From ea811669c3dc2630011554b1a63adb051b359ecb Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 04:54:27 -0500 Subject: [PATCH 001/107] move everything to dev branch --- argocd/templates/InternalProxy.yaml | 2 +- argocd/templates/argocd.yaml | 2 +- argocd/templates/authentik.yaml | 2 +- argocd/templates/bitwarden.yaml | 2 +- argocd/templates/cert-manager.yaml | 2 +- argocd/templates/crossplane.yml | 2 +- argocd/templates/durpapi.yaml | 2 +- argocd/templates/durpot.yaml | 2 +- argocd/templates/external-dns.yaml | 2 +- argocd/templates/external-secrets.yaml | 2 +- argocd/templates/gatekeeper.yaml | 2 +- argocd/templates/gitlab-runner.yaml | 2 +- argocd/templates/heimdall.yaml | 2 +- argocd/templates/krakend.yaml | 2 +- argocd/templates/kube-prometheus-stack.yaml | 2 +- argocd/templates/kubeclarity.yaml | 2 +- argocd/templates/littlelink.yaml | 2 +- argocd/templates/longhorn.yaml | 2 +- argocd/templates/nfs-client.yaml | 2 +- argocd/templates/open-webui.yaml | 2 +- argocd/templates/traefik.yaml | 2 +- argocd/templates/uptimekuma.yaml | 2 +- argocd/templates/vault.yaml | 2 +- 23 files changed, 23 insertions(+), 23 deletions(-) diff --git a/argocd/templates/InternalProxy.yaml b/argocd/templates/InternalProxy.yaml index 1769a19..a99813e 100644 --- a/argocd/templates/InternalProxy.yaml +++ b/argocd/templates/InternalProxy.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: internalproxy directory: recurse: true diff --git a/argocd/templates/argocd.yaml b/argocd/templates/argocd.yaml index d8f0fd3..5df8c09 100644 --- a/argocd/templates/argocd.yaml +++ b/argocd/templates/argocd.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: argocd destination: namespace: argocd diff --git a/argocd/templates/authentik.yaml b/argocd/templates/authentik.yaml index 735fa1a..ff4a7a1 100644 --- a/argocd/templates/authentik.yaml +++ b/argocd/templates/authentik.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: authentik destination: namespace: authentik diff --git a/argocd/templates/bitwarden.yaml b/argocd/templates/bitwarden.yaml index 6aad52f..6936d6b 100644 --- a/argocd/templates/bitwarden.yaml +++ b/argocd/templates/bitwarden.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: bitwarden directory: recurse: true diff --git a/argocd/templates/cert-manager.yaml b/argocd/templates/cert-manager.yaml index 1eb8fe2..2dfa2d4 100644 --- a/argocd/templates/cert-manager.yaml +++ b/argocd/templates/cert-manager.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: cert-manager destination: namespace: cert-manager diff --git a/argocd/templates/crossplane.yml b/argocd/templates/crossplane.yml index e079c78..299ebc9 100644 --- a/argocd/templates/crossplane.yml +++ b/argocd/templates/crossplane.yml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: crossplane destination: namespace: crossplane diff --git a/argocd/templates/durpapi.yaml b/argocd/templates/durpapi.yaml index 53c2db6..c468265 100644 --- a/argocd/templates/durpapi.yaml +++ b/argocd/templates/durpapi.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: durpapi destination: namespace: durpapi diff --git a/argocd/templates/durpot.yaml b/argocd/templates/durpot.yaml index 1bfcd37..6cf517e 100644 --- a/argocd/templates/durpot.yaml +++ b/argocd/templates/durpot.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: durpot destination: namespace: durpot diff --git a/argocd/templates/external-dns.yaml b/argocd/templates/external-dns.yaml index ba05f2c..e097b89 100644 --- a/argocd/templates/external-dns.yaml +++ b/argocd/templates/external-dns.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: external-dns destination: namespace: external-dns diff --git a/argocd/templates/external-secrets.yaml b/argocd/templates/external-secrets.yaml index cf8a595..0c0ddab 100644 --- a/argocd/templates/external-secrets.yaml +++ b/argocd/templates/external-secrets.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: external-secrets destination: namespace: external-secrets diff --git a/argocd/templates/gatekeeper.yaml b/argocd/templates/gatekeeper.yaml index 5c60c12..225194d 100644 --- a/argocd/templates/gatekeeper.yaml +++ b/argocd/templates/gatekeeper.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: gatekeeper destination: namespace: gatekeeper diff --git a/argocd/templates/gitlab-runner.yaml b/argocd/templates/gitlab-runner.yaml index c5539d7..6caa79d 100644 --- a/argocd/templates/gitlab-runner.yaml +++ b/argocd/templates/gitlab-runner.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: gitlab-runner destination: namespace: gitlab-runner diff --git a/argocd/templates/heimdall.yaml b/argocd/templates/heimdall.yaml index d695e34..2340dca 100644 --- a/argocd/templates/heimdall.yaml +++ b/argocd/templates/heimdall.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: heimdall destination: namespace: heimdall diff --git a/argocd/templates/krakend.yaml b/argocd/templates/krakend.yaml index 68a57d1..f1e1b78 100644 --- a/argocd/templates/krakend.yaml +++ b/argocd/templates/krakend.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: krakend destination: namespace: krakend diff --git a/argocd/templates/kube-prometheus-stack.yaml b/argocd/templates/kube-prometheus-stack.yaml index 02f8261..59800a7 100644 --- a/argocd/templates/kube-prometheus-stack.yaml +++ b/argocd/templates/kube-prometheus-stack.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: kube-prometheus-stack destination: namespace: kube-prometheus-stack diff --git a/argocd/templates/kubeclarity.yaml b/argocd/templates/kubeclarity.yaml index c812528..0457b36 100644 --- a/argocd/templates/kubeclarity.yaml +++ b/argocd/templates/kubeclarity.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: kubeclarity destination: namespace: kubeclarity diff --git a/argocd/templates/littlelink.yaml b/argocd/templates/littlelink.yaml index 99b08fe..42e2c2d 100644 --- a/argocd/templates/littlelink.yaml +++ b/argocd/templates/littlelink.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: littlelink directory: recurse: true diff --git a/argocd/templates/longhorn.yaml b/argocd/templates/longhorn.yaml index 017da6f..ea388f0 100644 --- a/argocd/templates/longhorn.yaml +++ b/argocd/templates/longhorn.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: longhorn destination: namespace: longhorn-system diff --git a/argocd/templates/nfs-client.yaml b/argocd/templates/nfs-client.yaml index e374885..f101b4d 100644 --- a/argocd/templates/nfs-client.yaml +++ b/argocd/templates/nfs-client.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: nfs-client directory: recurse: true diff --git a/argocd/templates/open-webui.yaml b/argocd/templates/open-webui.yaml index a2b25fa..658a941 100644 --- a/argocd/templates/open-webui.yaml +++ b/argocd/templates/open-webui.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: open-webui destination: namespace: open-webui diff --git a/argocd/templates/traefik.yaml b/argocd/templates/traefik.yaml index 3995a9f..d2247d7 100644 --- a/argocd/templates/traefik.yaml +++ b/argocd/templates/traefik.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: traefik destination: namespace: traefik diff --git a/argocd/templates/uptimekuma.yaml b/argocd/templates/uptimekuma.yaml index ff0e1af..dc00dc0 100644 --- a/argocd/templates/uptimekuma.yaml +++ b/argocd/templates/uptimekuma.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: uptimekuma directory: recurse: true diff --git a/argocd/templates/vault.yaml b/argocd/templates/vault.yaml index 6e243c5..672a6dd 100644 --- a/argocd/templates/vault.yaml +++ b/argocd/templates/vault.yaml @@ -7,7 +7,7 @@ spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main + targetRevision: dev path: vault destination: namespace: vault From e06a35f1a27db0381a63a770285735c77e33ea6b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 05:08:56 -0500 Subject: [PATCH 002/107] update --- authentik/templates/ingress.yaml | 6 +- bitwarden/templates/ingress.yaml | 8 +- durpapi/templates/ingress.yaml | 4 +- heimdall/templates/ingress.yaml | 8 +- internalproxy/templates/argocd.yaml | 6 +- .../templates/duplicati-ingress.yaml | 70 ---------------- internalproxy/templates/gitea.yaml | 9 -- internalproxy/templates/guac.yaml | 71 ---------------- internalproxy/templates/jellyfin.yaml | 9 -- internalproxy/templates/kasm.yaml | 9 -- internalproxy/templates/nexus.yaml | 71 ---------------- internalproxy/templates/plex.yaml | 9 -- .../templates/registry-internal.yaml | 59 ------------- internalproxy/templates/registry.yaml | 71 ---------------- internalproxy/templates/smokeping.yaml | 82 ------------------- internalproxy/templates/speedtest.yaml | 74 ----------------- internalproxy/templates/tdarr.yaml | 67 --------------- krakend/templates/ingress.yaml | 10 +-- kube-prometheus-stack/templates/ingress.yaml | 16 ++-- kubeclarity/templates/ingress.yaml | 10 +-- littlelink/templates/ingress.yaml | 10 +-- longhorn/templates/ingress.yaml | 8 +- open-webui/templates/ingress.yaml | 10 +-- uptimekuma/templates/ingress.yaml | 10 +-- vault/templates/ingress.yaml | 6 +- 25 files changed, 56 insertions(+), 657 deletions(-) delete mode 100644 internalproxy/templates/duplicati-ingress.yaml delete mode 100644 internalproxy/templates/gitea.yaml delete mode 100644 internalproxy/templates/guac.yaml delete mode 100644 internalproxy/templates/jellyfin.yaml delete mode 100644 internalproxy/templates/kasm.yaml delete mode 100644 internalproxy/templates/nexus.yaml delete mode 100644 internalproxy/templates/plex.yaml delete mode 100644 internalproxy/templates/registry-internal.yaml delete mode 100644 internalproxy/templates/registry.yaml delete mode 100644 internalproxy/templates/smokeping.yaml delete mode 100644 internalproxy/templates/speedtest.yaml delete mode 100644 internalproxy/templates/tdarr.yaml diff --git a/authentik/templates/ingress.yaml b/authentik/templates/ingress.yaml index ac10303..1de2d83 100644 --- a/authentik/templates/ingress.yaml +++ b/authentik/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`authentik.durp.info`) && PathPrefix(`/`) + - match: Host(`authentik.dev.durp.info`) && PathPrefix(`/`) kind: Rule services: - name: authentik-server @@ -25,9 +25,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "authentik.durp.info" + commonName: "authentik.dev.durp.info" dnsNames: - - "authentik.durp.info" + - "authentik.dev.durp.info" --- diff --git a/bitwarden/templates/ingress.yaml b/bitwarden/templates/ingress.yaml index 8a9a628..49cfa24 100644 --- a/bitwarden/templates/ingress.yaml +++ b/bitwarden/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`bitwarden.durp.info`) && PathPrefix(`/`) + - match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/`) kind: Rule services: - name: bitwarden @@ -25,9 +25,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "bitwarden.durp.info" + commonName: "bitwarden.dev.durp.info" dnsNames: - - "bitwarden.durp.info" + - "bitwarden.dev.durp.info" --- @@ -39,4 +39,4 @@ metadata: external-dns.alpha.kubernetes.io/hostname: bitwarden.durp.info spec: type: ExternalName - externalName: durp.info \ No newline at end of file + externalName: durp.info diff --git a/durpapi/templates/ingress.yaml b/durpapi/templates/ingress.yaml index bd268dd..b722670 100644 --- a/durpapi/templates/ingress.yaml +++ b/durpapi/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host("api.durp.info") && PathPrefix(`/api`) + - match: Host("api.dev.durp.info") && PathPrefix(`/api`) kind: Rule middlewares: - name: jwt @@ -24,7 +24,7 @@ spec: entryPoints: - websecure routes: - - match: Host("api.durp.info") && PathPrefix(`/swagger`) + - match: Host("api.dev.durp.info") && PathPrefix(`/swagger`) kind: Rule services: - name: "durpapi-service" diff --git a/heimdall/templates/ingress.yaml b/heimdall/templates/ingress.yaml index 98b6144..49dd1c7 100644 --- a/heimdall/templates/ingress.yaml +++ b/heimdall/templates/ingress.yaml @@ -7,7 +7,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`heimdall.durp.info`) && PathPrefix(`/`) + - match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/`) middlewares: - name: authentik-proxy-provider namespace: traefik @@ -15,7 +15,7 @@ spec: services: - name: heimdall port: 80 - - match: Host(`heimdall.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) + - match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) kind: Rule services: - name: ak-outpost-authentik-embedded-outpost @@ -35,9 +35,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "heimdall.durp.info" + commonName: "heimdall.dev.durp.info" dnsNames: - - "heimdall.durp.info" + - "heimdall.dev.durp.info" --- diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index 15dfaf9..01d5862 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -8,7 +8,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`argocd.internal.durp.info`) + - match: Host(`argocd.dev.internal.durp.info`) middlewares: - name: whitelist namespace: traefik @@ -41,6 +41,6 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "argocd.internal.durp.info" + commonName: "argocd.dev.internal.durp.info" dnsNames: - - "argocd.internal.durp.info" \ No newline at end of file + - "argocd.dev.internal.durp.info" diff --git a/internalproxy/templates/duplicati-ingress.yaml b/internalproxy/templates/duplicati-ingress.yaml deleted file mode 100644 index d51c391..0000000 --- a/internalproxy/templates/duplicati-ingress.yaml +++ /dev/null @@ -1,70 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: duplicati -spec: - ports: - - name: app - port: 8200 - protocol: TCP - targetPort: 8200 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: duplicati -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 8200 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: duplicati-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`duplicati.internal.durp.info`) && PathPrefix(`/`) - middlewares: - - name: whitelist - namespace: traefik - - name: authentik-proxy-provider - namespace: traefik - kind: Rule - services: - - name: duplicati - port: 8200 - - match: Host(`duplicati.internal.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) - kind: Rule - services: - - name: ak-outpost-authentik-embedded-outpost - namespace: authentik - port: 9000 - tls: - secretName: duplicati-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: duplicati-tls -spec: - secretName: duplicati-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "duplicati.internal.durp.info" - dnsNames: - - "duplicati.internal.durp.info" \ No newline at end of file diff --git a/internalproxy/templates/gitea.yaml b/internalproxy/templates/gitea.yaml deleted file mode 100644 index 8443aaf..0000000 --- a/internalproxy/templates/gitea.yaml +++ /dev/null @@ -1,9 +0,0 @@ -kind: Service -apiVersion: v1 -metadata: - name: gitea-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: gitea.durp.info -spec: - type: ExternalName - externalName: durp.info \ No newline at end of file diff --git a/internalproxy/templates/guac.yaml b/internalproxy/templates/guac.yaml deleted file mode 100644 index a69b685..0000000 --- a/internalproxy/templates/guac.yaml +++ /dev/null @@ -1,71 +0,0 @@ -kind: Service -apiVersion: v1 -metadata: - name: guac-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: guac.durp.info -spec: - type: ExternalName - externalName: durp.info - ---- - -apiVersion: v1 -kind: Service -metadata: - name: guac -spec: - ports: - - name: app - port: 8082 - protocol: TCP - targetPort: 8082 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: guac -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 8082 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: guac-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`guac.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: guac - port: 8082 - tls: - secretName: guac-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: guac-tls -spec: - secretName: guac-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "guac.durp.info" - dnsNames: - - "guac.durp.info" \ No newline at end of file diff --git a/internalproxy/templates/jellyfin.yaml b/internalproxy/templates/jellyfin.yaml deleted file mode 100644 index 61d86a5..0000000 --- a/internalproxy/templates/jellyfin.yaml +++ /dev/null @@ -1,9 +0,0 @@ -kind: Service -apiVersion: v1 -metadata: - name: jellyfin-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: jellyfin.durp.info -spec: - type: ExternalName - externalName: durp.info diff --git a/internalproxy/templates/kasm.yaml b/internalproxy/templates/kasm.yaml deleted file mode 100644 index 28b25ae..0000000 --- a/internalproxy/templates/kasm.yaml +++ /dev/null @@ -1,9 +0,0 @@ -kind: Service -apiVersion: v1 -metadata: - name: kasm-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: kasm.durp.info -spec: - type: ExternalName - externalName: durp.info diff --git a/internalproxy/templates/nexus.yaml b/internalproxy/templates/nexus.yaml deleted file mode 100644 index 7074102..0000000 --- a/internalproxy/templates/nexus.yaml +++ /dev/null @@ -1,71 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: nexus -spec: - ports: - - name: app - port: 8081 - protocol: TCP - targetPort: 8081 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: nexus -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 8081 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: nexus-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`nexus.