From 1872b15441e7dcb2e54a642b421ae3821dde5713 Mon Sep 17 00:00:00 2001 From: Alex Lebens Date: Tue, 18 Feb 2025 18:57:17 -0600 Subject: [PATCH] add headlamp --- .../management/headlamp/Chart.yaml | 0 .../templates/cluster-role-binding.yaml | 0 .../headlamp/templates/external-secret.yaml | 103 ++++++++++++++++++ .../headlamp/templates/ingress.yaml | 0 .../templates/replication-source.yaml | 27 +++++ .../management/headlamp/values.yaml | 0 .../headlamp/templates/external-secret.yaml | 103 ------------------ .../templates/replication-source.yaml | 27 ----- 8 files changed, 130 insertions(+), 130 deletions(-) rename clusters/{standby => cl01tl}/management/headlamp/Chart.yaml (100%) rename clusters/{standby => cl01tl}/management/headlamp/templates/cluster-role-binding.yaml (100%) create mode 100644 clusters/cl01tl/management/headlamp/templates/external-secret.yaml rename clusters/{standby => cl01tl}/management/headlamp/templates/ingress.yaml (100%) create mode 100644 clusters/cl01tl/management/headlamp/templates/replication-source.yaml rename clusters/{standby => cl01tl}/management/headlamp/values.yaml (100%) delete mode 100644 clusters/standby/management/headlamp/templates/external-secret.yaml delete mode 100644 clusters/standby/management/headlamp/templates/replication-source.yaml diff --git a/clusters/standby/management/headlamp/Chart.yaml b/clusters/cl01tl/management/headlamp/Chart.yaml similarity index 100% rename from clusters/standby/management/headlamp/Chart.yaml rename to clusters/cl01tl/management/headlamp/Chart.yaml diff --git a/clusters/standby/management/headlamp/templates/cluster-role-binding.yaml b/clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml similarity index 100% rename from clusters/standby/management/headlamp/templates/cluster-role-binding.yaml rename to clusters/cl01tl/management/headlamp/templates/cluster-role-binding.yaml diff --git a/clusters/cl01tl/management/headlamp/templates/external-secret.yaml b/clusters/cl01tl/management/headlamp/templates/external-secret.yaml new file mode 100644 index 000000000..0a2f7d1c4 --- /dev/null +++ b/clusters/cl01tl/management/headlamp/templates/external-secret.yaml @@ -0,0 +1,103 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: headlamp-oidc-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: headlamp-oidc-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: OIDC_CLIENT_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /authentik/oidc/headlamp + metadataPolicy: None + property: client + - secretKey: OIDC_CLIENT_SECRET + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /authentik/oidc/headlamp + metadataPolicy: None + property: secret + - secretKey: OIDC_ISSUER_URL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /authentik/oidc/headlamp + metadataPolicy: None + property: issuer + - secretKey: OIDC_SCOPES + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /authentik/oidc/headlamp + metadataPolicy: None + property: scopes + +# --- +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: headlamp-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: headlamp-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/headlamp/headlamp" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key diff --git a/clusters/standby/management/headlamp/templates/ingress.yaml b/clusters/cl01tl/management/headlamp/templates/ingress.yaml similarity index 100% rename from clusters/standby/management/headlamp/templates/ingress.yaml rename to clusters/cl01tl/management/headlamp/templates/ingress.yaml diff --git a/clusters/cl01tl/management/headlamp/templates/replication-source.yaml b/clusters/cl01tl/management/headlamp/templates/replication-source.yaml new file mode 100644 index 000000000..847d33af9 --- /dev/null +++ b/clusters/cl01tl/management/headlamp/templates/replication-source.yaml @@ -0,0 +1,27 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: headlamp-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: headlamp-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: headlamp +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: headlamp-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/standby/management/headlamp/values.yaml b/clusters/cl01tl/management/headlamp/values.yaml similarity index 100% rename from clusters/standby/management/headlamp/values.yaml rename to clusters/cl01tl/management/headlamp/values.yaml diff --git a/clusters/standby/management/headlamp/templates/external-secret.yaml b/clusters/standby/management/headlamp/templates/external-secret.yaml deleted file mode 100644 index 6fee3c304..000000000 --- a/clusters/standby/management/headlamp/templates/external-secret.yaml +++ /dev/null @@ -1,103 +0,0 @@ -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: headlamp-oidc-secret - namespace: {{ .Release.Namespace }} - labels: - app.kubernetes.io/name: headlamp-oidc-secret - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/component: web - app.kubernetes.io/part-of: {{ .Release.Name }} -spec: - secretStoreRef: - kind: ClusterSecretStore - name: vault - data: - - secretKey: OIDC_CLIENT_ID - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /authentik/oidc/headlamp - metadataPolicy: None - property: client - - secretKey: OIDC_CLIENT_SECRET - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /authentik/oidc/headlamp - metadataPolicy: None - property: secret - - secretKey: OIDC_ISSUER_URL - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /authentik/oidc/headlamp - metadataPolicy: None - property: issuer - - secretKey: OIDC_SCOPES - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /authentik/oidc/headlamp - metadataPolicy: None - property: scopes - ---- -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: headlamp-backup-secret - namespace: {{ .Release.Namespace }} - labels: - app.kubernetes.io/name: headlamp-backup-secret - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/component: backup - app.kubernetes.io/part-of: {{ .Release.Name }} -spec: - secretStoreRef: - kind: ClusterSecretStore - name: vault - target: - template: - mergePolicy: Merge - engineVersion: v2 - data: - RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/headlamp/headlamp" - data: - - secretKey: BUCKET_ENDPOINT - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /cl01tl/volsync/restic/config - metadataPolicy: None - property: S3_BUCKET_ENDPOINT - - secretKey: RESTIC_PASSWORD - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /cl01tl/volsync/restic/config - metadataPolicy: None - property: RESTIC_PASSWORD - - secretKey: AWS_DEFAULT_REGION - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /cl01tl/volsync/restic/config - metadataPolicy: None - property: AWS_DEFAULT_REGION - - secretKey: AWS_ACCESS_KEY_ID - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /digital-ocean/home-infra/volsync-backups - metadataPolicy: None - property: access_key - - secretKey: AWS_SECRET_ACCESS_KEY - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /digital-ocean/home-infra/volsync-backups - metadataPolicy: None - property: secret_key diff --git a/clusters/standby/management/headlamp/templates/replication-source.yaml b/clusters/standby/management/headlamp/templates/replication-source.yaml deleted file mode 100644 index 3e4115866..000000000 --- a/clusters/standby/management/headlamp/templates/replication-source.yaml +++ /dev/null @@ -1,27 +0,0 @@ -apiVersion: volsync.backube/v1alpha1 -kind: ReplicationSource -metadata: - name: headlamp-backup-source - namespace: {{ .Release.Namespace }} - labels: - app.kubernetes.io/name: headlamp-backup-source - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/component: backup - app.kubernetes.io/part-of: {{ .Release.Name }} -spec: - sourcePVC: headlamp - trigger: - schedule: 0 0 */3 * * - restic: - pruneIntervalDays: 14 - repository: headlamp-backup-secret - retain: - hourly: 1 - daily: 1 - weekly: 1 - monthly: 2 - yearly: 4 - copyMethod: Snapshot - storageClassName: ceph-block-delete - volumeSnapshotClassName: ceph-blockpool-snapshot