shpaq/auricom-home-cluster
1
0
Fork 0
mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

♻️ flux kustomizations

Browse Source
This commit is contained in:
auricom
2022-12-26 15:24:33 +01:00
parent b4572bf19a
commit ca31e11491
730 changed files with 6825 additions and 3766 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
kubernetes/apps/volsync/kustomization.yaml Normal file
View File

@@ -0,0 +1,10 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
# Pre Flux-Kustomizations
- ./namespace.yaml
# Flux-Kustomizations
- ./snapscheduler/ks.yaml
- ./volsync/ks.yaml

7
kubernetes/apps/volsync/namespace.yaml Normal file
View File

@@ -0,0 +1,7 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: volsync
labels:
kustomize.toolkit.fluxcd.io/prune: disabled

65
kubernetes/apps/volsync/readme.md Normal file
View File

@@ -0,0 +1,65 @@
# Volsync
## S3 Configuration
1. Create `~/.mc/config.json`
```json
{
"version": "10",
"aliases": {
"minio": {
"url": "https://s3.<domain>",
"accessKey": "<access-key>",
"secretKey": "<secret-key>",
"api": "S3v4",
"path": "auto"
}
}
}
```
2. Create the volsync user and password
```sh
mc admin user add minio volsync <super-secret-password>
```
3. Create the volsync bucket
```sh
mc mb minio/volsync
```
4. Create `volsync-user-policy.json`
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"s3:ListBucket",
"s3:PutObject",
"s3:GetObject",
"s3:DeleteObject"
],
"Effect": "Allow",
"Resource": ["arn:aws:s3:::volsync/*", "arn:aws:s3:::volsync"],
"Sid": ""
}
]
}
```
5. Apply the bucket policies
```sh
mc admin policy add minio volsync-private volsync-user-policy.json
```
6. Associate private policy with the user
```sh
mc admin policy set minio volsync-private user=volsync
```

28
kubernetes/apps/volsync/snapscheduler/app/helmrelease.yaml Normal file
View File

@@ -0,0 +1,28 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrelease_v2beta1.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: snapscheduler
namespace: volsync
spec:
interval: 15m
chart:
spec:
chart: snapscheduler
version: 3.2.0
sourceRef:
kind: HelmRepository
name: backube
namespace: flux-system
install:
createNamespace: true
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
manageCRDs: true
metrics:
disableAuth: true

7
kubernetes/apps/volsync/snapscheduler/app/kustomization.yaml Normal file
View File

@@ -0,0 +1,7 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: volsync
resources:
- ./helmrelease.yaml

46
kubernetes/apps/volsync/snapscheduler/ks.yaml Normal file
View File

@@ -0,0 +1,46 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
kind: Kustomization
metadata:
name: cluster-apps-snapscheduler
namespace: flux-system
labels:
substitution.flux.home.arpa/enabled: "true"
spec:
dependsOn:
- name: cluster-apps-snapshot-controller
path: ./kubernetes/apps/volsync/snapscheduler/app
prune: true
sourceRef:
kind: GitRepository
name: home-ops-kubernetes
healthChecks:
- apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
name: snapscheduler
namespace: volsync
interval: 30m
retryInterval: 1m
timeout: 3m
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
kind: Kustomization
metadata:
name: cluster-apps-snapscheduler-schedules
namespace: flux-system
labels:
substitution.flux.home.arpa/enabled: "true"
spec:
dependsOn:
- name: cluster-apps-snapscheduler
path: ./kubernetes/apps/volsync/snapscheduler/schedules
prune: true
sourceRef:
kind: GitRepository
name: home-ops-kubernetes
wait: true
interval: 30m
retryInterval: 1m
timeout: 3m

6
kubernetes/apps/volsync/snapscheduler/schedules/kustomization.yaml Normal file
View File

@@ -0,0 +1,6 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./snapschedule.yaml

17
kubernetes/apps/volsync/snapscheduler/schedules/snapschedule.yaml Normal file
View File

@@ -0,0 +1,17 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/snapshotschedule_v1.json
apiVersion: snapscheduler.backube/v1
kind: SnapshotSchedule
metadata:
name: main
namespace: default
spec:
disabled: false
claimSelector:
matchLabels:
snapshot.home.arpa/enabled: "true"
retention:
expires: 48h
schedule: "@daily"
snapshotTemplate:
snapshotClassName: csi-ceph-blockpool

28
kubernetes/apps/volsync/volsync/app/helmrelease.yaml Normal file
View File

@@ -0,0 +1,28 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helmrelease_v2beta1.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: volsync
namespace: volsync
spec:
interval: 15m
chart:
spec:
chart: volsync
version: 0.5.0
sourceRef:
kind: HelmRepository
name: backube
namespace: flux-system
install:
createNamespace: true
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
manageCRDs: true
metrics:
disableAuth: true

8
kubernetes/apps/volsync/volsync/app/kustomization.yaml Normal file
View File

@@ -0,0 +1,8 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: volsync
resources:
- ./helmrelease.yaml
- ./prometheusrule.yaml

29
kubernetes/apps/volsync/volsync/app/prometheusrule.yaml Normal file
View File

@@ -0,0 +1,29 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/prometheusrule_v1.json
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: volsync
namespace: volsync
spec:
groups:
- name: volsync.rules
rules:
- alert: VolSyncComponentAbsent
annotations:
summary: VolSync component has disappeared from Prometheus target discovery.
expr: |
absent(up{job=~".*volsync.*"} == 1)
for: 15m
labels:
severity: critical
- alert: VolSyncVolumeOutOfSync
annotations:
summary: >-
{{ $labels.obj_namespace }}/{{ $labels.obj_name }} volume
is out of sync.
expr: |
volsync_volume_out_of_sync == 1
for: 15m
labels:
severity: critical

25
kubernetes/apps/volsync/volsync/ks.yaml Normal file
View File

@@ -0,0 +1,25 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
kind: Kustomization
metadata:
name: cluster-apps-volsync-app
namespace: flux-system
labels:
substitution.flux.home.arpa/enabled: "true"
spec:
dependsOn:
- name: cluster-apps-snapshot-controller
path: ./kubernetes/apps/volsync/volsync/app
prune: true
sourceRef:
kind: GitRepository
name: home-ops-kubernetes
healthChecks:
- apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
name: volsync
namespace: volsync
interval: 30m
retryInterval: 1m
timeout: 3m