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: nexus - port: 8081 - tls: - secretName: nexus-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: nexus-tls -spec: - secretName: nexus-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "nexus.durp.info" - dnsNames: - - "nexus.durp.info" - ---- - -kind: Service -apiVersion: v1 -metadata: - name: nexus-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: nexus.durp.info -spec: - type: ExternalName - externalName: durp.info \ No newline at end of file diff --git a/internalproxy/templates/plex.yaml b/internalproxy/templates/plex.yaml deleted file mode 100644 index 2e70286..0000000 --- a/internalproxy/templates/plex.yaml +++ /dev/null @@ -1,9 +0,0 @@ -kind: Service -apiVersion: v1 -metadata: - name: plex-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: plex.durp.info -spec: - type: ExternalName - externalName: durp.info diff --git a/internalproxy/templates/registry-internal.yaml b/internalproxy/templates/registry-internal.yaml deleted file mode 100644 index a1c584f..0000000 --- a/internalproxy/templates/registry-internal.yaml +++ /dev/null @@ -1,59 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: registry-internal -spec: - ports: - - name: app - port: 5001 - protocol: TCP - targetPort: 5001 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: registry-internal -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 5001 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: registry-internal-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`registry.internal.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: registry-internal - port: 5001 - tls: - secretName: registry-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: registry-internal-tls -spec: - secretName: registry-internal-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "registry.durp.info" - dnsNames: - - "registry.durp.info" diff --git a/internalproxy/templates/registry.yaml b/internalproxy/templates/registry.yaml deleted file mode 100644 index b4ac19a..0000000 --- a/internalproxy/templates/registry.yaml +++ /dev/null @@ -1,71 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: registry -spec: - ports: - - name: app - port: 5000 - protocol: TCP - targetPort: 5000 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: registry -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 5000 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: registry-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`registry.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: registry - port: 5000 - tls: - secretName: registry-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: registry-tls -spec: - secretName: registry-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "registry.durp.info" - dnsNames: - - "registry.durp.info" - ---- - -kind: Service -apiVersion: v1 -metadata: - name: registry-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: registry.durp.info -spec: - type: ExternalName - externalName: durp.info \ No newline at end of file diff --git a/internalproxy/templates/smokeping.yaml b/internalproxy/templates/smokeping.yaml deleted file mode 100644 index 8a76738..0000000 --- a/internalproxy/templates/smokeping.yaml +++ /dev/null @@ -1,82 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: smokeping -spec: - ports: - - name: app - port: 81 - protocol: TCP - targetPort: 81 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: smokeping -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 81 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: smokeping-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`smokeping.durp.info`) && PathPrefix(`/`) - middlewares: - - name: whitelist - namespace: traefik - - name: authentik-proxy-provider - namespace: traefik - kind: Rule - services: - - name: smokeping - port: 81 - - match: Host(`smokeping.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) - kind: Rule - services: - - name: ak-outpost-authentik-embedded-outpost - namespace: authentik - port: 9000 - tls: - secretName: smokeping-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: smokeping-tls -spec: - secretName: smokeping-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "smokeping.durp.info" - dnsNames: - - "smokeping.durp.info" - ---- - -kind: Service -apiVersion: v1 -metadata: - name: smokeping-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: smokeping.durp.info -spec: - type: ExternalName - externalName: durp.info \ No newline at end of file diff --git a/internalproxy/templates/speedtest.yaml b/internalproxy/templates/speedtest.yaml deleted file mode 100644 index e034917..0000000 --- a/internalproxy/templates/speedtest.yaml +++ /dev/null @@ -1,74 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: speedtest -spec: - ports: - - name: app - port: 6580 - protocol: TCP - targetPort: 6580 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: speedtest -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 6580 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: speedtest-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`speedtest.durp.info`) && PathPrefix(`/`) - kind: Rule - middlewares: - - name: authentik-proxy-provider - namespace: traefik - services: - - name: speedtest - port: 6580 - tls: - secretName: speedtest-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: speedtest-tls -spec: - secretName: speedtest-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "speedtest.durp.info" - dnsNames: - - "speedtest.durp.info" - ---- - -kind: Service -apiVersion: v1 -metadata: - name: speedtest-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: speedtest.durp.info -spec: - type: ExternalName - externalName: durp.info \ No newline at end of file diff --git a/internalproxy/templates/tdarr.yaml b/internalproxy/templates/tdarr.yaml deleted file mode 100644 index c4403b9..0000000 --- a/internalproxy/templates/tdarr.yaml +++ /dev/null @@ -1,67 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: tdarr -spec: - ports: - - name: app - port: 8267 - protocol: TCP - targetPort: 8267 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: tdarr -subsets: -- addresses: - - ip: 192.168.20.253 - ports: - - name: app - port: 8267 - protocol: TCP - ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: tdarr-ingress - annotations: - cert-manager.io/cluster-issuer: letsencrypt-production -spec: - entryPoints: - - websecure - routes: - - match: Host(`tdarr.internal.durp.info`) - middlewares: - - name: whitelist - namespace: traefik - - name: authentik-proxy-provider - namespace: traefik - kind: Rule - services: - - name: tdarr - port: 8267 - scheme: http - tls: - secretName: tdarr-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: tdarr-tls -spec: - secretName: tdarr-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "tdarr.internal.durp.info" - dnsNames: - - "tdarr.internal.durp.info" diff --git a/krakend/templates/ingress.yaml b/krakend/templates/ingress.yaml index a8c08eb..4b42ba3 100644 --- a/krakend/templates/ingress.yaml +++ b/krakend/templates/ingress.yaml @@ -7,9 +7,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "api.durp.info" + commonName: "api.dev.durp.info" dnsNames: - - "api.durp.info" + - "api.dev.durp.info" --- @@ -21,7 +21,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`api.durp.info`) && PathPrefix(`/`) + - match: Host(`api.dev.durp.info`) && PathPrefix(`/`) kind: Rule services: - name: krakend-service @@ -37,7 +37,7 @@ apiVersion: v1 metadata: name: api-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: api.durp.info + external-dns.alpha.kubernetes.io/hostname: api.dev.durp.info spec: type: ExternalName externalName: durp.info @@ -49,7 +49,7 @@ apiVersion: v1 metadata: name: api-developer-dns annotations: - external-dns.alpha.kubernetes.io/hostname: developer.durp.info + external-dns.alpha.kubernetes.io/hostname: developer.dev.durp.info external-dns.alpha.kubernetes.io/cloudflare-proxied: "false" spec: type: ExternalName diff --git a/kube-prometheus-stack/templates/ingress.yaml b/kube-prometheus-stack/templates/ingress.yaml index caf0ee1..851faff 100644 --- a/kube-prometheus-stack/templates/ingress.yaml +++ b/kube-prometheus-stack/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`grafana.durp.info`) && PathPrefix(`/`) + - match: Host(`grafana.dev.durp.info`) && PathPrefix(`/`) kind: Rule services: - name: grafana @@ -25,9 +25,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "grafana.durp.info" + commonName: "grafana.dev.durp.info" dnsNames: - - "grafana.durp.info" + - "grafana.dev.durp.info" --- @@ -39,7 +39,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`alertmanager.durp.info`) && PathPrefix(`/`) + - match: Host(`alertmanager.dev.durp.info`) && PathPrefix(`/`) middlewares: - name: whitelist namespace: traefik @@ -63,9 +63,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "alertmanager.durp.info" + commonName: "alertmanager.dev.durp.info" dnsNames: - - "alertmanager.durp.info" + - "alertmanager.dev.durp.info" --- @@ -74,7 +74,7 @@ apiVersion: v1 metadata: name: grafana-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: grafana.durp.info + external-dns.alpha.kubernetes.io/hostname: grafana.dev.durp.info spec: type: ExternalName - externalName: durp.info \ No newline at end of file + externalName: dev.durp.info diff --git a/kubeclarity/templates/ingress.yaml b/kubeclarity/templates/ingress.yaml index 77b67a7..ac0950d 100644 --- a/kubeclarity/templates/ingress.yaml +++ b/kubeclarity/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`kubeclarity.durp.info`) && PathPrefix(`/`) + - match: Host(`kubeclarity.dev.durp.info`) && PathPrefix(`/`) middlewares: - name: whitelist namespace: traefik @@ -30,9 +30,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "kubeclarity.durp.info" + commonName: "kubeclarity.dev.durp.info" dnsNames: - - "kubeclarity.durp.info" + - "kubeclarity.dev.durp.info" --- @@ -41,7 +41,7 @@ apiVersion: v1 metadata: name: kubeclarity-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: kubeclarity.durp.info + external-dns.alpha.kubernetes.io/hostname: kubeclarity.dev.durp.info spec: type: ExternalName - externalName: durp.info + externalName: dev.durp.info diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 194f31e..5708501 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`links.durp.info`) && PathPrefix(`/`) + - match: Host(`links.dev.durp.info`) && PathPrefix(`/`) kind: Rule services: - name: littlelink @@ -25,9 +25,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "links.durp.info" + commonName: "links.dev.durp.info" dnsNames: - - "links.durp.info" + - "links.dev.durp.info" --- @@ -36,7 +36,7 @@ apiVersion: v1 metadata: name: links-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: links.durp.info + external-dns.alpha.kubernetes.io/hostname: links.dev.durp.info spec: type: ExternalName - externalName: durp.info \ No newline at end of file + externalName: dev.durp.info diff --git a/longhorn/templates/ingress.yaml b/longhorn/templates/ingress.yaml index df2e071..7f67dec 100644 --- a/longhorn/templates/ingress.yaml +++ b/longhorn/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`longhorn.internal.durp.info`) && PathPrefix(`/`) + - match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/`) middlewares: - name: whitelist namespace: traefik @@ -16,7 +16,7 @@ spec: services: - name: longhorn-frontend port: 80 - - match: Host(`longhorn.internal.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) + - match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) kind: Rule services: - name: ak-outpost-authentik-embedded-outpost @@ -36,6 +36,6 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "longhorn.internal.durp.info" + commonName: "longhorn.internal.dev.durp.info" dnsNames: - - "longhorn.internal.durp.info" + - "longhorn.internal.dev.durp.info" diff --git a/open-webui/templates/ingress.yaml b/open-webui/templates/ingress.yaml index 6331e92..9a5f14f 100644 --- a/open-webui/templates/ingress.yaml +++ b/open-webui/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`open-webui.durp.info`) && PathPrefix(`/`) + - match: Host(`open-webui.dev.durp.info`) && PathPrefix(`/`) kind: Rule services: - name: open-webui @@ -25,9 +25,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "open-webui.durp.info" + commonName: "open-webui.dev.durp.info" dnsNames: - - "open-webui.durp.info" + - "open-webui.dev.durp.info" --- @@ -36,7 +36,7 @@ apiVersion: v1 metadata: name: open-webui-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: open-webui.durp.info + external-dns.alpha.kubernetes.io/hostname: open-webui.dev.durp.info spec: type: ExternalName - externalName: durp.info + externalName: dev.durp.info diff --git a/uptimekuma/templates/ingress.yaml b/uptimekuma/templates/ingress.yaml index 3df2689..24c683e 100644 --- a/uptimekuma/templates/ingress.yaml +++ b/uptimekuma/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`kuma.durp.info`) && PathPrefix(`/`) + - match: Host(`kuma.dev.durp.info`) && PathPrefix(`/`) middlewares: - name: authentik-proxy-provider namespace: traefik @@ -28,9 +28,9 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "kuma.durp.info" + commonName: "kuma.dev.durp.info" dnsNames: - - "kuma.durp.info" + - "kuma.dev.durp.info" --- @@ -39,7 +39,7 @@ apiVersion: v1 metadata: name: heimdall-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: kuma.durp.info + external-dns.alpha.kubernetes.io/hostname: kuma.dev.durp.info spec: type: ExternalName - externalName: durp.info + externalName: dev.durp.info diff --git a/vault/templates/ingress.yaml b/vault/templates/ingress.yaml index 8998087..41802da 100644 --- a/vault/templates/ingress.yaml +++ b/vault/templates/ingress.yaml @@ -8,7 +8,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`vault.internal.durp.info`) + - match: Host(`vault.internal.dev.durp.info`) middlewares: - name: whitelist namespace: traefik @@ -31,7 +31,7 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "vault.internal.durp.info" + commonName: "vault.internal.dev.durp.info" dnsNames: - - "vault.internal.durp.info" + - "vault.internal.dev.durp.info" From 1be8492f4cc4ff006678f2366477627cfbaed190 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 06:50:24 -0500 Subject: [PATCH 003/107] update --- longhorn/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/Chart.yaml b/longhorn/Chart.yaml index b7b6417..8c0a8ae 100644 --- a/longhorn/Chart.yaml +++ b/longhorn/Chart.yaml @@ -9,4 +9,4 @@ appVersion: "1.16.0" dependencies: - name: longhorn repository: https://charts.longhorn.io - version: 1.3.2 + version: 1.6.1 From d0e7fd57eda34ec466476af4c19071a9a6013aac Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 06:52:13 -0500 Subject: [PATCH 004/107] update --- longhorn/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/values.yaml b/longhorn/values.yaml index 5343300..16fd4a4 100644 --- a/longhorn/values.yaml +++ b/longhorn/values.yaml @@ -238,7 +238,7 @@ longhorn: # certificate: # Configure a pod security policy in the Longhorn namespace to allow privileged pods - enablePSP: true + enablePSP: false ## Specify override namespace, specifically this is useful for using longhorn as sub-chart ## and its release namespace is not the `longhorn-system` From 8ff8705a2f7f5d68f7ad8c4f1c188ed8f63cc4fc Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 07:17:14 -0500 Subject: [PATCH 005/107] update --- longhorn/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/values.yaml b/longhorn/values.yaml index 16fd4a4..ced04ee 100644 --- a/longhorn/values.yaml +++ b/longhorn/values.yaml @@ -47,7 +47,7 @@ longhorn: persistence: defaultClass: true defaultFsType: ext4 - defaultClassReplicaCount: 3 + defaultClassReplicaCount: 1 defaultDataLocality: disabled # best-effort otherwise reclaimPolicy: Retain migratable: false From 583c5489003ae59dbbabd8bbd86256d4fa99ba49 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 07:36:54 -0500 Subject: [PATCH 006/107] update --- argocd/templates/metallb.yaml | 21 ++ metallb/Chart.yaml | 12 ++ metallb/templates/config.yaml | 12 ++ metallb/values.yaml | 364 ++++++++++++++++++++++++++++++++++ 4 files changed, 409 insertions(+) create mode 100644 argocd/templates/metallb.yaml create mode 100644 metallb/Chart.yaml create mode 100644 metallb/templates/config.yaml create mode 100644 metallb/values.yaml diff --git a/argocd/templates/metallb.yaml b/argocd/templates/metallb.yaml new file mode 100644 index 0000000..cc0aa5e --- /dev/null +++ b/argocd/templates/metallb.