+        name: piraeus
+        namespace: flux-system
+  install:
+    createNamespace: true
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  upgrade:
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  values:
+    replicaCount: 3
+    volumeSnapshotClasses:
+      - name: csi-ceph-blockpool
+        driver: rook-ceph.rbd.csi.ceph.com
+        annotations:
+          snapshot.storage.kubernetes.io/is-default-class: "true"
+        parameters:
+          clusterID: rook-ceph
+          csi.storage.k8s.io/snapshotter-secret-name: rook-csi-rbd-provisioner
+          csi.storage.k8s.io/snapshotter-secret-namespace: rook-ceph
+        deletionPolicy: Delete
+    serviceMonitor:
+      create: true
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: snapshot-validation-webhook
+  namespace: kube-system
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: snapshot-validation-webhook
+      version: 1.6.2
+      sourceRef:
+        kind: HelmRepository
+        name: piraeus
+        namespace: flux-system
+  install:
+    createNamespace: true
+    crds: Skip
+    remediation:
+      retries: 3
+  upgrade:
+    crds: Skip
+    remediation:
+      retries: 3
+  dependsOn:
+    - name: snapshot-controller

kubernetes/cluster-0/apps/storage/snapshot-controller/app/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - ./helmrelease.yaml

kubernetes/cluster-0/apps/storage/snapshot-controller/ks.yaml

@@ -0,0 +1,27 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster-apps-snapshot-controller
+  namespace: flux-system
+  labels:
+    substitution.flux.home.arpa/enabled: "true"
+spec:
+  path: ./kubernetes/cluster-0/apps/storage/snapshot-controller/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-ops
+  healthChecks:
+    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
+      kind: HelmRelease
+      name: snapshot-controller
+      namespace: kube-system
+    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
+      kind: HelmRelease
+      name: snapshot-validation-webhook
+      namespace: kube-system
+  interval: 30m
+  retryInterval: 1m
+  timeout: 3m

kubernetes/cluster-0/apps/storage/volsync/kustomization.yaml

@@ -0,0 +1,10 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  # Pre Flux-Kustomizations
+  - ./namespace.yaml
+  # Flux-Kustomizations
+  - ./snapscheduler/ks.yaml
+  - ./volsync/ks.yaml

kubernetes/cluster-0/apps/storage/volsync/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: volsync
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled

kubernetes/cluster-0/apps/storage/volsync/snapscheduler/app/helmrelease.yaml

@@ -0,0 +1,28 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: snapscheduler
+  namespace: volsync
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: snapscheduler
+      version: 3.2.0
+      sourceRef:
+        kind: HelmRepository
+        name: backube
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    manageCRDs: true
+    metrics:
+      disableAuth: true

kubernetes/cluster-0/apps/storage/volsync/snapscheduler/app/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: volsync
+resources:
+  - ./helmrelease.yaml

kubernetes/cluster-0/apps/storage/volsync/snapscheduler/ks.yaml

@@ -0,0 +1,46 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster-apps-snapscheduler
+  namespace: flux-system
+  labels:
+    substitution.flux.home.arpa/enabled: "true"
+spec:
+  dependsOn:
+    - name: cluster-apps-snapshot-controller
+  path: ./kubernetes/cluster-0/apps/storage/volsync/snapscheduler/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-ops
+  healthChecks:
+    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
+      kind: HelmRelease
+      name: snapscheduler
+      namespace: volsync
+  interval: 30m
+  retryInterval: 1m
+  timeout: 3m
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster-apps-snapscheduler-schedules
+  namespace: flux-system
+  labels:
+    substitution.flux.home.arpa/enabled: "true"
+spec:
+  dependsOn:
+    - name: cluster-apps-snapscheduler
+  path: ./kubernetes/cluster-0/apps/storage/volsync/snapscheduler/schedules
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-ops
+  wait: true
+  interval: 30m
+  retryInterval: 1m
+  timeout: 3m

kubernetes/cluster-0/apps/storage/volsync/snapscheduler/schedules/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./snapschedule.yaml

kubernetes/cluster-0/apps/storage/volsync/snapscheduler/schedules/snapschedule.yaml

