shpaq/auricom-home-cluster
1
0
Fork 0
mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

♻️ apply kube templates

Browse Source
This commit is contained in:
auricom
2024-01-23 17:22:40 +01:00
parent d384984388
commit cb87a67dd2
262 changed files with 1510 additions and 3360 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
kubernetes/apps/default/resilio-sync/claude/gatus.yaml
View File

@@ -1,26 +0,0 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
name: resilio-claude-gatus-ep
namespace: default
labels:
gatus.io/enabled: "true"
data:
config.yaml: |
endpoints:
- name: resilio-claude
group: internal
url: 192.168.8.1
interval: 1m
ui:
hide-hostname: true
hide-url: true
dns:
query-name: resilio-claude.${SECRET_CLUSTER_DOMAIN}
query-type: A
conditions:
- "[BODY] == 192.168.169.101"
- "[DNS_RCODE] == NOERROR"
alerts:
- type: pushover

14
kubernetes/apps/default/resilio-sync/claude/helmrelease.yaml
View File

@@ -32,7 +32,6 @@ spec:
runAsUser: 0
controllers:
main:
type: statefulset
annotations:
reloader.stakater.com/auto: "true"
containers:
@@ -49,14 +48,6 @@ spec:
memory: 512Mi
limits:
memory: 2Gi
statefulset:
volumeClaimTemplates:
- name: config
accessMode: ReadWriteOnce
size: 1Gi
storageClass: rook-ceph-block
globalMounts:
- path: /config
service:
main:
ports:
@@ -81,6 +72,11 @@ spec:
- hosts:
- *host
persistence:
config:
enabled: true
existingClaim: *app
globalMounts:
- path: /config
sync-conf:
type: configMap
name: resilio-claude-configmap

4
kubernetes/apps/default/resilio-sync/claude/kustomization.yaml
View File

@@ -4,9 +4,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: default
resources:
- ./gatus.yaml
- ./helmrelease.yaml
- ./volsync.yaml
- ../../../../templates/gatus/guarded
- ../../../../templates/volsync
configMapGenerator:
- name: resilio-claude-configmap
files:

48
kubernetes/apps/default/resilio-sync/claude/volsync.yaml
View File

@@ -1,48 +0,0 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: resilio-claude-restic
namespace: default
spec:
secretStoreRef:
kind: ClusterSecretStore
name: onepassword-connect
target:
name: resilio-claude-restic-secret
template:
engineVersion: v2
data:
RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/resilio-claude'
RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
dataFrom:
- extract:
key: volsync-restic-template
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: resilio-claude
namespace: default
spec:
sourcePVC: config-resilio-claude-0
trigger:
schedule: "0 7 * * *"
restic:
copyMethod: Snapshot
pruneIntervalDays: 7
repository: resilio-claude-restic-secret
cacheCapacity: 2Gi
volumeSnapshotClassName: csi-ceph-blockpool
storageClassName: rook-ceph-block
moverSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
retain:
daily: 7
within: 3d

26
kubernetes/apps/default/resilio-sync/helene/gatus.yaml
View File

@@ -1,26 +0,0 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
name: resilio-helene-gatus-ep
namespace: default
labels:
gatus.io/enabled: "true"
data:
config.yaml: |
endpoints:
- name: resilio-helene
group: internal
url: 192.168.8.1
interval: 1m
ui:
hide-hostname: true
hide-url: true
dns:
query-name: resilio-helene.${SECRET_CLUSTER_DOMAIN}
query-type: A
conditions:
- "[BODY] == 192.168.169.101"
- "[DNS_RCODE] == NOERROR"
alerts:
- type: pushover

14
kubernetes/apps/default/resilio-sync/helene/helmrelease.yaml
View File

@@ -32,7 +32,6 @@ spec:
runAsUser: 0
controllers:
main:
type: statefulset
annotations:
reloader.stakater.com/auto: "true"
containers:
@@ -49,14 +48,6 @@ spec:
memory: 512Mi
limits:
memory: 2Gi
statefulset:
volumeClaimTemplates:
- name: config
accessMode: ReadWriteOnce
size: 1Gi
storageClass: rook-ceph-block
globalMounts:
- path: /config
service:
main:
ports:
@@ -81,6 +72,11 @@ spec:
- hosts:
- *host
persistence:
config:
enabled: true
existingClaim: *app
globalMounts:
- path: /config
sync-conf:
type: configMap
name: resilio-helene-configmap

4
kubernetes/apps/default/resilio-sync/helene/kustomization.yaml
View File

@@ -4,9 +4,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: default
resources:
- ./gatus.yaml
- ./helmrelease.yaml
- ./volsync.yaml
- ../../../../templates/gatus/guarded
- ../../../../templates/volsync
configMapGenerator:
- name: resilio-helene-configmap
files:

48
kubernetes/apps/default/resilio-sync/helene/volsync.yaml
View File

@@ -1,48 +0,0 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: resilio-helene-restic
namespace: default
spec:
secretStoreRef:
kind: ClusterSecretStore
name: onepassword-connect
target:
name: resilio-helene-restic-secret
template:
engineVersion: v2
data:
RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/resilio-helene'
RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
dataFrom:
- extract:
key: volsync-restic-template
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: resilio-helene
namespace: default
spec:
sourcePVC: config-resilio-helene-0
trigger:
schedule: "0 7 * * *"
restic:
copyMethod: Snapshot
pruneIntervalDays: 7
repository: resilio-helene-restic-secret
cacheCapacity: 2Gi
volumeSnapshotClassName: csi-ceph-blockpool
storageClassName: rook-ceph-block
moverSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
retain:
daily: 7
within: 3d

35
kubernetes/apps/default/resilio-sync/ks.yaml
View File

@@ -3,36 +3,55 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: cluster-apps-resilio-claude
name: &app resilio-claude
namespace: flux-system
spec:
targetNamespace: default
commonMetadata:
labels:
app.kubernetes.io/name: *app
path: ./kubernetes/apps/default/resilio-sync/claude
prune: true
sourceRef:
kind: GitRepository
name: home-ops-kubernetes
dependsOn:
- name: cluster-apps-rook-ceph-cluster
- name: cluster-apps-volsync-app
- name: rook-ceph-cluster
- name: volsync
wait: false
interval: 30m
retryInterval: 1m
timeout: 3m
timeout: 5m
postBuild:
substitute:
APP: *app
VOLSYNC_CAPACITY: 2Gi
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: cluster-apps-resilio-helene
name: &app resilio-helene
namespace: flux-system
spec:
targetNamespace: default
commonMetadata:
labels:
app.kubernetes.io/name: *app
path: ./kubernetes/apps/default/resilio-sync/helene
prune: true
sourceRef:
kind: GitRepository
name: home-ops-kubernetes
dependsOn:
- name: cluster-apps-rook-ceph-cluster
- name: cluster-apps-volsync-app
- name: rook-ceph-cluster
- name: volsync
wait: false
interval: 30m
retryInterval: 1m
timeout: 3m
timeout: 5m
postBuild:
substitute:
APP: *app
VOLSYNC_CAPACITY: 2Gi