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: methallb + namespace: argocd +spec: + project: default + source: + repoURL: https://gitlab.com/developerdurp/homelab.git + targetRevision: dev + path: methallb + destination: + namespace: methallb + name: in-cluster + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true + diff --git a/metallb/Chart.yaml b/metallb/Chart.yaml new file mode 100644 index 0000000..6b183c3 --- /dev/null +++ b/metallb/Chart.yaml @@ -0,0 +1,12 @@ +apiVersion: v2 +name: metallb-system +description: A Helm chart for Kubernetes +type: application + +version: 0.1.0 +appVersion: "1.16.0" + +dependencies: +- name: metallb + repository: https://metallb.github.io/metallb + version: 0.14.5 diff --git a/metallb/templates/config.yaml b/metallb/templates/config.yaml new file mode 100644 index 0000000..b65a201 --- /dev/null +++ b/metallb/templates/config.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + namespace: metallb-system + name: config +data: + config: | + address-pools: + - name: default + protocol: layer2 + addresses: + - 192.168.10.130-192.168.10.140 diff --git a/metallb/values.yaml b/metallb/values.yaml new file mode 100644 index 0000000..36c62aa --- /dev/null +++ b/metallb/values.yaml @@ -0,0 +1,364 @@ +metallb: + # Default values for metallb. + # This is a YAML-formatted file. + # Declare variables to be passed into your templates. + + imagePullSecrets: [] + nameOverride: "" + fullnameOverride: "" + loadBalancerClass: "" + + # To configure MetalLB, you must specify ONE of the following two + # options. + + rbac: + # create specifies whether to install and use RBAC rules. + create: true + + prometheus: + # scrape annotations specifies whether to add Prometheus metric + # auto-collection annotations to pods. See + # https://github.com/prometheus/prometheus/blob/release-2.1/documentation/examples/prometheus-kubernetes.yml + # for a corresponding Prometheus configuration. Alternatively, you + # may want to use the Prometheus Operator + # (https://github.com/coreos/prometheus-operator) for more powerful + # monitoring configuration. If you use the Prometheus operator, this + # can be left at false. + scrapeAnnotations: false + + # port both controller and speaker will listen on for metrics + metricsPort: 7472 + + # if set, enables rbac proxy on the controller and speaker to expose + # the metrics via tls. + # secureMetricsPort: 9120 + + # the name of the secret to be mounted in the speaker pod + # to expose the metrics securely. If not present, a self signed + # certificate to be used. + speakerMetricsTLSSecret: "" + + # the name of the secret to be mounted in the controller pod + # to expose the metrics securely. If not present, a self signed + # certificate to be used. + controllerMetricsTLSSecret: "" + + # prometheus doens't have the permission to scrape all namespaces so we give it permission to scrape metallb's one + rbacPrometheus: true + + # the service account used by prometheus + # required when " .Values.prometheus.rbacPrometheus == true " and " .Values.prometheus.podMonitor.enabled=true or prometheus.serviceMonitor.enabled=true " + serviceAccount: "" + + # the namespace where prometheus is deployed + # required when " .Values.prometheus.rbacPrometheus == true " and " .Values.prometheus.podMonitor.enabled=true or prometheus.serviceMonitor.enabled=true " + namespace: "" + + # the image to be used for the kuberbacproxy container + rbacProxy: + repository: gcr.io/kubebuilder/kube-rbac-proxy + tag: v0.12.0 + pullPolicy: + + # Prometheus Operator PodMonitors + podMonitor: + # enable support for Prometheus Operator + enabled: false + + # optional additionnal labels for podMonitors + additionalLabels: {} + + # optional annotations for podMonitors + annotations: {} + + # Job label for scrape target + jobLabel: "app.kubernetes.io/name" + + # Scrape interval. If not set, the Prometheus default scrape interval is used. + interval: + + # metric relabel configs to apply to samples before ingestion. + metricRelabelings: [] + # - action: keep + # regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+' + # sourceLabels: [__name__] + + # relabel configs to apply to samples before ingestion. + relabelings: [] + # - sourceLabels: [__meta_kubernetes_pod_node_name] + # separator: ; + # regex: ^(.*)$ + # target_label: nodename + # replacement: $1 + # action: replace + + # Prometheus Operator ServiceMonitors. To be used as an alternative + # to podMonitor, supports secure metrics. + serviceMonitor: + # enable support for Prometheus Operator + enabled: false + + speaker: + # optional additional labels for the speaker serviceMonitor + additionalLabels: {} + # optional additional annotations for the speaker serviceMonitor + annotations: {} + # optional tls configuration for the speaker serviceMonitor, in case + # secure metrics are enabled. + tlsConfig: + insecureSkipVerify: true + + controller: + # optional additional labels for the controller serviceMonitor + additionalLabels: {} + # optional additional annotations for the controller serviceMonitor + annotations: {} + # optional tls configuration for the controller serviceMonitor, in case + # secure metrics are enabled. + tlsConfig: + insecureSkipVerify: true + + # Job label for scrape target + jobLabel: "app.kubernetes.io/name" + + # Scrape interval. If not set, the Prometheus default scrape interval is used. + interval: + + # metric relabel configs to apply to samples before ingestion. + metricRelabelings: [] + # - action: keep + # regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+' + # sourceLabels: [__name__] + + # relabel configs to apply to samples before ingestion. + relabelings: [] + # - sourceLabels: [__meta_kubernetes_pod_node_name] + # separator: ; + # regex: ^(.*)$ + # target_label: nodename + # replacement: $1 + # action: replace + + # Prometheus Operator alertmanager alerts + prometheusRule: + # enable alertmanager alerts + enabled: false + + # optional additionnal labels for prometheusRules + additionalLabels: {} + + # optional annotations for prometheusRules + annotations: {} + + # MetalLBStaleConfig + staleConfig: + enabled: true + labels: + severity: warning + + # MetalLBConfigNotLoaded + configNotLoaded: + enabled: true + labels: + severity: warning + + # MetalLBAddressPoolExhausted + addressPoolExhausted: + enabled: true + labels: + severity: alert + + addressPoolUsage: + enabled: true + thresholds: + - percent: 75 + labels: + severity: warning + - percent: 85 + labels: + severity: warning + - percent: 95 + labels: + severity: alert + + # MetalLBBGPSessionDown + bgpSessionDown: + enabled: true + labels: + severity: alert + + extraAlerts: [] + + # controller contains configuration specific to the MetalLB cluster + # controller. + controller: + enabled: true + # -- Controller log level. Must be one of: `all`, `debug`, `info`, `warn`, `error` or `none` + logLevel: info + # command: /controller + # webhookMode: enabled + image: + repository: quay.io/metallb/controller + tag: + pullPolicy: + ## @param controller.updateStrategy.type Metallb controller deployment strategy type. + ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy + ## e.g: + ## strategy: + ## type: RollingUpdate + ## rollingUpdate: + ## maxSurge: 25% + ## maxUnavailable: 25% + ## + strategy: + type: RollingUpdate + serviceAccount: + # Specifies whether a ServiceAccount should be created + create: true + # The name of the ServiceAccount to use. If not set and create is + # true, a name is generated using the fullname template + name: "" + annotations: {} + securityContext: + runAsNonRoot: true + # nobody + runAsUser: 65534 + fsGroup: 65534 + resources: {} + # limits: + # cpu: 100m + # memory: 100Mi + nodeSelector: {} + tolerations: [] + priorityClassName: "" + runtimeClassName: "" + affinity: {} + podAnnotations: {} + labels: {} + livenessProbe: + enabled: true + failureThreshold: 3 + initialDelaySeconds: 10 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 1 + readinessProbe: + enabled: true + failureThreshold: 3 + initialDelaySeconds: 10 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 1 + tlsMinVersion: "VersionTLS12" + tlsCipherSuites: "" + + extraContainers: [] + + # speaker contains configuration specific to the MetalLB speaker + # daemonset. + speaker: + enabled: true + # command: /speaker + # -- Speaker log level. Must be one of: `all`, `debug`, `info`, `warn`, `error` or `none` + logLevel: info + tolerateMaster: true + memberlist: + enabled: true + mlBindPort: 7946 + mlBindAddrOverride: "" + mlSecretKeyPath: "/etc/ml_secret_key" + excludeInterfaces: + enabled: true + # ignore the exclude-from-external-loadbalancer label + ignoreExcludeLB: false + + image: + repository: quay.io/metallb/speaker + tag: + pullPolicy: + ## @param speaker.updateStrategy.type Speaker daemonset strategy type + ## ref: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/ + ## + updateStrategy: + ## StrategyType + ## Can be set to RollingUpdate or OnDelete + ## + type: RollingUpdate + serviceAccount: + # Specifies whether a ServiceAccount should be created + create: true + # The name of the ServiceAccount to use. If not set and create is + # true, a name is generated using the fullname template + name: "" + annotations: {} + securityContext: {} + ## Defines a secret name for the controller to generate a memberlist encryption secret + ## By default secretName: {{ "metallb.fullname" }}-memberlist + ## + # secretName: + resources: {} + # limits: + # cpu: 100m + # memory: 100Mi + nodeSelector: {} + tolerations: [] + priorityClassName: "" + affinity: {} + ## Selects which runtime class will be used by the pod. + runtimeClassName: "" + podAnnotations: {} + labels: {} + livenessProbe: + enabled: true + failureThreshold: 3 + initialDelaySeconds: 10 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 1 + readinessProbe: + enabled: true + failureThreshold: 3 + initialDelaySeconds: 10 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 1 + startupProbe: + enabled: true + failureThreshold: 30 + periodSeconds: 5 + # frr contains configuration specific to the MetalLB FRR container, + # for speaker running alongside FRR. + frr: + enabled: true + image: + repository: quay.io/frrouting/frr + tag: 9.0.2 + pullPolicy: + metricsPort: 7473 + resources: {} + + # if set, enables a rbac proxy sidecar container on the speaker to + # expose the frr metrics via tls. + # secureMetricsPort: 9121 + + + reloader: + resources: {} + + frrMetrics: + resources: {} + + extraContainers: [] + + crds: + enabled: true + validationFailurePolicy: Fail + + # frrk8s contains the configuration related to using an frrk8s instance + # (github.com/metallb/frr-k8s) as the backend for the BGP implementation. + # This allows configuring additional frr parameters in combination to those + # applied by MetalLB. + frrk8s: + # if set, enables frrk8s as a backend. This is mutually exclusive to frr + # mode. + enabled: false From 2f9dca4bc7d2e1e109908c3789acdc9a4da5d010 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 07:38:09 -0500 Subject: [PATCH 007/107] update --- argocd/templates/metallb.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/argocd/templates/metallb.yaml b/argocd/templates/metallb.yaml index cc0aa5e..4110ad7 100644 --- a/argocd/templates/metallb.yaml +++ b/argocd/templates/metallb.yaml @@ -1,16 +1,16 @@ apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: methallb + name: metallb namespace: argocd spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git targetRevision: dev - path: methallb + path: metallb destination: - namespace: methallb + namespace: metallb name: in-cluster syncPolicy: automated: From 76449c7ccd1ef8b456fda985ed6243f1b9b288d3 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 07:39:25 -0500 Subject: [PATCH 008/107] update --- metallb/templates/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/metallb/templates/config.yaml b/metallb/templates/config.yaml index b65a201..e868c40 100644 --- a/metallb/templates/config.yaml +++ b/metallb/templates/config.yaml @@ -1,7 +1,7 @@ apiVersion: v1 kind: ConfigMap metadata: - namespace: metallb-system + namespace: metallb name: config data: config: | From aed1ff955628708c33cd7fbc8cdb9bccb04cfe24 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 13 May 2024 08:21:10 -0500 Subject: [PATCH 009/107] update --- metallb/values.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/metallb/values.yaml b/metallb/values.yaml index 36c62aa..d04832b 100644 --- a/metallb/values.yaml +++ b/metallb/values.yaml @@ -307,7 +307,10 @@ metallb: ## Selects which runtime class will be used by the pod. runtimeClassName: "" podAnnotations: {} - labels: {} + labels: + pod-security.kubernetes.io/enforce: privileged + pod-security.kubernetes.io/audit: privileged + pod-security.kubernetes.io/warn: privileged livenessProbe: enabled: true failureThreshold: 3 From 7beeb5c86f0824ea17c122b2986fb3046d393372 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 04:44:51 -0500 Subject: [PATCH 010/107] update --- metallb/templates/config.yaml | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/metallb/templates/config.yaml b/metallb/templates/config.yaml index e868c40..664e4a0 100644 --- a/metallb/templates/config.yaml +++ b/metallb/templates/config.yaml @@ -1,12 +1,12 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - namespace: metallb - name: config -data: - config: | - address-pools: - - name: default - protocol: layer2 - addresses: - - 192.168.10.130-192.168.10.140 +#apiVersion: v1 +#kind: ConfigMap +#metadata: +# namespace: metallb +# name: config +#data: +# config: | +# address-pools: +# - name: default +# protocol: layer2 +# addresses: +# - 192.168.10.130-192.168.10.140 From c3411b7f93be11a9f8d5e64dac75797f1b69f700 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 04:51:07 -0500 Subject: [PATCH 011/107] update --- metallb/values.yaml | 173 +------------------------------------------- 1 file changed, 1 insertion(+), 172 deletions(-) diff --git a/metallb/values.yaml b/metallb/values.yaml index d04832b..69b6742 100644 --- a/metallb/values.yaml +++ b/metallb/values.yaml @@ -1,173 +1,64 @@ metallb: - # Default values for metallb. - # This is a YAML-formatted file. - # Declare variables to be passed into your templates. - imagePullSecrets: [] nameOverride: "" fullnameOverride: "" loadBalancerClass: "" - # To configure MetalLB, you must specify ONE of the following two - # options. - rbac: - # create specifies whether to install and use RBAC rules. create: true prometheus: - # scrape annotations specifies whether to add Prometheus metric - # auto-collection annotations to pods. See - # https://github.com/prometheus/prometheus/blob/release-2.1/documentation/examples/prometheus-kubernetes.yml - # for a corresponding Prometheus configuration. Alternatively, you - # may want to use the Prometheus Operator - # (https://github.com/coreos/prometheus-operator) for more powerful - # monitoring configuration. If you use the Prometheus operator, this - # can be left at false. scrapeAnnotations: false - - # port both controller and speaker will listen on for metrics metricsPort: 7472 - - # if set, enables rbac proxy on the controller and speaker to expose - # the metrics via tls. - # secureMetricsPort: 9120 - - # the name of the secret to be mounted in the speaker pod - # to expose the metrics securely. If not present, a self signed - # certificate to be used. speakerMetricsTLSSecret: "" - - # the name of the secret to be mounted in the controller pod - # to expose the metrics securely. If not present, a self signed - # certificate to be used. controllerMetricsTLSSecret: "" - - # prometheus doens't have the permission to scrape all namespaces so we give it permission to scrape metallb's one rbacPrometheus: true - - # the service account used by prometheus - # required when " .Values.prometheus.rbacPrometheus == true " and " .Values.prometheus.podMonitor.enabled=true or prometheus.serviceMonitor.enabled=true " serviceAccount: "" - - # the namespace where prometheus is deployed - # required when " .Values.prometheus.rbacPrometheus == true " and " .Values.prometheus.podMonitor.enabled=true or prometheus.serviceMonitor.enabled=true " namespace: "" - - # the image to be used for the kuberbacproxy container rbacProxy: repository: gcr.io/kubebuilder/kube-rbac-proxy tag: v0.12.0 pullPolicy: - - # Prometheus Operator PodMonitors podMonitor: - # enable support for Prometheus Operator enabled: false - - # optional additionnal labels for podMonitors additionalLabels: {} - - # optional annotations for podMonitors annotations: {} - - # Job label for scrape target jobLabel: "app.kubernetes.io/name" - - # Scrape interval. If not set, the Prometheus default scrape interval is used. interval: - - # metric relabel configs to apply to samples before ingestion. metricRelabelings: [] - # - action: keep - # regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+' - # sourceLabels: [__name__] - - # relabel configs to apply to samples before ingestion. relabelings: [] - # - sourceLabels: [__meta_kubernetes_pod_node_name] - # separator: ; - # regex: ^(.