♻️ apply kube templates

This commit is contained in:
auricom
2024-01-23 17:22:40 +01:00
parent d384984388
commit cb87a67dd2
262 changed files with 1510 additions and 3360 deletions

View File

@@ -1,26 +0,0 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
name: flood-gatus-ep
namespace: default
labels:
gatus.io/enabled: "true"
data:
config.yaml: |
endpoints:
- name: flood
group: internal
url: 192.168.8.1
interval: 1m
ui:
hide-hostname: true
hide-url: true
dns:
query-name: flood.${SECRET_CLUSTER_DOMAIN}
query-type: A
conditions:
- "[BODY] == 192.168.169.101"
- "[DNS_RCODE] == NOERROR"
alerts:
- type: pushover

View File

@@ -35,7 +35,6 @@ spec:
fsGroupChangePolicy: "OnRootMismatch"
controllers:
main:
type: statefulset
annotations:
reloader.stakater.com/auto: "true"
containers:
@@ -56,14 +55,6 @@ spec:
cpu: 15m
limits:
memory: 512Mi
statefulset:
volumeClaimTemplates:
- name: config
accessMode: ReadWriteOnce
size: 50Gi
storageClass: rook-ceph-block
globalMounts:
- path: /data
service:
main:
ports:
@@ -90,3 +81,9 @@ spec:
tls:
- hosts:
- *host
persistence:
config:
enabled: true
existingClaim: *app
globalMounts:
- path: /data

View File

@@ -5,6 +5,6 @@ kind: Kustomization
namespace: default
resources:
- ./externalsecret.yaml
- ./gatus.yaml
- ./helmrelease.yaml
- ./volsync.yaml
- ../../../../templates/gatus/guarded
- ../../../../templates/volsync

View File

@@ -1,48 +0,0 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: flood-restic
namespace: default
spec:
secretStoreRef:
kind: ClusterSecretStore
name: onepassword-connect
target:
name: flood-restic-secret
template:
engineVersion: v2
data:
RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/flood'
RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
dataFrom:
- extract:
key: volsync-restic-template
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: flood
namespace: default
spec:
sourcePVC: config-flood-0
trigger:
schedule: "0 7 * * *"
restic:
copyMethod: Snapshot
pruneIntervalDays: 7
repository: flood-restic-secret
cacheCapacity: 10Gi
volumeSnapshotClassName: csi-ceph-blockpool
storageClassName: rook-ceph-block
moverSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
retain:
daily: 7
within: 3d

View File

@@ -3,18 +3,27 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: cluster-apps-flood-app
name: &app flood
namespace: flux-system
spec:
targetNamespace: default
commonMetadata:
labels:
app.kubernetes.io/name: *app
dependsOn:
- name: cluster-apps-external-secrets-stores
- name: cluster-apps-qbittorrent-app
- name: cluster-apps-volsync-app
- name: external-secrets-stores
- name: qbittorrent
- name: volsync
path: ./kubernetes/apps/default/flood/app
prune: true
sourceRef:
kind: GitRepository
name: home-ops-kubernetes
wait: false
interval: 30m
retryInterval: 1m
timeout: 3m
timeout: 5m
postBuild:
substitute:
APP: *app
VOLSYNC_CAPACITY: 2Gi