alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

Automated Manifest Update (#2578)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2578
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #2578.
This commit is contained in:
gitea-bot
2025-12-16 02:46:11 +00:00
committed by Alex Lebens
parent 849c7b2c4c
commit 644873e2d6
14 changed files with 353 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
clusters/cl01tl/manifests/booklore/PhysicalBackup-booklore-mariadb-cluster-backup-external.yaml
View File

@@ -14,7 +14,7 @@ spec:
name: booklore-mariadb-cluster
namespace: booklore
compression: gzip
maxRetention: 720h
maxRetention: 2160h
schedule:
cron: 0 0 * * 0
immediate: true
@@ -33,3 +33,4 @@ spec:
name: booklore-mariadb-cluster-backup-secret-external
tls:
enabled: true
successfulJobsHistoryLimit: 1

1
clusters/cl01tl/manifests/booklore/PhysicalBackup-booklore-mariadb-cluster-backup-garage.yaml
View File

@@ -31,3 +31,4 @@ spec:
secretAccessKeySecretKeyRef:
key: secret
name: booklore-mariadb-cluster-backup-secret-garage
successfulJobsHistoryLimit: 1

34
clusters/cl01tl/manifests/booklore/PhysicalBackup-booklore-mariadb-cluster-backup-remote.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: k8s.mariadb.com/v1alpha1
kind: PhysicalBackup
metadata:
name: booklore-mariadb-cluster-backup-remote
namespace: booklore
labels:
helm.sh/chart: mariadb-cluster-25.10.2
app.kubernetes.io/name: mariadb-cluster
app.kubernetes.io/instance: booklore
app.kubernetes.io/version: "0.0.0"
app.kubernetes.io/managed-by: Helm
spec:
mariaDbRef:
name: booklore-mariadb-cluster
namespace: booklore
compression: gzip
maxRetention: 2160h
schedule:
cron: 0 0 * * 0
immediate: true
suspend: false
storage:
s3:
accessKeyIdSecretKeyRef:
key: access
name: booklore-mariadb-cluster-backup-secret-garage
bucket: mariadb-backups
endpoint: garage-ps10rp.boreal-beaufort.ts.net:3900
prefix: cl01tl/booklore
region: us-east-1
secretAccessKeySecretKeyRef:
key: secret
name: booklore-mariadb-cluster-backup-secret-garage
successfulJobsHistoryLimit: 1

7
clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
View File

@@ -54,9 +54,14 @@ spec:
cpu: 10m
memory: 128Mi
volumeMounts:
- mountPath: /config
- mountPath: /config-new
name: config
- mountPath: /config
name: config-old
volumes:
- name: config
persistentVolumeClaim:
claimName: code-server-config
- name: config-old
persistentVolumeClaim:
claimName: code-server-nfs-storage

58
clusters/cl01tl/manifests/code-server/ExternalSecret-data-backup-secret-external.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: data-backup-secret-external
namespace: code-server
labels:
helm.sh/chart: volsync-target-data-0.5.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.5.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup-secret-external
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_SECRET_ACCESS_KEY

58
clusters/cl01tl/manifests/code-server/ExternalSecret-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: data-backup-secret-local
namespace: code-server
labels:
helm.sh/chart: volsync-target-data-0.5.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.5.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/code-server/ExternalSecret-data-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: data-backup-secret-remote
namespace: code-server
labels:
helm.sh/chart: volsync-target-data-0.5.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.5.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

19
clusters/cl01tl/manifests/code-server/PersistentVolumeClaim-code-server-config.yaml Normal file
View File

@@ -0,0 +1,19 @@
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: code-server-config
labels:
app.kubernetes.io/instance: code-server
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: code-server
helm.sh/chart: code-server-4.5.0
annotations:
helm.sh/resource-policy: keep
namespace: code-server
spec:
accessModes:
- "ReadWriteOnce"
resources:
requests:
storage: "2Gi"
storageClassName: "ceph-block"

29
clusters/cl01tl/manifests/code-server/ReplicationSource-data-backup-source-external.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: data-backup-source-external
namespace: code-server
labels:
helm.sh/chart: volsync-target-data-0.5.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.5.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup
spec:
sourcePVC: data
trigger:
schedule: 0 4 * * *
restic:
pruneIntervalDays: 7
repository: data-backup-secret-external
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/code-server/ReplicationSource-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: data-backup-source-local
namespace: code-server
labels:
helm.sh/chart: volsync-target-data-0.5.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.5.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup
spec:
sourcePVC: data
trigger:
schedule: 0 2 * * *
restic:
pruneIntervalDays: 7
repository: data-backup-secret-local
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/code-server/ReplicationSource-data-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: data-backup-source-remote
namespace: code-server
labels:
helm.sh/chart: volsync-target-data-0.5.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.5.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup
spec:
sourcePVC: data
trigger:
schedule: 0 3 * * *
restic:
pruneIntervalDays: 7
repository: data-backup-secret-remote
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

2
clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
View File

@@ -74,7 +74,7 @@ data:
href: https://jellyfin.alexlebens.net
siteMonitor: http://jellyfin.jellyfin:80
statusStyle: dot
- Jellyfin (Alt:
- Jellyfin (Alt):
icon: sh-jellyfin.webp
description: Media server (Alternate UI)
href: https://jellyfin-vue.alexlebens.net

2
clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
View File

@@ -24,7 +24,7 @@ spec:
template:
metadata:
annotations:
checksum/configMaps: 518d12f6e6b587145a3309d2bf7fe6a4de5e9a13a8a0554285e12c80d13d0c68
checksum/configMaps: 2984ee8cd8be3b7e2ae8d51162de5f784476d0a22410a4f354887e6e9c1f8cdd
checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
labels:
app.kubernetes.io/controller: main

28
clusters/cl01tl/manifests/jellyfin/HTTPRoute-http-route-jellyfin-vue.yaml Normal file
View File

@@ -0,0 +1,28 @@
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: http-route-jellyfin-vue
namespace: jellyfin
labels:
app.kubernetes.io/name: http-route-jellyfin-vue
app.kubernetes.io/instance: jellyfin
app.kubernetes.io/part-of: jellyfin
spec:
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- jellyfin-vue.alexlebens.net
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- group: ''
kind: Service
name: jellyfin-vue
port: 80
weight: 100