*)$ - # target_label: nodename - # replacement: $1 - # action: replace - - # Prometheus Operator ServiceMonitors. To be used as an alternative - # to podMonitor, supports secure metrics. serviceMonitor: - # enable support for Prometheus Operator enabled: false - speaker: - # optional additional labels for the speaker serviceMonitor additionalLabels: {} - # optional additional annotations for the speaker serviceMonitor annotations: {} - # optional tls configuration for the speaker serviceMonitor, in case - # secure metrics are enabled. tlsConfig: insecureSkipVerify: true - controller: - # optional additional labels for the controller serviceMonitor additionalLabels: {} - # optional additional annotations for the controller serviceMonitor annotations: {} - # optional tls configuration for the controller serviceMonitor, in case - # secure metrics are enabled. tlsConfig: insecureSkipVerify: true - - # Job label for scrape target jobLabel: "app.kubernetes.io/name" - - # Scrape interval. If not set, the Prometheus default scrape interval is used. interval: - - # metric relabel configs to apply to samples before ingestion. metricRelabelings: [] - # - action: keep - # regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+' - # sourceLabels: [__name__] - - # relabel configs to apply to samples before ingestion. relabelings: [] - # - sourceLabels: [__meta_kubernetes_pod_node_name] - # separator: ; - # regex: ^(.*)$ - # target_label: nodename - # replacement: $1 - # action: replace - - # Prometheus Operator alertmanager alerts prometheusRule: - # enable alertmanager alerts enabled: false - - # optional additionnal labels for prometheusRules additionalLabels: {} - - # optional annotations for prometheusRules annotations: {} - - # MetalLBStaleConfig staleConfig: enabled: true labels: severity: warning - - # MetalLBConfigNotLoaded configNotLoaded: enabled: true labels: severity: warning - - # MetalLBAddressPoolExhausted addressPoolExhausted: enabled: true labels: severity: alert - addressPoolUsage: enabled: true thresholds: @@ -180,8 +71,6 @@ metallb: - percent: 95 labels: severity: alert - - # MetalLBBGPSessionDown bgpSessionDown: enabled: true labels: @@ -189,45 +78,25 @@ metallb: extraAlerts: [] - # controller contains configuration specific to the MetalLB cluster - # controller. controller: enabled: true # -- Controller log level. Must be one of: `all`, `debug`, `info`, `warn`, `error` or `none` logLevel: info - # command: /controller - # webhookMode: enabled image: repository: quay.io/metallb/controller tag: pullPolicy: - ## @param controller.updateStrategy.type Metallb controller deployment strategy type. - ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy - ## e.g: - ## strategy: - ## type: RollingUpdate - ## rollingUpdate: - ## maxSurge: 25% - ## maxUnavailable: 25% - ## strategy: type: RollingUpdate serviceAccount: - # Specifies whether a ServiceAccount should be created create: true - # The name of the ServiceAccount to use. If not set and create is - # true, a name is generated using the fullname template name: "" annotations: {} securityContext: runAsNonRoot: true - # nobody runAsUser: 65534 fsGroup: 65534 resources: {} - # limits: - # cpu: 100m - # memory: 100Mi nodeSelector: {} tolerations: [] priorityClassName: "" @@ -254,12 +123,8 @@ metallb: extraContainers: [] - # speaker contains configuration specific to the MetalLB speaker - # daemonset. speaker: enabled: true - # command: /speaker - # -- Speaker log level. Must be one of: `all`, `debug`, `info`, `warn`, `error` or `none` logLevel: info tolerateMaster: true memberlist: @@ -269,42 +134,24 @@ metallb: mlSecretKeyPath: "/etc/ml_secret_key" excludeInterfaces: enabled: true - # ignore the exclude-from-external-loadbalancer label ignoreExcludeLB: false image: repository: quay.io/metallb/speaker tag: pullPolicy: - ## @param speaker.updateStrategy.type Speaker daemonset strategy type - ## ref: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/ - ## updateStrategy: - ## StrategyType - ## Can be set to RollingUpdate or OnDelete - ## type: RollingUpdate serviceAccount: - # Specifies whether a ServiceAccount should be created create: true - # The name of the ServiceAccount to use. If not set and create is - # true, a name is generated using the fullname template name: "" annotations: {} securityContext: {} - ## Defines a secret name for the controller to generate a memberlist encryption secret - ## By default secretName: {{ "metallb.fullname" }}-memberlist - ## - # secretName: resources: {} - # limits: - # cpu: 100m - # memory: 100Mi nodeSelector: {} tolerations: [] priorityClassName: "" affinity: {} - ## Selects which runtime class will be used by the pod. runtimeClassName: "" podAnnotations: {} labels: @@ -329,8 +176,6 @@ metallb: enabled: true failureThreshold: 30 periodSeconds: 5 - # frr contains configuration specific to the MetalLB FRR container, - # for speaker running alongside FRR. frr: enabled: true image: @@ -339,29 +184,13 @@ metallb: pullPolicy: metricsPort: 7473 resources: {} - - # if set, enables a rbac proxy sidecar container on the speaker to - # expose the frr metrics via tls. - # secureMetricsPort: 9121 - - reloader: resources: {} - frrMetrics: resources: {} - extraContainers: [] - crds: enabled: true validationFailurePolicy: Fail - - # frrk8s contains the configuration related to using an frrk8s instance - # (github.com/metallb/frr-k8s) as the backend for the BGP implementation. - # This allows configuring additional frr parameters in combination to those - # applied by MetalLB. frrk8s: - # if set, enables frrk8s as a backend. This is mutually exclusive to frr - # mode. - enabled: false + enabled: true From f0ca5ec41f340f05731e16a203f5e32c03c8788b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 04:51:35 -0500 Subject: [PATCH 012/107] update --- metallb/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/metallb/values.yaml b/metallb/values.yaml index 69b6742..52b028d 100644 --- a/metallb/values.yaml +++ b/metallb/values.yaml @@ -177,7 +177,7 @@ metallb: failureThreshold: 30 periodSeconds: 5 frr: - enabled: true + enabled: false image: repository: quay.io/frrouting/frr tag: 9.0.2 From 2ef82bd70fc0947b55ed8e0d620d7f2c7700f061 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 04:53:37 -0500 Subject: [PATCH 013/107] update --- metallb/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/metallb/values.yaml b/metallb/values.yaml index 52b028d..25b7ee1 100644 --- a/metallb/values.yaml +++ b/metallb/values.yaml @@ -177,7 +177,7 @@ metallb: failureThreshold: 30 periodSeconds: 5 frr: - enabled: false + enabled: true image: repository: quay.io/frrouting/frr tag: 9.0.2 @@ -193,4 +193,4 @@ metallb: enabled: true validationFailurePolicy: Fail frrk8s: - enabled: true + enabled: false From 9c59677594bad48ac06b76025b088ce8d7b92082 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 04:54:36 -0500 Subject: [PATCH 014/107] update --- metallb/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/metallb/values.yaml b/metallb/values.yaml index 25b7ee1..876db14 100644 --- a/metallb/values.yaml +++ b/metallb/values.yaml @@ -125,7 +125,7 @@ metallb: speaker: enabled: true - logLevel: info + logLevel: debug tolerateMaster: true memberlist: enabled: true From b105b7004c76126241ba709630aa061d4c22c2e2 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 05:06:44 -0500 Subject: [PATCH 015/107] update --- metallb/templates/config.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/metallb/templates/config.yaml b/metallb/templates/config.yaml index 664e4a0..71e181a 100644 --- a/metallb/templates/config.yaml +++ b/metallb/templates/config.yaml @@ -10,3 +10,11 @@ # protocol: layer2 # addresses: # - 192.168.10.130-192.168.10.140 +apiVersion: metallb.io/v1beta1 +kind: IPAddressPool +metadata: + name: cheap + namespace: metallb-system +spec: + addresses: + - 192.168.10.0/24 From 77faed876d0b0d9518ea1319b0aa7439bda5fa10 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 05:07:12 -0500 Subject: [PATCH 016/107] update --- metallb/templates/config.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/metallb/templates/config.yaml b/metallb/templates/config.yaml index 71e181a..39121ce 100644 --- a/metallb/templates/config.yaml +++ b/metallb/templates/config.yaml @@ -14,7 +14,6 @@ apiVersion: metallb.io/v1beta1 kind: IPAddressPool metadata: name: cheap - namespace: metallb-system spec: addresses: - 192.168.10.0/24 From c47dba6dc6dc7b0944fc8df0e95edcabc27ba04a Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 05:08:32 -0500 Subject: [PATCH 017/107] update --- argocd/templates/{metallb.yaml => metallb-system.yaml} | 6 +++--- {metallb => metallb-system}/Chart.yaml | 0 {metallb => metallb-system}/templates/config.yaml | 0 {metallb => metallb-system}/values.yaml | 0 4 files changed, 3 insertions(+), 3 deletions(-) rename argocd/templates/{metallb.yaml => metallb-system.yaml} (81%) rename {metallb => metallb-system}/Chart.yaml (100%) rename {metallb => metallb-system}/templates/config.yaml (100%) rename {metallb => metallb-system}/values.yaml (100%) diff --git a/argocd/templates/metallb.yaml b/argocd/templates/metallb-system.yaml similarity index 81% rename from argocd/templates/metallb.yaml rename to argocd/templates/metallb-system.yaml index 4110ad7..8c33829 100644 --- a/argocd/templates/metallb.yaml +++ b/argocd/templates/metallb-system.yaml @@ -1,16 +1,16 @@ apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: metallb + name: metallb-system namespace: argocd spec: project: default source: repoURL: https://gitlab.com/developerdurp/homelab.git targetRevision: dev - path: metallb + path: metallb-system destination: - namespace: metallb + namespace: metallb-system name: in-cluster syncPolicy: automated: diff --git a/metallb/Chart.yaml b/metallb-system/Chart.yaml similarity index 100% rename from metallb/Chart.yaml rename to metallb-system/Chart.yaml diff --git a/metallb/templates/config.yaml b/metallb-system/templates/config.yaml similarity index 100% rename from metallb/templates/config.yaml rename to metallb-system/templates/config.yaml diff --git a/metallb/values.yaml b/metallb-system/values.yaml similarity index 100% rename from metallb/values.yaml rename to metallb-system/values.yaml From a63fe8cb3f5f47a5c73b28e86024c728fd239b32 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 05:10:12 -0500 Subject: [PATCH 018/107] update --- metallb-system/templates/config.yaml | 36 ++++++++++++++-------------- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index 39121ce..ca50e52 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -1,19 +1,19 @@ -#apiVersion: v1 -#kind: ConfigMap -#metadata: -# namespace: metallb -# name: config -#data: -# config: | -# address-pools: -# - name: default -# protocol: layer2 -# addresses: -# - 192.168.10.130-192.168.10.140 -apiVersion: metallb.io/v1beta1 -kind: IPAddressPool +apiVersion: v1 +kind: ConfigMap metadata: - name: cheap -spec: - addresses: - - 192.168.10.0/24 + namespace: metallb + name: config +data: + config: | + address-pools: + - name: default + protocol: layer2 + addresses: + - 192.168.10.130-192.168.10.140 + #apiVersion: metallb.io/v1beta1 + #kind: IPAddressPool + #metadata: + # name: cheap + #spec: + # addresses: + # - 192.168.10.0/24 From 1a0458354b5f20f9a3d1429b893376d2d61a42a5 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 05:10:37 -0500 Subject: [PATCH 019/107] update --- metallb-system/templates/config.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index ca50e52..830134b 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -1,7 +1,6 @@ apiVersion: v1 kind: ConfigMap metadata: - namespace: metallb name: config data: config: | From 6059303fcf793a6c914a5328b2d0b2be7c748332 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 05:11:27 -0500 Subject: [PATCH 020/107] update --- metallb-system/templates/config.yaml | 35 ++++++++++++++-------------- 1 file changed, 18 insertions(+), 17 deletions(-) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index 830134b..39121ce 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -1,18 +1,19 @@ -apiVersion: v1 -kind: ConfigMap +#apiVersion: v1 +#kind: ConfigMap +#metadata: +# namespace: metallb +# name: config +#data: +# config: | +# address-pools: +# - name: default +# protocol: layer2 +# addresses: +# - 192.168.10.130-192.168.10.140 +apiVersion: metallb.io/v1beta1 +kind: IPAddressPool metadata: - name: config -data: - config: | - address-pools: - - name: default - protocol: layer2 - addresses: - - 192.168.10.130-192.168.10.140 - #apiVersion: metallb.io/v1beta1 - #kind: IPAddressPool - #metadata: - # name: cheap - #spec: - # addresses: - # - 192.168.10.0/24 + name: cheap +spec: + addresses: + - 192.168.10.0/24 From f69d3babfc0d9d963258770899f01157aadfbefb Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 06:11:09 -0500 Subject: [PATCH 021/107] update --- metallb-system/templates/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index 39121ce..9a5e1c8 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -16,4 +16,4 @@ metadata: name: cheap spec: addresses: - - 192.168.10.0/24 + - 192.168.10.128/28 From a669676e8b3ce276916d8ad886621b621977bada Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 14 May 2024 06:12:36 -0500 Subject: [PATCH 022/107] update --- metallb-system/templates/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index 9a5e1c8..5fa424a 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -16,4 +16,4 @@ metadata: name: cheap spec: addresses: - - 192.168.10.128/28 + - 192.168.10.130-192.168.10.140 From bf6314e914d5dfe40440b20a0ed412ac1a92e4c9 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 04:52:41 -0500 Subject: [PATCH 023/107] update --- argocd/values.yaml | 2 +- internalproxy/templates/argocd.yaml | 6 +++--- metallb-system/templates/config.yaml | 12 ------------ 3 files changed, 4 insertions(+), 16 deletions(-) diff --git a/argocd/values.yaml b/argocd/values.yaml index 47a56e3..765b0bb 100644 --- a/argocd/values.yaml +++ b/argocd/values.yaml @@ -33,7 +33,7 @@ argo-cd: cm: create: true annotations: {} - url: https://argocd.internal.durp.info + url: https://argocd.dev.durp.info oidc.tls.insecure.skip.verify: "true" dex.config: | connectors: diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index 01d5862..dd232f3 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -8,7 +8,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`argocd.dev.internal.durp.info`) + - match: Host(`argocd.dev.durp.info`) middlewares: - name: whitelist namespace: traefik @@ -41,6 +41,6 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "argocd.dev.internal.durp.info" + commonName: "argocd.dev.durp.info" dnsNames: - - "argocd.dev.internal.durp.info" + - "argocd.dev.durp.info" diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index 5fa424a..dc31512 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -1,15 +1,3 @@ -#apiVersion: v1 -#kind: ConfigMap -#metadata: -# namespace: metallb -# name: config -#data: -# config: | -# address-pools: -# - name: default -# protocol: layer2 -# addresses: -# - 192.168.10.130-192.168.10.140 apiVersion: metallb.io/v1beta1 kind: IPAddressPool metadata: From 29136dd3953489a0dae5b1992d5e2867b34fd1a8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 04:53:44 -0500 Subject: [PATCH 024/107] update --- internalproxy/templates/argocd.