@@ -0,0 +1,17 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/snapshotschedule_v1.json
+apiVersion: snapscheduler.backube/v1
+kind: SnapshotSchedule
+metadata:
+  name: main
+  namespace: default
+spec:
+  disabled: false
+  claimSelector:
+    matchLabels:
+      snapshot.home.arpa/enabled: "true"
+  retention:
+    expires: 48h
+  schedule: "@daily"
+  snapshotTemplate:
+    snapshotClassName: csi-ceph-blockpool

kubernetes/cluster-0/apps/storage/volsync/volsync/app/helmrelease.yaml

@@ -0,0 +1,28 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: volsync
+  namespace: volsync
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: volsync
+      version: 0.5.0
+      sourceRef:
+        kind: HelmRepository
+        name: backube
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    manageCRDs: true
+    metrics:
+      disableAuth: true

kubernetes/cluster-0/apps/storage/volsync/volsync/app/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: volsync
+resources:
+  - ./helmrelease.yaml
+  - ./prometheusrule.yaml

kubernetes/cluster-0/apps/storage/volsync/volsync/app/prometheusrule.yaml

@@ -0,0 +1,29 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/prometheusrule_v1.json
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: volsync
+  namespace: volsync
+spec:
+  groups:
+    - name: volsync.rules
+      rules:
+        - alert: VolSyncComponentAbsent
+          annotations:
+            summary: VolSync component has disappeared from Prometheus target discovery.
+          expr: |
+            absent(up{job=~".*volsync.*"} == 1)
+          for: 15m
+          labels:
+            severity: critical
+        - alert: VolSyncVolumeOutOfSync
+          annotations:
+            summary: >-
+              {{ $labels.obj_namespace }}/{{ $labels.obj_name }} volume
+              is out of sync.
+          expr: |
+            volsync_volume_out_of_sync == 1
+          for: 15m
+          labels:
+            severity: critical

kubernetes/cluster-0/apps/storage/volsync/volsync/ks.yaml

@@ -0,0 +1,25 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster-apps-volsync-app
+  namespace: flux-system
+  labels:
+    substitution.flux.home.arpa/enabled: "true"
+spec:
+  dependsOn:
+    - name: cluster-apps-snapshot-controller
+  path: ./kubernetes/cluster-0/apps/storage/volsync/volsync/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-ops
+  healthChecks:
+    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
+      kind: HelmRelease
+      name: volsync
+      namespace: volsync
+  interval: 30m
+  retryInterval: 1m
+  timeout: 3m

kubernetes/cluster-0/core/flux-system/notifications/github/notification.yaml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/provider_v1beta2.json
 apiVersion: notification.toolkit.fluxcd.io/v1beta2
 kind: Provider
 metadata:
@@ -10,7 +11,8 @@ spec:
   secretRef:
     name: github-token
 ---
-apiVersion: notification.toolkit.fluxcd.io/v1beta1
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/alert_v1beta2.json
+apiVersion: notification.toolkit.fluxcd.io/v1beta2
 kind: Alert
 metadata:
   name: github

kubernetes/cluster-0/core/flux-system/webhook/github/receiver.yaml

@@ -1,5 +1,6 @@
 ---
-apiVersion: notification.toolkit.fluxcd.io/v1beta1
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/receiver_v1beta2.json
+apiVersion: notification.toolkit.fluxcd.io/v1beta2
 kind: Receiver
 metadata:
   name: home-ops

kubernetes/flux/flux-cluster.yaml

@@ -14,6 +14,7 @@ spec:
   secretRef:
     name: github-deploy-key
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
@@ -28,6 +29,7 @@ spec:
     kind: GitRepository
     name: home-ops
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
@@ -45,6 +47,7 @@ spec:
     secretRef:
       name: sops-age
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
@@ -71,6 +74,7 @@ spec:
       - kind: Secret
         name: cluster-secrets
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
@@ -96,3 +100,22 @@ spec:
         name: cluster-settings
       - kind: Secret
         name: cluster-secrets
+  patches:
+    - patch: |-
+        apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+        kind: Kustomization
+        metadata:
+          name: not-used
+        spec:
+          decryption:
+            provider: sops
+            secretRef:
+              name: sops-age
+          postBuild:
+            substituteFrom:
+              - kind: ConfigMap
+                name: cluster-settings
+              - kind: Secret
+                name: cluster-secrets
+      target:
+        labelSelector: substitution.flux.home.arpa/enabled=true