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index dd232f3..5c67ad4 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -17,8 +17,8 @@ spec: - name: argocd-server port: 443 scheme: https - tls: - secretName: argocd-tls + #tls: + # secretName: argocd-tls --- From 690c9e40c9c99481f0424dccec93d00495aec3e1 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 04:54:23 -0500 Subject: [PATCH 025/107] update --- internalproxy/templates/argocd.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index 5c67ad4..2fa700e 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -6,7 +6,7 @@ metadata: cert-manager.io/cluster-issuer: letsencrypt-production spec: entryPoints: - - websecure + - web routes: - match: Host(`argocd.dev.durp.info`) middlewares: From 43160a8da1c1b43f0ae61a3a0b17450e52cd6895 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 04:57:22 -0500 Subject: [PATCH 026/107] update --- ...prroduction.yaml => letsencrypt-production.yaml} | 2 +- cert-manager/templates/self-signed.yaml | 13 +++++++++++++ internalproxy/templates/argocd.yaml | 8 ++++---- 3 files changed, 18 insertions(+), 5 deletions(-) rename cert-manager/templates/{letsencrypt-prroduction.yaml => letsencrypt-production.yaml} (92%) create mode 100644 cert-manager/templates/self-signed.yaml diff --git a/cert-manager/templates/letsencrypt-prroduction.yaml b/cert-manager/templates/letsencrypt-production.yaml similarity index 92% rename from cert-manager/templates/letsencrypt-prroduction.yaml rename to cert-manager/templates/letsencrypt-production.yaml index 034ed9b..72a0064 100644 --- a/cert-manager/templates/letsencrypt-prroduction.yaml +++ b/cert-manager/templates/letsencrypt-production.yaml @@ -1,4 +1,4 @@ -apiVersion: cert-manager.io/v1 +piVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-production diff --git a/cert-manager/templates/self-signed.yaml b/cert-manager/templates/self-signed.yaml new file mode 100644 index 0000000..fa3ea4d --- /dev/null +++ b/cert-manager/templates/self-signed.yaml @@ -0,0 +1,13 @@ +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + name: selfsigned-issuer +spec: + selfSigned: {} +--- +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: selfsigned-cluster-issuer +spec: + selfSigned: {} diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index 2fa700e..3760130 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -6,7 +6,7 @@ metadata: cert-manager.io/cluster-issuer: letsencrypt-production spec: entryPoints: - - web + - websecure routes: - match: Host(`argocd.dev.durp.info`) middlewares: @@ -17,8 +17,8 @@ spec: - name: argocd-server port: 443 scheme: https - #tls: - # secretName: argocd-tls + tls: + secretName: argocd-tls --- @@ -39,7 +39,7 @@ metadata: spec: secretName: argocd-tls issuerRef: - name: letsencrypt-production + name: selfsigned-cluster-issuer kind: ClusterIssuer commonName: "argocd.dev.durp.info" dnsNames: From 38846d58f3ebaa561148c2f9bff5c7fb380a0e4b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 04:57:51 -0500 Subject: [PATCH 027/107] update --- cert-manager/templates/letsencrypt-production.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cert-manager/templates/letsencrypt-production.yaml b/cert-manager/templates/letsencrypt-production.yaml index 72a0064..034ed9b 100644 --- a/cert-manager/templates/letsencrypt-production.yaml +++ b/cert-manager/templates/letsencrypt-production.yaml @@ -1,4 +1,4 @@ -piVersion: cert-manager.io/v1 +apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-production From 9f45c8b1450cc5d361a27f4a15b10fd6700019cb Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 05:07:52 -0500 Subject: [PATCH 028/107] update --- metallb-system/templates/config.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index dc31512..bb2fbd5 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -5,3 +5,12 @@ metadata: spec: addresses: - 192.168.10.130-192.168.10.140 +--- +apiVersion: metallb.io/v1beta1 +kind: L2Advertisement +metadata: + name: poop + namespace: metallb-system +spec: + ipAddressPools: + - cheap From 2b4e117ba30ebec99cd617c37f53fe63c53a59d3 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 17 May 2024 05:09:10 -0500 Subject: [PATCH 029/107] update --- traefik/templates/middlewares.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index aaf45ab..ec025a2 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -30,5 +30,6 @@ metadata: spec: ipWhiteList: sourceRange: + - 192.168.30.0/24 - 192.168.20.1/32 - 10.0.0.0/8 From 8568d5e4c05cdfa533cf31579ce07420ce56acf3 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:08:59 -0500 Subject: [PATCH 030/107] update --- internalproxy/templates/argocd.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index 3760130..6aa67a1 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -8,7 +8,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`argocd.dev.durp.info`) + - match: Host(`argocd.internal.dev.durp.info`) middlewares: - name: whitelist namespace: traefik @@ -39,8 +39,8 @@ metadata: spec: secretName: argocd-tls issuerRef: - name: selfsigned-cluster-issuer + name: letsencrypt-production kind: ClusterIssuer - commonName: "argocd.dev.durp.info" + commonName: "argocd.internal.dev.durp.info" dnsNames: - - "argocd.dev.durp.info" + - "argocd.internal.dev.durp.info" From ec8afdb6bcbed6244501eda28d37e0ff9ce8947b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:14:11 -0500 Subject: [PATCH 031/107] update --- traefik/templates/middlewares.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index ec025a2..6560aa9 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -30,6 +30,5 @@ metadata: spec: ipWhiteList: sourceRange: - - 192.168.30.0/24 - - 192.168.20.1/32 + - 192.168.10.1/32 - 10.0.0.0/8 From d42cf229bfed883a75b35ea0c21c424ad68efb0b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:18:46 -0500 Subject: [PATCH 032/107] update --- traefik/templates/ingress.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/traefik/templates/ingress.yaml b/traefik/templates/ingress.yaml index a165566..8fb4d8d 100644 --- a/traefik/templates/ingress.yaml +++ b/traefik/templates/ingress.yaml @@ -6,7 +6,7 @@ spec: entryPoints: - websecure routes: - - match: Host(`traefik.internal.durp.info`) + - match: Host(`traefik.internal.dev.durp.info`) middlewares: - name: authentik-proxy-provider namespace: traefik @@ -14,7 +14,7 @@ spec: services: - name: api@internal kind: TraefikService - - match: Host(`traefik.internal.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) + - match: Host(`traefik.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`) kind: Rule services: - name: ak-outpost-authentik-embedded-outpost @@ -34,6 +34,6 @@ spec: issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "traefik.internal.durp.info" + commonName: "traefik.internal.dev.durp.info" dnsNames: - - "traefik.internal.durp.info" \ No newline at end of file + - "traefik.internal.dev.durp.info" From dd91465e449aa76f9e9f8a0aeda8451e7e32af95 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:33:42 -0500 Subject: [PATCH 033/107] update --- vault/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vault/values.yaml b/vault/values.yaml index d77a898..857f973 100644 --- a/vault/values.yaml +++ b/vault/values.yaml @@ -14,7 +14,7 @@ vault: injector: enabled: "-" - replicas: 3 + replicas: 2 leaderElector: enabled: true From d63ee6027d4f7a0e4e207044a8900e561ff2676e Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:42:26 -0500 Subject: [PATCH 034/107] update --- nfs-client/templates/provisioner.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nfs-client/templates/provisioner.yml b/nfs-client/templates/provisioner.yml index c76fe8c..c3c6eea 100644 --- a/nfs-client/templates/provisioner.yml +++ b/nfs-client/templates/provisioner.yml @@ -34,7 +34,7 @@ spec: - name: NFS_SERVER value: 192.168.20.253 - name: NFS_PATH - value: /mnt/user/k3s + value: /mnt/user/k3s-dev volumes: - name: nfs-client-ssd nfs: From 0aeccd39b8c251613278b4a9bd23b296f7a881ff Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:43:15 -0500 Subject: [PATCH 035/107] update --- nfs-client/templates/provisioner.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nfs-client/templates/provisioner.yml b/nfs-client/templates/provisioner.yml index c3c6eea..b79da69 100644 --- a/nfs-client/templates/provisioner.yml +++ b/nfs-client/templates/provisioner.yml @@ -39,4 +39,4 @@ spec: - name: nfs-client-ssd nfs: server: 192.168.20.253 - path: /mnt/user/k3s + path: /mnt/user/k3s-dev From fd9731b7e1d5d4b07296e8f251d3b6875ed50c03 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 07:45:43 -0500 Subject: [PATCH 036/107] update --- longhorn/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/values.yaml b/longhorn/values.yaml index ced04ee..4389062 100644 --- a/longhorn/values.yaml +++ b/longhorn/values.yaml @@ -76,7 +76,7 @@ longhorn: snapshotterReplicaCount: ~ defaultSettings: - backupTarget: S3://longhorn@us-east-1/ + backupTarget: S3://longhorn-dev@us-east-1/ backupTargetCredentialSecret: longhorn-backup-token-secret allowRecurringJobWhileVolumeDetached: ~ createDefaultDiskLabeledNodes: ~ From 2fe3df9227bcadaa4d00af4a5fe9e69d6dd4f3ca Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 08:48:37 -0500 Subject: [PATCH 037/107] update --- external-dns/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/external-dns/values.yaml b/external-dns/values.yaml index 4102088..76e1156 100644 --- a/external-dns/values.yaml +++ b/external-dns/values.yaml @@ -4,7 +4,7 @@ external-dns: image: pullPolicy: Always - + txtPrefix: "dev" sources: - service @@ -13,4 +13,4 @@ external-dns: secretName : "external-dns" proxied: true - policy: sync \ No newline at end of file + policy: sync From 6a57946a538b49078ea84db92599f56d127946ff Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 08:53:43 -0500 Subject: [PATCH 038/107] update --- external-dns/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/external-dns/values.yaml b/external-dns/values.yaml index 76e1156..1e42393 100644 --- a/external-dns/values.yaml +++ b/external-dns/values.yaml @@ -4,7 +4,7 @@ external-dns: image: pullPolicy: Always - txtPrefix: "dev" + txtPrefix: "dev-" sources: - service From 54e51af63f2c978a9ceaa1369f0a5bbf7d499f41 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 08:57:04 -0500 Subject: [PATCH 039/107] update --- littlelink/templates/ingress.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 5708501..c400477 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -39,4 +39,4 @@ metadata: external-dns.alpha.kubernetes.io/hostname: links.dev.durp.info spec: type: ExternalName - externalName: dev.durp.info + externalName: durp.info From ec8111c239acb5d68d3ae0536043ff2bbad63a60 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 18 May 2024 09:26:47 -0500 Subject: [PATCH 040/107] update --- external-dns/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/external-dns/values.yaml b/external-dns/values.yaml index 1e42393..23e5315 100644 --- a/external-dns/values.yaml +++ b/external-dns/values.yaml @@ -11,6 +11,6 @@ external-dns: provider: cloudflare cloudflare: secretName : "external-dns" - proxied: true + proxied: false policy: sync From d0ec1a9909512d15638c21169e41e5877fdff934 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:36:12 -0500 Subject: [PATCH 041/107] update --- traefik/values.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/traefik/values.yaml b/traefik/values.yaml index 362a574..1f50a6e 100644 --- a/traefik/values.yaml +++ b/traefik/values.yaml @@ -502,6 +502,8 @@ traefik: - "--log.level=DEBUG" - --experimental.plugins.jwt.moduleName=github.com/traefik-plugins/traefik-jwt-plugin - --experimental.plugins.jwt.version=v0.7.0 + - --experimental.plugins.traefik-real-ip.moduleName=github.com/soulbalz/traefik-real-ip + - --experimental.plugins.traefik-real-ip.version=v1.0.3 # Environment variables to be passed to Traefik's binary From ce256ff51a7aaff0495de3a5e7529562e71ecce0 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:38:52 -0500 Subject: [PATCH 042/107] update --- littlelink/templates/ingress.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index c400477..e19d285 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -8,6 +8,8 @@ spec: routes: - match: Host(`links.dev.durp.info`) && PathPrefix(`/`) kind: Rule + middlewares: + - name: traefik-real-ip services: - name: littlelink port: 80 @@ -40,3 +42,15 @@ metadata: spec: type: ExternalName externalName: durp.info + +--- + +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: traefik-real-ip +spec: + plugin: + traefik-real-ip: + excludednets: + - "1.1.1.1/24" From 540a9c6f8a4d382b5abe2bde6eba25f1e7a0ed86 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:47:17 -0500 Subject: [PATCH 043/107] update --- durpapi/templates/ingress.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/durpapi/templates/ingress.yaml b/durpapi/templates/ingress.yaml index b722670..3d33391 100644 --- a/durpapi/templates/ingress.yaml +++ b/durpapi/templates/ingress.yaml @@ -10,6 +10,7 @@ spec: kind: Rule middlewares: - name: jwt + - name: traefik-real-ip services: - name: "durpapi-service" port: 80 @@ -42,3 +43,15 @@ spec: Required: true Keys: - https://authentik.durp.info/application/o/api/jwks + +--- + +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: traefik-real-ip +spec: + plugin: + traefik-real-ip: + excludednets: + - "1.1.1.1/24" From f95e7539f0f1d3f1b0e7a148e3134f74247ebe49 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:47:54 -0500 Subject: [PATCH 044/107] update --- durpapi/templates/ingress.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/durpapi/templates/ingress.yaml b/durpapi/templates/ingress.yaml index 3d33391..d2cd7e2 100644 --- a/durpapi/templates/ingress.yaml +++ b/durpapi/templates/ingress.yaml @@ -9,7 +9,6 @@ spec: - match: Host("api.dev.durp.info") && PathPrefix(`/api`) kind: Rule middlewares: - - name: jwt - name: traefik-real-ip services: - name: "durpapi-service" From b03642cd1de813d980192fdb449db4a2825b379a Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:49:33 -0500 Subject: [PATCH 045/107] update --- durpapi/templates/ingress.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/durpapi/templates/ingress.yaml b/durpapi/templates/ingress.yaml index d2cd7e2..3d33391 100644 --- a/durpapi/templates/ingress.yaml +++ b/durpapi/templates/ingress.yaml @@ -9,6 +9,7 @@ spec: - match: Host("api.dev.durp.info") && PathPrefix(`/api`) kind: Rule middlewares: + - name: jwt - name: traefik-real-ip services: - name: "durpapi-service" From 3babb5db29f2238cd2325a1ddbc6881930d6a8fd Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:50:32 -0500 Subject: [PATCH 046/107] update --- littlelink/templates/ingress.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index e19d285..1469385 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -10,6 +10,7 @@ spec: kind: Rule middlewares: - name: traefik-real-ip + - name: whitelist services: - name: littlelink port: 80 @@ -54,3 +55,13 @@ spec: traefik-real-ip: excludednets: - "1.1.1.1/24" +--- +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: whitelist +spec: + ipWhiteList: + sourceRange: + - 192.168.10.1/32 + - 10.0.0.0/8 From 6ad1f067e45412aaa76ff3d1293df49295d86c74 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:54:06 -0500 Subject: [PATCH 047/107] update --- littlelink/templates/ingress.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 1469385..7687e55 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -61,7 +61,7 @@ kind: Middleware metadata: name: whitelist spec: - ipWhiteList: + ipAllowList: sourceRange: - 192.168.10.1/32 - 10.0.0.0/8 From b7c14e18b26c1af31d44a512c928739f2e3624ce Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:54:35 -0500 Subject: [PATCH 048/107] update --- littlelink/templates/ingress.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 7687e55..1469385 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -61,7 +61,7 @@ kind: Middleware metadata: name: whitelist spec: - ipAllowList: + ipWhiteList: sourceRange: - 192.168.10.1/32 - 10.0.0.0/8 From ca4d492882b1ec6dcd9683ec0b3bd49a5cfed169 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:55:17 -0500 Subject: [PATCH 049/107] update --- littlelink/templates/ingress.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 1469385..d9cf039 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -65,3 +65,5 @@ spec: sourceRange: - 192.168.10.1/32 - 10.0.0.0/8 + ipStrategy: + depth: 1 From 1b1d9178d3ffd97747f4e4c90738101aa0017cac Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 06:59:23 -0500 Subject: [PATCH 050/107] update --- littlelink/templates/ingress.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index d9cf039..1469385 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -65,5 +65,3 @@ spec: sourceRange: - 192.168.10.1/32 - 10.0.0.0/8 - ipStrategy: - depth: 1 From c45d239b8c88701aa15c4e27e0a3a5337b6945e4 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:00:51 -0500 Subject: [PATCH 051/107] update --- littlelink/templates/ingress.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 1469385..b05e3be 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -9,7 +9,6 @@ spec: - match: Host(`links.dev.durp.info`) && PathPrefix(`/`) kind: Rule middlewares: - - name: traefik-real-ip - name: whitelist services: - name: littlelink From 083bbe5af594f4c3cd6040500d01cf70c5501777 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:04:28 -0500 Subject: [PATCH 052/107] update --- traefik/values.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/traefik/values.yaml b/traefik/values.yaml index 1f50a6e..3692400 100644 --- a/traefik/values.yaml +++ b/traefik/values.yaml @@ -580,9 +580,10 @@ traefik: redirectTo: websecure # # Trust forwarded headers information (X-Forwarded-*). - # forwardedHeaders: - # trustedIPs: [] - # insecure: false + forwardedHeaders: + trustedIPs: + - "192.168.10.1" + insecure: false # # Enable the Proxy Protocol header parsing for the entry point # proxyProtocol: From d01ee2da248e3be61ba57694d317b38bf78ccbeb Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:18:52 -0500 Subject: [PATCH 053/107] update --- traefik/values.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/traefik/values.yaml b/traefik/values.yaml index 3692400..3d304bc 100644 --- a/traefik/values.yaml +++ b/traefik/values.yaml @@ -611,9 +611,10 @@ traefik: # advertisedPort: 4443 # ## Trust forwarded headers information (X-Forwarded-*). - #forwardedHeaders: - # trustedIPs: [] - # insecure: false + forwardedHeaders: + trustedIPs: + - "192.168.10.1" + insecure: false # ## Enable the Proxy Protocol header parsing for the entry point #proxyProtocol: From db7e629fed811705b3af9fe3710d308ab9778508 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:25:59 -0500 Subject: [PATCH 054/107] update --- littlelink/templates/ingress.yaml | 11 ----------- traefik/templates/middlewares.yaml | 12 ++++++++++++ traefik/values.yaml | 1 + 3 files changed, 13 insertions(+), 11 deletions(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index b05e3be..f61efef 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -44,17 +44,6 @@ spec: externalName: durp.info --- - -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: traefik-real-ip -spec: - plugin: - traefik-real-ip: - excludednets: - - "1.1.1.1/24" ---- apiVersion: traefik.containo.us/v1alpha1 kind: Middleware metadata: diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index 6560aa9..13ca2bf 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -32,3 +32,15 @@ spec: sourceRange: - 192.168.10.1/32 - 10.0.0.0/8 + +--- + +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: traefik-real-ip +spec: + plugin: + traefik-real-ip: + excludednets: + - "1.1.1.1/24" diff --git a/traefik/values.yaml b/traefik/values.yaml index 3d304bc..0816a51 100644 --- a/traefik/values.yaml +++ b/traefik/values.yaml @@ -643,6 +643,7 @@ traefik: # - namespace-name1@kubernetescrd # - namespace-name2@kubernetescrd middlewares: [] + - traefik@traefik-real-ip metrics: # When using hostNetwork, use another port to avoid conflict with node exporter: # https://github.com/prometheus/prometheus/wiki/Default-port-allocations From 1017d6a8345b83f400fcbf9cc1abcfe8a7df6a55 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:26:18 -0500 Subject: [PATCH 055/107] update --- traefik/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/traefik/values.yaml b/traefik/values.yaml index 0816a51..ba4f47d 100644 --- a/traefik/values.yaml +++ b/traefik/values.yaml @@ -642,7 +642,7 @@ traefik: # middlewares: # - namespace-name1@kubernetescrd # - namespace-name2@kubernetescrd - middlewares: [] + middlewares: - traefik@traefik-real-ip metrics: # When using hostNetwork, use another port to avoid conflict with node exporter: From 8e585ed7b023001677708f60ff32a1c40eee738d Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:27:58 -0500 Subject: [PATCH 056/107] update --- traefik/values.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/traefik/values.yaml b/traefik/values.yaml index ba4f47d..3d304bc 100644 --- a/traefik/values.yaml +++ b/traefik/values.yaml @@ -642,8 +642,7 @@ traefik: # middlewares: # - namespace-name1@kubernetescrd # - namespace-name2@kubernetescrd - middlewares: - - traefik@traefik-real-ip + middlewares: [] metrics: # When using hostNetwork, use another port to avoid conflict with node exporter: # https://github.com/prometheus/prometheus/wiki/Default-port-allocations From 81384297be4f35fbf54d711fec3c58a2ebfe8545 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:35:10 -0500 Subject: [PATCH 057/107] update --- littlelink/templates/ingress.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index f61efef..9ca5eca 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -10,6 +10,8 @@ spec: kind: Rule middlewares: - name: whitelist + - name: traefik-real-ip + namespace: traefik services: - name: littlelink port: 80 From b30297b9515681e45be8f8f918a16ea1f9a70286 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 07:36:05 -0500 Subject: [PATCH 058/107] update --- littlelink/templates/ingress.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 9ca5eca..cbf5b37 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -55,3 +55,5 @@ spec: sourceRange: - 192.168.10.1/32 - 10.0.0.0/8 + ipStrategy: + depth: 1 From bd9af607282bbfb4d727144783f3ca14de9fcc35 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:00:18 -0500 Subject: [PATCH 059/107] update --- littlelink/templates/ingress.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index cbf5b37..0bfdd1b 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -53,7 +53,8 @@ metadata: spec: ipWhiteList: sourceRange: - - 192.168.10.1/32 + - 192.168.10.1/32 + - 192.168.30.1/24 - 10.0.0.0/8 ipStrategy: depth: 1 From d6b5a05352afc9b68f90e32f256499558ee2a46f Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:02:12 -0500 Subject: [PATCH 060/107] update --- littlelink/templates/ingress.yaml | 14 +------------- traefik/templates/middlewares.yaml | 6 ++++-- 2 files changed, 5 insertions(+), 15 deletions(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 0bfdd1b..42139f7 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -10,6 +10,7 @@ spec: kind: Rule middlewares: - name: whitelist + namespace: traefik - name: traefik-real-ip namespace: traefik services: @@ -45,16 +46,3 @@ spec: type: ExternalName externalName: durp.info ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: whitelist -spec: - ipWhiteList: - sourceRange: - - 192.168.10.1/32 - - 192.168.30.1/24 - - 10.0.0.0/8 - ipStrategy: - depth: 1 diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index 13ca2bf..13fad79 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -26,12 +26,14 @@ apiVersion: traefik.containo.us/v1alpha1 kind: Middleware metadata: name: whitelist - namespace: traefik spec: ipWhiteList: sourceRange: - - 192.168.10.1/32 + - 192.168.10.1/32 + - 192.168.30.0/24 - 10.0.0.0/8 + ipStrategy: + depth: 1 --- From 8461a4e81845b00fc7d283e97f4e0086352c5af9 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:03:37 -0500 Subject: [PATCH 061/107] update --- traefik/templates/middlewares.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index 13fad79..4fbe8be 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -30,7 +30,7 @@ spec: ipWhiteList: sourceRange: - 192.168.10.1/32 - - 192.168.30.0/24 + - 192.168.30.1/24 - 10.0.0.0/8 ipStrategy: depth: 1 From 475ccd6576fa60dd6caf23230845158cd74ef113 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:06:59 -0500 Subject: [PATCH 062/107] update --- littlelink/templates/ingress.yaml | 4 +--- traefik/templates/middleware-chain.yaml | 9 +++++++++ 2 files changed, 10 insertions(+), 3 deletions(-) create mode 100644 traefik/templates/middleware-chain.yaml diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 42139f7..4a76e33 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -9,9 +9,7 @@ spec: - match: Host(`links.dev.durp.info`) && PathPrefix(`/`) kind: Rule middlewares: - - name: whitelist - namespace: traefik - - name: traefik-real-ip + - name: internalOnly namespace: traefik services: - name: littlelink diff --git a/traefik/templates/middleware-chain.yaml b/traefik/templates/middleware-chain.yaml new file mode 100644 index 0000000..c38a5d5 --- /dev/null +++ b/traefik/templates/middleware-chain.yaml @@ -0,0 +1,9 @@ +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: internalOnly +spec: + chain: + middlewares: + - name: traefik-real-ip + - name: whitelist From bf6d929398486f6b52d8b8ea0715219d8319506d Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:07:48 -0500 Subject: [PATCH 063/107] update --- littlelink/templates/ingress.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 4a76e33..a294f68 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -9,7 +9,7 @@ spec: - match: Host(`links.dev.durp.info`) && PathPrefix(`/`) kind: Rule middlewares: - - name: internalOnly + - name: internal-only namespace: traefik services: - name: littlelink From 6bebb64c41a4645c1d2855be571dc3867b8ae5e1 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:08:17 -0500 Subject: [PATCH 064/107] update --- traefik/templates/middleware-chain.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/traefik/templates/middleware-chain.yaml b/traefik/templates/middleware-chain.yaml index c38a5d5..4f21880 100644 --- a/traefik/templates/middleware-chain.yaml +++ b/traefik/templates/middleware-chain.yaml @@ -1,7 +1,7 @@ apiVersion: traefik.containo.us/v1alpha1 kind: Middleware metadata: - name: internalOnly + name: internal-only spec: chain: middlewares: From ed970283aef85001f564d93cc7b97e04b450bb6b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:12:42 -0500 Subject: [PATCH 065/107] update --- argocd/templates/ingress.yaml | 36 +++++++++++++++++++++++++++++ internalproxy/templates/argocd.yaml | 2 +- 2 files changed, 37 insertions(+), 1 deletion(-) create mode 100644 argocd/templates/ingress.yaml diff --git a/argocd/templates/ingress.yaml b/argocd/templates/ingress.yaml new file mode 100644 index 0000000..11fa1bc --- /dev/null +++ b/argocd/templates/ingress.yaml @@ -0,0 +1,36 @@ +apiVersion: traefik.containo.us/v1alpha1 +kind: IngressRoute +metadata: + name: argocd-ingress + annotations: + cert-manager.io/cluster-issuer: letsencrypt-production +spec: + entryPoints: + - websecure + routes: + - match: Host(`argocd.internal.dev.durp.info`) + middlewares: + - name: internal-only + namespace: traefik + kind: Rule + services: + - name: argocd-server + port: 443 + scheme: https + tls: + secretName: argocd-tls + +--- + +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: argocd-tls +spec: + secretName: argocd-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "argocd.internal.dev.durp.info" + dnsNames: + - "argocd.internal.dev.durp.info" diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml index 6aa67a1..6e89858 100644 --- a/internalproxy/templates/argocd.yaml +++ b/internalproxy/templates/argocd.yaml @@ -10,7 +10,7 @@ spec: routes: - match: Host(`argocd.internal.dev.durp.info`) middlewares: - - name: whitelist + - name: internal-only namespace: traefik kind: Rule services: From 0d4ec2c08a6b3668d58709a8ee5eea2d5045e9dd Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:13:28 -0500 Subject: [PATCH 066/107] update --- internalproxy/templates/argocd.yaml | 46 ----------------------------- 1 file changed, 46 deletions(-) delete mode 100644 internalproxy/templates/argocd.yaml diff --git a/internalproxy/templates/argocd.yaml b/internalproxy/templates/argocd.yaml deleted file mode 100644 index 6e89858..0000000 --- a/internalproxy/templates/argocd.yaml +++ /dev/null @@ -1,46 +0,0 @@ -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: argocd-ingress - annotations: - cert-manager.io/cluster-issuer: letsencrypt-production -spec: - entryPoints: - - websecure - routes: - - match: Host(`argocd.internal.dev.durp.info`) - middlewares: - - name: internal-only - namespace: traefik - kind: Rule - services: - - name: argocd-server - port: 443 - scheme: https - tls: - secretName: argocd-tls - ---- - -kind: Service -apiVersion: v1 -metadata: - name: argocd-server -spec: - type: ExternalName - externalName: argocd-server.argocd.svc.cluster.local - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: argocd-tls -spec: - secretName: argocd-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "argocd.internal.dev.durp.info" - dnsNames: - - "argocd.internal.dev.durp.info" From 9c35356c5dfb425bde59a60b4d72b13e94118090 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:17:52 -0500 Subject: [PATCH 067/107] update --- littlelink/templates/ingress.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index a294f68..04f4322 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -42,5 +42,5 @@ metadata: external-dns.alpha.kubernetes.io/hostname: links.dev.durp.info spec: type: ExternalName - externalName: durp.info + externalName: dev.durp.info From 1ef48ae879c0e9815284c2fa1b40d744f23d31a4 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:19:42 -0500 Subject: [PATCH 068/107] update --- durpapi/templates/ingress.yaml | 12 ------------ krakend/templates/ingress.yaml | 2 +- 2 files changed, 1 insertion(+), 13 deletions(-) diff --git a/durpapi/templates/ingress.yaml b/durpapi/templates/ingress.yaml index 3d33391..80dd3d2 100644 --- a/durpapi/templates/ingress.yaml +++ b/durpapi/templates/ingress.yaml @@ -10,7 +10,6 @@ spec: kind: Rule middlewares: - name: jwt - - name: traefik-real-ip services: - name: "durpapi-service" port: 80 @@ -44,14 +43,3 @@ spec: Keys: - https://authentik.durp.info/application/o/api/jwks ---- - -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: traefik-real-ip -spec: - plugin: - traefik-real-ip: - excludednets: - - "1.1.1.1/24" diff --git a/krakend/templates/ingress.yaml b/krakend/templates/ingress.yaml index 4b42ba3..127c616 100644 --- a/krakend/templates/ingress.yaml +++ b/krakend/templates/ingress.yaml @@ -40,7 +40,7 @@ metadata: external-dns.alpha.kubernetes.io/hostname: api.dev.durp.info spec: type: ExternalName - externalName: durp.info + externalName: dev.durp.info --- From a0f384a42885c1da323d6e1880b22e6e2155c8d1 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 19 May 2024 08:40:40 -0500 Subject: [PATCH 069/107] update --- littlelink/templates/ingress.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml index 04f4322..1cf7211 100644 --- a/littlelink/templates/ingress.yaml +++ b/littlelink/templates/ingress.yaml @@ -8,9 +8,6 @@ spec: routes: - match: Host(`links.dev.durp.info`) && PathPrefix(`/`) kind: Rule - middlewares: - - name: internal-only - namespace: traefik services: - name: littlelink port: 80 From f349a1c43abc88a66d7883011bcc40c57dde9f00 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 23 May 2024 04:49:54 -0500 Subject: [PATCH 070/107] update --- longhorn/templates/ingress.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/longhorn/templates/ingress.yaml b/longhorn/templates/ingress.yaml index 7f67dec..d67e620 100644 --- a/longhorn/templates/ingress.yaml +++ b/longhorn/templates/ingress.yaml @@ -10,8 +10,8 @@ spec: middlewares: - name: whitelist namespace: traefik - - name: authentik-proxy-provider - namespace: traefik + #- name: authentik-proxy-provider + # namespace: traefik kind: Rule services: - name: longhorn-frontend From 9e1debe339b99c72021387c0a30c5abc7f42fcf6 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 23 May 2024 04:54:11 -0500 Subject: [PATCH 071/107] update --- authentik/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/authentik/values.yaml b/authentik/values.yaml index bd03ad1..9f470a5 100644 --- a/authentik/values.yaml +++ b/authentik/values.yaml @@ -1,7 +1,7 @@ authentik: global: env: - - name: AUTHENTIK_POSTGRESQL__PASSWORD + - name: AUTHENTIK_POSTGRESQL_PASSWORD valueFrom: secretKeyRef: name: db-pass From 43486b4ab42bc6e5b00e6b6f0ed3c85d83a9df9e Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 23 May 2024 04:58:42 -0500 Subject: [PATCH 072/107] update --- authentik/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/authentik/values.yaml b/authentik/values.yaml index 9f470a5..bd03ad1 100644 --- a/authentik/values.yaml +++ b/authentik/values.yaml @@ -1,7 +1,7 @@ authentik: global: env: - - name: AUTHENTIK_POSTGRESQL_PASSWORD + - name: AUTHENTIK_POSTGRESQL__PASSWORD valueFrom: secretKeyRef: name: db-pass From 1e19df0c7a8b653ff9dc83ae4eace6bf867c18d7 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 24 May 2024 05:01:05 -0500 Subject: [PATCH 073/107] update --- authentik/values.yaml | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/authentik/values.yaml b/authentik/values.yaml index bd03ad1..a749b15 100644 --- a/authentik/values.yaml +++ b/authentik/values.yaml @@ -32,9 +32,16 @@ authentik: registry: registry.internal.durp.info repository: bitnami/postgresql pullPolicy: Always - postgresqlUsername: "authentik" - postgresqlDatabase: "authentik" - existingSecret: db-pass + auth: + username: "authentik" + existingSecret: db-pass + secretKeys: + adminPasswordKey: dbpass + userPasswordKey: dbpass + + #postgresqlUsername: "authentik" + #postgresqlDatabase: "authentik" + #existingSecret: db-pass persistence: enabled: true storageClass: longhorn From 5915b5b7a343e8298b84bd47b104d633b8115f5b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 07:21:53 -0500 Subject: [PATCH 074/107] update --- authentik/values.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/authentik/values.yaml b/authentik/values.yaml index a749b15..35117da 100644 --- a/authentik/values.yaml +++ b/authentik/values.yaml @@ -1,6 +1,8 @@ authentik: global: env: + - name: AUTHENTIK_REDIS__DB + value: 1 - name: AUTHENTIK_POSTGRESQL__PASSWORD valueFrom: secretKeyRef: From 2256f76caa43114d1f826346bded9b79a2b660c0 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 07:22:52 -0500 Subject: [PATCH 075/107] update --- authentik/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/authentik/values.yaml b/authentik/values.yaml index 35117da..ecc79d1 100644 --- a/authentik/values.yaml +++ b/authentik/values.yaml @@ -2,7 +2,7 @@ authentik: global: env: - name: AUTHENTIK_REDIS__DB - value: 1 + value: "1" - name: AUTHENTIK_POSTGRESQL__PASSWORD valueFrom: secretKeyRef: From f4f02d9147f72ada202fdb1d854b6a250fe88e05 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 08:33:40 -0500 Subject: [PATCH 076/107] update --- bitwarden/templates/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bitwarden/templates/deployment.yaml b/bitwarden/templates/deployment.yaml index d6e1788..4789083 100644 --- a/bitwarden/templates/deployment.yaml +++ b/bitwarden/templates/deployment.yaml @@ -39,7 +39,7 @@ spec: value: "80" - name: ROCKET_WORKERS value: "10" - - name: SECRET_USERNAME + - name: ADMIN_TOKEN valueFrom: secretKeyRef: name: bitwarden-secret From 338e3c23c22428f44e90ffba9963cd6ae4072588 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 08:43:43 -0500 Subject: [PATCH 077/107] update --- bitwarden/templates/deployment.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bitwarden/templates/deployment.yaml b/bitwarden/templates/deployment.yaml index 4789083..9a78d07 100644 --- a/bitwarden/templates/deployment.yaml +++ b/bitwarden/templates/deployment.yaml @@ -17,7 +17,7 @@ spec: spec: containers: - name: bitwarden - image: registry.internal.durp.info/vaultwarden/server:1.30.3 + image: registry.internal.durp.info/vaultwarden/server:1.30.5 imagePullPolicy: Always volumeMounts: - name: bitwarden-pvc @@ -28,7 +28,7 @@ spec: containerPort: 80 env: - name: SIGNUPS_ALLOWED - value: "FALSE" + value: "TRUE" - name: INVITATIONS_ALLOWED value: "FALSE" - name: WEBSOCKET_ENABLED From 78e6bd6b8e88aed2785fc16a979db17fb53d0477 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 08:48:13 -0500 Subject: [PATCH 078/107] update --- bitwarden/templates/ingress.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bitwarden/templates/ingress.yaml b/bitwarden/templates/ingress.yaml index 49cfa24..1bd001f 100644 --- a/bitwarden/templates/ingress.yaml +++ b/bitwarden/templates/ingress.yaml @@ -36,7 +36,7 @@ apiVersion: v1 metadata: name: bitwarden-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: bitwarden.durp.info + external-dns.alpha.kubernetes.io/hostname: bitwarden.dev.durp.info spec: type: ExternalName - externalName: durp.info + externalName: dev.durp.info From 6aaafd3a7e4863c2926bbabc8869752a6c194501 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 10:55:13 -0500 Subject: [PATCH 079/107] update --- bitwarden/templates/ingress.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/bitwarden/templates/ingress.yaml b/bitwarden/templates/ingress.yaml index 1bd001f..011ad8a 100644 --- a/bitwarden/templates/ingress.yaml +++ b/bitwarden/templates/ingress.yaml @@ -40,3 +40,24 @@ metadata: spec: type: ExternalName externalName: dev.durp.info + +--- + +apiVersion: traefik.containo.us/v1alpha1 +kind: IngressRoute +metadata: + name: bitwarden-admin-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/admin`) + kind: Rule + middlewares: + - name: whitelist + namespace: traefik + services: + - name: bitwarden + port: 80 + tls: + secretName: bitwarden-tls From 8a3104684e2b002d35b10c5b9fad605fdd104c55 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 25 May 2024 18:18:18 -0500 Subject: [PATCH 080/107] update --- argocd/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/argocd/values.yaml b/argocd/values.yaml index 765b0bb..c91ada3 100644 --- a/argocd/values.yaml +++ b/argocd/values.yaml @@ -38,8 +38,8 @@ argo-cd: dex.config: | connectors: - config: - issuer: https://authentik.durp.info/application/o/argocd/ - clientID: dbb8ffc06104fb6e7fac3e4ae7fafb1d90437625 + issuer: https://authentik.dev.durp.info/application/o/argocd/ + clientID: lKuMgyYaOlQMNAUSjsRVYgkwZG9UT6CeFWeTLAcl clientSecret: $client-secret:clientSecret insecureEnableGroups: true scopes: From f761405a7fefdcc73daf84e03eaeb053481cb3ae Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 02:25:50 +0000 Subject: [PATCH 081/107] Update Chart --- durpapi/Chart.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 07593b9..a3f04be 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -version: 0.1.0-dev0144 +appVersion: 0.1.0 +type: application +description: A Helm chart for Kubernetes +version: apiVersion: v2 name: durpapi dependencies: -- version: 12.5.* - condition: postgresql.enabled - name: postgresql +- name: postgresql repository: https://charts.bitnami.com/bitnami -description: A Helm chart for Kubernetes -type: application -appVersion: 0.1.0 + condition: postgresql.enabled + version: 12.5.* From 01c8cd9e38896af7fea759c360a38358bd6714c7 Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 02:29:24 +0000 Subject: [PATCH 082/107] Update Chart --- durpapi/Chart.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index a3f04be..dc1c20c 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -appVersion: 0.1.0 -type: application description: A Helm chart for Kubernetes -version: -apiVersion: v2 -name: durpapi +appVersion: 0.1.0 dependencies: - name: postgresql - repository: https://charts.bitnami.com/bitnami condition: postgresql.enabled version: 12.5.* + repository: https://charts.bitnami.com/bitnami +apiVersion: v2 +version: +name: durpapi +type: application From ef8c5e6ba2f60e037b36e3f3d0b7a97bb1e3c8d9 Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 02:45:48 +0000 Subject: [PATCH 083/107] Update Chart --- durpapi/Chart.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index dc1c20c..184a86a 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -description: A Helm chart for Kubernetes +name: durpapi +apiVersion: v2 +version: 0.1.0-dev0175 appVersion: 0.1.0 +type: application dependencies: - name: postgresql condition: postgresql.enabled version: 12.5.* repository: https://charts.bitnami.com/bitnami -apiVersion: v2 -version: -name: durpapi -type: application +description: A Helm chart for Kubernetes From 3254fda22627355797f4efa183fe69e5fea2683a Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 03:01:14 +0000 Subject: [PATCH 084/107] Update Chart --- durpapi/Chart.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 184a86a..e0207d2 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -name: durpapi -apiVersion: v2 -version: 0.1.0-dev0175 appVersion: 0.1.0 type: application +name: durpapi +version: 0.1.0-dev0176 +apiVersion: v2 +description: A Helm chart for Kubernetes dependencies: - name: postgresql - condition: postgresql.enabled - version: 12.5.* repository: https://charts.bitnami.com/bitnami -description: A Helm chart for Kubernetes + version: 12.5.* + condition: postgresql.enabled From 911398e73f0b66a58fc80c8cf62c7ffaa6d838d9 Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 03:06:48 +0000 Subject: [PATCH 085/107] Update Chart --- durpapi/Chart.yaml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index e0207d2..1ef5590 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -appVersion: 0.1.0 -type: application +version: 0.1.0-dev0177 +dependencies: +- repository: https://charts.bitnami.com/bitnami + condition: postgresql.enabled + version: 12.5.* + name: postgresql name: durpapi -version: 0.1.0-dev0176 +type: application +appVersion: 0.1.0 apiVersion: v2 description: A Helm chart for Kubernetes -dependencies: -- name: postgresql - repository: https://charts.bitnami.com/bitnami - version: 12.5.* - condition: postgresql.enabled From 3b05002fcfb8fc56f81c0fb2a2a8f6f0664160fc Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 03:16:45 +0000 Subject: [PATCH 086/107] Update Chart --- durpapi/Chart.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 1ef5590..8f552d2 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -version: 0.1.0-dev0177 -dependencies: -- repository: https://charts.bitnami.com/bitnami - condition: postgresql.enabled - version: 12.5.* - name: postgresql +version: 0.1.0-dev0178 name: durpapi +dependencies: +- version: 12.5.* + condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami +apiVersion: v2 type: application appVersion: 0.1.0 -apiVersion: v2 description: A Helm chart for Kubernetes From 5811b6ecbfb7d49dd3eb9651e463573739c3ed86 Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 03:22:44 +0000 Subject: [PATCH 087/107] Update Chart --- durpapi/Chart.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 8f552d2..864fda9 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -version: 0.1.0-dev0178 +appVersion: 0.1.0 +type: application +description: A Helm chart for Kubernetes name: durpapi dependencies: -- version: 12.5.* +- repository: https://charts.bitnami.com/bitnami condition: postgresql.enabled + version: 12.5.* name: postgresql - repository: https://charts.bitnami.com/bitnami apiVersion: v2 -type: application -appVersion: 0.1.0 -description: A Helm chart for Kubernetes +version: 0.1.0-dev0180 From 6c3e9ba78172c74582b047e61277db9b61889633 Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 29 May 2024 03:27:44 +0000 Subject: [PATCH 088/107] Update Chart --- durpapi/Chart.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 864fda9..ef8dd0b 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -appVersion: 0.1.0 -type: application description: A Helm chart for Kubernetes -name: durpapi dependencies: -- repository: https://charts.bitnami.com/bitnami +- version: 12.5.* + repository: https://charts.bitnami.com/bitnami condition: postgresql.enabled - version: 12.5.* name: postgresql -apiVersion: v2 version: 0.1.0-dev0180 +type: application +name: durpapi +apiVersion: v2 +appVersion: 0.1.0 From 6d7e5d6956acf1dc8024dfee0ea9452a12ede3fd Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 8 Jun 2024 13:32:27 -0500 Subject: [PATCH 089/107] update --- crossplane/Chart.yaml | 2 +- crossplane/values.yaml | 186 +++++++++++++++++++++++++++++++++++++++++ 2 files changed, 187 insertions(+), 1 deletion(-) create mode 100644 crossplane/values.yaml diff --git a/crossplane/Chart.yaml b/crossplane/Chart.yaml index c7bf1ab..d8f781c 100644 --- a/crossplane/Chart.yaml +++ b/crossplane/Chart.yaml @@ -9,4 +9,4 @@ appVersion: "1.16.0" dependencies: - name: crossplane repository: https://charts.crossplane.io/stable - version: 1.12.0 + version: 1.16.0 diff --git a/crossplane/values.yaml b/crossplane/values.yaml new file mode 100644 index 0000000..6a319f2 --- /dev/null +++ b/crossplane/values.yaml @@ -0,0 +1,186 @@ +# helm-docs renders these comments into markdown. Use markdown formatting where +# appropiate. +# +# -- The number of Crossplane pod `replicas` to deploy. +replicas: 1 + +# -- The deployment strategy for the Crossplane and RBAC Manager pods. +deploymentStrategy: RollingUpdate + +image: + # -- Repository for the Crossplane pod image. + repository: xpkg.upbound.io/crossplane/crossplane + # -- The Crossplane image tag. Defaults to the value of `appVersion` in `Chart.yaml`. + tag: "" + # -- The image pull policy used for Crossplane and RBAC Manager pods. + pullPolicy: IfNotPresent + +# -- Add `nodeSelectors` to the Crossplane pod deployment. +nodeSelector: {} +# -- Add `tolerations` to the Crossplane pod deployment. +tolerations: [] +# -- Add `affinities` to the Crossplane pod deployment. +affinity: {} + +# -- Enable `hostNetwork` for the Crossplane deployment. Caution: enabling `hostNetwork` grants the Crossplane Pod access to the host network namespace. Consider setting `dnsPolicy` to `ClusterFirstWithHostNet`. +hostNetwork: false + +# -- Specify the `dnsPolicy` to be used by the Crossplane pod. +dnsPolicy: "" + +# -- Add custom `labels` to the Crossplane pod deployment. +customLabels: {} + +# -- Add custom `annotations` to the Crossplane pod deployment. +customAnnotations: {} + +serviceAccount: + # -- Add custom `annotations` to the Crossplane ServiceAccount. + customAnnotations: {} + +# -- Enable [leader election](https://docs.crossplane.io/latest/concepts/pods/#leader-election) for the Crossplane pod. +leaderElection: true +# -- Add custom arguments to the Crossplane pod. +args: [] + +provider: + # -- A list of Provider packages to install. + packages: [] + +configuration: + # -- A list of Configuration packages to install. + packages: [] + +function: + # -- A list of Function packages to install + packages: [] + +# -- The imagePullSecret names to add to the Crossplane ServiceAccount. +imagePullSecrets: [] + +registryCaBundleConfig: + # -- The ConfigMap name containing a custom CA bundle to enable fetching packages from registries with unknown or untrusted certificates. + name: "" + # -- The ConfigMap key containing a custom CA bundle to enable fetching packages from registries with unknown or untrusted certificates. + key: "" + +service: + # -- Configure annotations on the service object. Only enabled when webhooks.enabled = true + customAnnotations: {} + +webhooks: + # -- Enable webhooks for Crossplane and installed Provider packages. + enabled: true + +rbacManager: + # -- Deploy the RBAC Manager pod and its required roles. + deploy: true + # -- Don't install aggregated Crossplane ClusterRoles. + skipAggregatedClusterRoles: false + # -- The number of RBAC Manager pod `replicas` to deploy. + replicas: 1 + # -- Enable [leader election](https://docs.crossplane.io/latest/concepts/pods/#leader-election) for the RBAC Manager pod. + leaderElection: true + # -- Add custom arguments to the RBAC Manager pod. + args: [] + # -- Add `nodeSelectors` to the RBAC Manager pod deployment. + nodeSelector: {} + # -- Add `tolerations` to the RBAC Manager pod deployment. + tolerations: [] + # -- Add `affinities` to the RBAC Manager pod deployment. + affinity: {} + +# -- The PriorityClass name to apply to the Crossplane and RBAC Manager pods. +priorityClassName: "" + +resourcesCrossplane: + limits: + # -- CPU resource limits for the Crossplane pod. + cpu: 500m + # -- Memory resource limits for the Crossplane pod. + memory: 1024Mi + requests: + # -- CPU resource requests for the Crossplane pod. + cpu: 100m + # -- Memory resource requests for the Crossplane pod. + memory: 256Mi + +securityContextCrossplane: + # -- The user ID used by the Crossplane pod. + runAsUser: 65532 + # -- The group ID used by the Crossplane pod. + runAsGroup: 65532 + # -- Enable `allowPrivilegeEscalation` for the Crossplane pod. + allowPrivilegeEscalation: false + # -- Set the Crossplane pod root file system as read-only. + readOnlyRootFilesystem: true + +packageCache: + # -- Set to `Memory` to hold the package cache in a RAM backed file system. Useful for Crossplane development. + medium: "" + # -- The size limit for the package cache. If medium is `Memory` the `sizeLimit` can't exceed Node memory. + sizeLimit: 20Mi + # -- The name of a PersistentVolumeClaim to use as the package cache. Disables the default package cache `emptyDir` Volume. + pvc: "" + # -- The name of a ConfigMap to use as the package cache. Disables the default package cache `emptyDir` Volume. + configMap: "" + +resourcesRBACManager: + limits: + # -- CPU resource limits for the RBAC Manager pod. + cpu: 100m + # -- Memory resource limits for the RBAC Manager pod. + memory: 512Mi + requests: + # -- CPU resource requests for the RBAC Manager pod. + cpu: 100m + # -- Memory resource requests for the RBAC Manager pod. + memory: 256Mi + +securityContextRBACManager: + # -- The user ID used by the RBAC Manager pod. + runAsUser: 65532 + # -- The group ID used by the RBAC Manager pod. + runAsGroup: 65532 + # -- Enable `allowPrivilegeEscalation` for the RBAC Manager pod. + allowPrivilegeEscalation: false + # -- Set the RBAC Manager pod root file system as read-only. + readOnlyRootFilesystem: true + +metrics: + # -- Enable Prometheus path, port and scrape annotations and expose port 8080 for both the Crossplane and RBAC Manager pods. + enabled: false + +# -- Add custom environmental variables to the Crossplane pod deployment. +# Replaces any `.` in a variable name with `_`. For example, `SAMPLE.KEY=value1` becomes `SAMPLE_KEY=value1`. +extraEnvVarsCrossplane: {} + +# -- Add custom environmental variables to the RBAC Manager pod deployment. +# Replaces any `.` in a variable name with `_`. For example, `SAMPLE.KEY=value1` becomes `SAMPLE_KEY=value1`. +extraEnvVarsRBACManager: {} + +# -- Add a custom `securityContext` to the Crossplane pod. +podSecurityContextCrossplane: {} + +# -- Add a custom `securityContext` to the RBAC Manager pod. +podSecurityContextRBACManager: {} + +# -- Add custom `volumes` to the Crossplane pod. +extraVolumesCrossplane: {} + +# -- Add custom `volumeMounts` to the Crossplane pod. +extraVolumeMountsCrossplane: {} + +# -- To add arbitrary Kubernetes Objects during a Helm Install +extraObjects: [] + # - apiVersion: pkg.crossplane.io/v1alpha1 + # kind: ControllerConfig + # metadata: + # name: aws-config + # annotations: + # eks.amazonaws.com/role-arn: arn:aws:iam::123456789101:role/example + # helm.sh/hook: post-install + # spec: + # podSecurityContext: + # fsGroup: 2000 + From 2978aee67a1690463bd25839f6cb624a6ecabdcc Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 8 Jun 2024 13:32:58 -0500 Subject: [PATCH 090/107] update --- crossplane/templates/gitlab.yml | 46 ++++++++++++++++----------------- 1 file changed, 23 insertions(+), 23 deletions(-) diff --git a/crossplane/templates/gitlab.yml b/crossplane/templates/gitlab.yml index 3a20b9c..e89f80a 100644 --- a/crossplane/templates/gitlab.yml +++ b/crossplane/templates/gitlab.yml @@ -1,26 +1,26 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Provider -metadata: - name: provider-gitlab -spec: - package: xpkg.upbound.io/crossplane-contrib/provider-gitlab:v0.5.0 ---- - -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: gitlab-secret -spec: - secretStoreRef: - name: vault - kind: ClusterSecretStore - target: - name: gitlab-secret - data: - - secretKey: accesstoken - remoteRef: - key: secrets/gitlab/token - property: accesstoken +#apiVersion: pkg.crossplane.io/v1 +#kind: Provider +#metadata: +# name: provider-gitlab +#spec: +# package: xpkg.upbound.io/crossplane-contrib/provider-gitlab:v0.5.0 +#--- +# +#apiVersion: external-secrets.io/v1beta1 +#kind: ExternalSecret +#metadata: +# name: gitlab-secret +#spec: +# secretStoreRef: +# name: vault +# kind: ClusterSecretStore +# target: +# name: gitlab-secret +# data: +# - secretKey: accesstoken +# remoteRef: +# key: secrets/gitlab/token +# property: accesstoken --- From cb2798e20153be4b56ec36e9470fa1be97141f90 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 8 Jun 2024 13:36:03 -0500 Subject: [PATCH 091/107] update --- crossplane/templates/gitlab.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/crossplane/templates/gitlab.yml b/crossplane/templates/gitlab.yml index e89f80a..d655ea5 100644 --- a/crossplane/templates/gitlab.yml +++ b/crossplane/templates/gitlab.yml @@ -1,9 +1,9 @@ -#apiVersion: pkg.crossplane.io/v1 -#kind: Provider -#metadata: -# name: provider-gitlab -#spec: -# package: xpkg.upbound.io/crossplane-contrib/provider-gitlab:v0.5.0 +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: provider-gitlab +spec: + package: xpkg.upbound.io/crossplane-contrib/provider-gitlab:v0.7.0 #--- # #apiVersion: external-secrets.io/v1beta1 From 01e75840d3b484da82b562d24b9e6686e0ff93e8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 8 Jun 2024 13:40:49 -0500 Subject: [PATCH 092/107] update --- crossplane/templates/gitlab.yml | 34 ++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/crossplane/templates/gitlab.yml b/crossplane/templates/gitlab.yml index d655ea5..ea1dbdf 100644 --- a/crossplane/templates/gitlab.yml +++ b/crossplane/templates/gitlab.yml @@ -4,23 +4,23 @@ metadata: name: provider-gitlab spec: package: xpkg.upbound.io/crossplane-contrib/provider-gitlab:v0.7.0 -#--- -# -#apiVersion: external-secrets.io/v1beta1 -#kind: ExternalSecret -#metadata: -# name: gitlab-secret -#spec: -# secretStoreRef: -# name: vault -# kind: ClusterSecretStore -# target: -# name: gitlab-secret -# data: -# - secretKey: accesstoken -# remoteRef: -# key: secrets/gitlab/token -# property: accesstoken +--- + +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: gitlab-secret +spec: + secretStoreRef: + name: vault + kind: ClusterSecretStore + target: + name: gitlab-secret + data: + - secretKey: accesstoken + remoteRef: + key: secrets/gitlab/token + property: accesstoken --- From f6da30f4f4b17b402b5161804962dbff4c427394 Mon Sep 17 00:00:00 2001 From: pipeline Date: Sun, 16 Jun 2024 23:34:26 +0000 Subject: [PATCH 093/107] Update Chart --- durpapi/Chart.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index ef8dd0b..e1b1c70 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ +version: 0.1.0-dev0182 description: A Helm chart for Kubernetes -dependencies: -- version: 12.5.* - repository: https://charts.bitnami.com/bitnami - condition: postgresql.enabled - name: postgresql -version: 0.1.0-dev0180 type: application name: durpapi -apiVersion: v2 appVersion: 0.1.0 +apiVersion: v2 +dependencies: +- condition: postgresql.enabled + version: 12.5.* + repository: https://charts.bitnami.com/bitnami + name: postgresql From 750889d58cfb67d267a8191ddd57436328090ac0 Mon Sep 17 00:00:00 2001 From: pipeline Date: Sat, 22 Jun 2024 17:50:38 +0000 Subject: [PATCH 094/107] Update Chart --- durpapi/Chart.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index e1b1c70..da481fe 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -version: 0.1.0-dev0182 -description: A Helm chart for Kubernetes -type: application name: durpapi +type: application appVersion: 0.1.0 -apiVersion: v2 dependencies: -- condition: postgresql.enabled +- name: postgresql version: 12.5.* repository: https://charts.bitnami.com/bitnami - name: postgresql + condition: postgresql.enabled +description: A Helm chart for Kubernetes +version: 0.1.0-dev0183 +apiVersion: v2 From 1bab20668d8a54c27e73958440d4f44c52bd3279 Mon Sep 17 00:00:00 2001 From: pipeline Date: Sun, 14 Jul 2024 23:09:00 +0000 Subject: [PATCH 095/107] Update Chart --- durpapi/Chart.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index da481fe..5a5784e 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ +description: A Helm chart for Kubernetes name: durpapi -type: application appVersion: 0.1.0 dependencies: -- name: postgresql +- condition: postgresql.enabled + name: postgresql version: 12.5.* repository: https://charts.bitnami.com/bitnami - condition: postgresql.enabled -description: A Helm chart for Kubernetes -version: 0.1.0-dev0183 +version: 0.1.0-dev0184 apiVersion: v2 +type: application From b6e7d5065c367858c2a616f05155b071ff0629ae Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 24 Aug 2024 18:44:38 -0500 Subject: [PATCH 096/107] update --- .gitignore | 1 + 1 file changed, 1 insertion(+) create mode 100644 .gitignore diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..485dee6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.idea From b90fdc19911c0ed3f9d79abf1ef6f9db9b8458f5 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 25 Aug 2024 13:10:41 -0500 Subject: [PATCH 097/107] update --- metallb-system/templates/config.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/metallb-system/templates/config.yaml b/metallb-system/templates/config.yaml index bb2fbd5..505a798 100644 --- a/metallb-system/templates/config.yaml +++ b/metallb-system/templates/config.yaml @@ -4,12 +4,12 @@ metadata: name: cheap spec: addresses: - - 192.168.10.130-192.168.10.140 + - 192.168.10.110-192.168.10.120 --- apiVersion: metallb.io/v1beta1 kind: L2Advertisement metadata: - name: poop + name: pool namespace: metallb-system spec: ipAddressPools: From 00969f8183600c3becaebb246710199b87b30bcc Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 25 Aug 2024 20:10:08 -0500 Subject: [PATCH 098/107] update --- argocd/values.yaml | 22 ++-------------------- traefik/templates/middlewares.yaml | 3 +-- 2 files changed, 3 insertions(+), 22 deletions(-) diff --git a/argocd/values.yaml b/argocd/values.yaml index c91ada3..957a47e 100644 --- a/argocd/values.yaml +++ b/argocd/values.yaml @@ -1,28 +1,10 @@ argo-cd: - global: revisionHistoryLimit: 1 image: repository: registry.internal.durp.info/argoproj/argocd imagePullPolicy: Always - server: - #extraArgs: - # - --dex-server-plaintext - # - --dex-server=argocd-dex-server:5556 - # oidc.config: | - # name: AzureAD - # issuer: https://login.microsoftonline.com/TENANT_ID/v2.0 - # clientID: CLIENT_ID - # clientSecret: $oidc.azuread.clientSecret - # requestedIDTokenClaims: - # groups: - # essential: true - # requestedScopes: - # - openid - # - profile - # - email - dex: enabled: true image: @@ -54,9 +36,9 @@ argo-cd: rbac: create: true policy.csv: | - g, ArgoCD Admins, role:admin + g, ArgoCD Admins, role:admin scopes: "[groups]" server: - route: + route: enabled: false diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index 4fbe8be..89e99b7 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -29,8 +29,7 @@ metadata: spec: ipWhiteList: sourceRange: - - 192.168.10.1/32 - - 192.168.30.1/24 + - 192.168.0.0/16 - 10.0.0.0/8 ipStrategy: depth: 1 From 8a9004d4560c9ca8a515a94eeb457aee7f81bdc5 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 25 Aug 2024 20:11:49 -0500 Subject: [PATCH 099/107] update --- traefik/templates/middleware-chain.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/traefik/templates/middleware-chain.yaml b/traefik/templates/middleware-chain.yaml index 4f21880..21ac202 100644 --- a/traefik/templates/middleware-chain.yaml +++ b/traefik/templates/middleware-chain.yaml @@ -5,5 +5,4 @@ metadata: spec: chain: middlewares: - - name: traefik-real-ip - name: whitelist From df628900435facc699d5fbc797fb5415d21463f8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 25 Aug 2024 20:12:35 -0500 Subject: [PATCH 100/107] update --- traefik/templates/middlewares.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/traefik/templates/middlewares.yaml b/traefik/templates/middlewares.yaml index 89e99b7..bd625f6 100644 --- a/traefik/templates/middlewares.yaml +++ b/traefik/templates/middlewares.yaml @@ -31,8 +31,6 @@ spec: sourceRange: - 192.168.0.0/16 - 10.0.0.0/8 - ipStrategy: - depth: 1 --- From 6e4ae08a5ca57c53c361c8627d9c27006574fab8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 27 Aug 2024 04:46:57 -0500 Subject: [PATCH 101/107] update --- longhorn/templates/secrets.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/templates/secrets.yaml b/longhorn/templates/secrets.yaml index c10ab89..26c10a1 100644 --- a/longhorn/templates/secrets.yaml +++ b/longhorn/templates/secrets.yaml @@ -8,7 +8,7 @@ spec: name: vault kind: ClusterSecretStore target: - name: longhorn-backup-token-secret + name: longhorn-backup-token-secret2 data: - secretKey: AWS_ACCESS_KEY_ID remoteRef: From 0ff4cc5bad4ddb0a5aedd90240bd49c6f8ff9528 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 27 Aug 2024 04:47:51 -0500 Subject: [PATCH 102/107] update --- longhorn/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/values.yaml b/longhorn/values.yaml index 4389062..3f9c17d 100644 --- a/longhorn/values.yaml +++ b/longhorn/values.yaml @@ -77,7 +77,7 @@ longhorn: defaultSettings: backupTarget: S3://longhorn-dev@us-east-1/ - backupTargetCredentialSecret: longhorn-backup-token-secret + backupTargetCredentialSecret: longhorn-backup-token-secret2 allowRecurringJobWhileVolumeDetached: ~ createDefaultDiskLabeledNodes: ~ defaultDataPath: ~ From 34950703ca3505e1729a609e0ec604b27cb7b80f Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 27 Aug 2024 04:50:42 -0500 Subject: [PATCH 103/107] update chart --- longhorn/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/longhorn/Chart.yaml b/longhorn/Chart.yaml index 8c0a8ae..c26d7e0 100644 --- a/longhorn/Chart.yaml +++ b/longhorn/Chart.yaml @@ -9,4 +9,4 @@ appVersion: "1.16.0" dependencies: - name: longhorn repository: https://charts.longhorn.io - version: 1.6.1 + version: 1.7.0 From 0bb5570668b712854e5c55eec4c629737b64a4ff Mon Sep 17 00:00:00 2001 From: pipeline Date: Mon, 2 Sep 2024 12:10:58 +0000 Subject: [PATCH 104/107] Update Chart --- durpapi/Chart.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 5a5784e..ec403f5 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -description: A Helm chart for Kubernetes -name: durpapi -appVersion: 0.1.0 +version: 0.1.0-dev0186 dependencies: -- condition: postgresql.enabled - name: postgresql +- name: postgresql version: 12.5.* + condition: postgresql.enabled repository: https://charts.bitnami.com/bitnami -version: 0.1.0-dev0184 -apiVersion: v2 +description: A Helm chart for Kubernetes type: application +appVersion: 0.1.0 +apiVersion: v2 +name: durpapi From 86e50e6ed8c1c55c319c768e13fa65560bb34703 Mon Sep 17 00:00:00 2001 From: pipeline Date: Wed, 4 Sep 2024 23:52:49 +0000 Subject: [PATCH 105/107] Update Chart --- durpapi/Chart.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index ec403f5..4f19dec 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -version: 0.1.0-dev0186 -dependencies: -- name: postgresql - version: 12.5.* - condition: postgresql.enabled - repository: https://charts.bitnami.com/bitnami description: A Helm chart for Kubernetes +version: 0.1.0-dev0190 type: application appVersion: 0.1.0 +dependencies: +- version: 12.5.* + repository: https://charts.bitnami.com/bitnami + name: postgresql + condition: postgresql.enabled apiVersion: v2 name: durpapi From f196ed4fbbde4bafe98cc304f0932285a9505110 Mon Sep 17 00:00:00 2001 From: pipeline Date: Sun, 8 Sep 2024 10:42:20 +0000 Subject: [PATCH 106/107] Update Chart --- durpapi/Chart.yaml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 4f19dec..82255c6 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -description: A Helm chart for Kubernetes -version: 0.1.0-dev0190 -type: application -appVersion: 0.1.0 -dependencies: -- version: 12.5.* - repository: https://charts.bitnami.com/bitnami - name: postgresql - condition: postgresql.enabled -apiVersion: v2 name: durpapi +description: A Helm chart for Kubernetes +appVersion: 0.1.0 +apiVersion: v2 +version: 0.1.0-dev0191 +type: application +dependencies: +- name: postgresql + version: 12.5.* + repository: https://charts.bitnami.com/bitnami + condition: postgresql.enabled From 3a4e96aaf02bc7f4a2830765ad037e789be7914f Mon Sep 17 00:00:00 2001 From: pipeline Date: Sat, 28 Sep 2024 21:44:17 +0000 Subject: [PATCH 107/107] Update Chart --- durpapi/Chart.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/durpapi/Chart.yaml b/durpapi/Chart.yaml index 82255c6..5012185 100644 --- a/durpapi/Chart.yaml +++ b/durpapi/Chart.yaml @@ -1,11 +1,11 @@ -name: durpapi +apiVersion: v2 +type: application +version: 0.1.0-dev0192 description: A Helm chart for Kubernetes appVersion: 0.1.0 -apiVersion: v2 -version: 0.1.0-dev0191 -type: application +name: durpapi dependencies: -- name: postgresql - version: 12.5.* - repository: https://charts.bitnami.com/bitnami +- version: 12.5.* condition: postgresql.enabled + repository: https://charts.bitnami.com/bitnami + name: postgresql